{"report_id":"efdb1cc6-21d1-49e3-9891-206479ad333e","version":0,"status":"done","tags":[],"date":"2026-07-02T13:31:46Z","url":{"schema":"http","addr":"kms-tools.net","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kms-tools.net/","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"title":"Download KMS Tools Free - Windows \u0026 Office Activation","dom":{"size":34353,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (636)","md5":"24ebb603b9a778cc6a45a0afd8d577c6","sha1":"fbdde3e748c66b4dda870fea9ea14acb45e96501","sha256":"371a9f8f97db501e8ccf1d397d802dede4304151229cb1d3c418c69e7219c8f5","sha512":"dd5773b59db49ae0a4e374edaf6bcdf9a02c0ddb4baeae2a364fd4479e02e7545000d0b75b7e42251f0e847b5a669d65e53a65ebbfdee883cc02b48d349216b5","ssdeep":"768:og5Pa4ySyrzTuuNWKKK9/ZcQA7gA2rAEAFv6A0AFfLtA:h5PAuuYKRcQGgbRM6dsy","tlshash":"f9f2b72384f57067025383e36aab7b1a6ef29153c1491804b1bc0f94efd6da3cd6367a","dom_hash":"domhash2d48f4a746b19b291ff6a36758d7b693","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kms-tools.net","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-06T13:31:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-28T22:30:22.905773Z","alert_count":0,"request_count":1,"received_data":485934,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"kms-tools.net","ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":52,"request_count":26,"received_data":1271283,"sent_data":13384,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":1,"received_data":15846,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-28T22:19:26.805281Z","alert_count":0,"request_count":8,"received_data":363015,"sent_data":4585,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kms-tools.net/","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb487d9d0793deaec60184fe21e47b26","sha1":"f79422a740bd87c2bb808400dd7dc1c406389268","sha256":"3542766c689801ac7b948dcc966ff15dd51990a92359dfbaf57badae07a9a4af","sha512":"6c77b169557527a6977e5743c46b3602a11455aa38f206f09b163df2e87e7cae362461c58016b24a1f16b65f62b5050c0b2db2da7993861be6ee48d8fa5b013d","ssdeep":"","tlshash":"efc02bcc210a4cb041eb27008b7ffa00f006331ca4d06e32081b23444d20e13db94854","size":149,"data":"","first_seen":"2026-07-02T13:32:07.635317Z","last_seen":"2026-07-02T13:32:07.635317Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d83952e1c6a6a8b6468acd2539d3a4b7","sha1":"253417077fbda91cef34907cc5603bfa297064db","sha256":"3e71d500ed37ca37cd241b99e66c9e54a4d87e51d8f0cfc080afbdbef5f64434","sha512":"9996bdc8cc93a5616078f45d473798414e60cc8535530615617a8243a339e1de6fcce29bdb416c4f35e2a6744ae80e5c6e35ba620363b6e3469cff0e368c09c1","ssdeep":"","tlshash":"85e0725e30c2003a02b348a633f7820a25262b0bd48e8b137e5fc4d6af24ca5044254c","size":303,"data":"","first_seen":"2026-07-02T13:32:07.636731Z","last_seen":"2026-07-02T13:32:07.636731Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/link-download.js","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40f4d72541a62ed4d66fb3c66a0c7b96","sha1":"303859021c0569cdcf7f0647b96cd411053342dd","sha256":"7cbea4ebcc6fcd47c0dab47a85095fdabe5a205fec3e5b3326a258287478b0fe","sha512":"3d75c747c7a8a7d1f8af1dfab6975b757c60c421d176cd58e217f108d6c82798c8ef42a48649ebc362ecf52b51c888ea4bf979e992e94c3b6e343bd615f51f53","ssdeep":"96:qWVlWYQCbadyQSVBdmtyurC7KZ43GCGiQZDAAvtguS1jz5gC9alhJNM:bVlWYQFyQ+urCuZSJGiQPVg/Bz5R9EJS","tlshash":"f981219e78d7a0760623713c4bdf7945b522a0331009cd05bc6cda85afb0971b6baede","size":4108,"data":"","first_seen":"2026-07-02T13:32:07.611412Z","last_seen":"2026-07-02T13:32:07.611412Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/scripts.js","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b11cfa22301bffb45bd0ac588e317927","sha1":"bf77c47c25b60d4ba237a61bf9c03c37f79798bb","sha256":"6b710082e92fe9a2ff8d65b860f8508affd28e9e5bf8e780126d86f8e0f90479","sha512":"f768172599c1cf8d4b88581aaf9609f0b2ae4e88d515fc727e71bc122b94b0d8553e545529045df3d2ed2390502fd6c6955cb6445aeec38662e3228059104f66","ssdeep":"192:hGobyIMKw+WHQeNJfOqJD6p9RF3F09IxUZeBIcYVezGIH3E9Y3F4x3IfduTi2MgT:h3yIM5+WweNJLcp3F0IeezGUff18xlFd","tlshash":"e142625a21b3203a407365be67cf86953b3410476109ca0a7e9d97491fc2f74aff2bd9","size":12909,"data":"","first_seen":"2026-07-02T13:32:07.627622Z","last_seen":"2026-07-02T13:32:07.627622Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-NQBQS0F7V7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"52e100c3cdc3c44669e34bd6f5527484","sha1":"0696383d0affa0f664c990f1be146b0a656b8962","sha256":"4ddcef297bce2b3ceb55225e5a34c41335c79eee4265b6c833dc1222f17b35bc","sha512":"57f88b76d169f1790b0c3b26644287d8e43779da5832070cf4836b2a6d60148f6618f08972b0273670a944c8503ce18afe0485f37b2e7eef422a409a7fd0655c","ssdeep":"6144:9LAjtCn0dF5iqGCvJwXQd7pcxIGQznsWjfGUpEGmwvPrLi:xAjzFY0AQQUpEZEni","tlshash":"6fa4f8cdb3d674265396f478903f018ba57b28a2b44cc899f189cce42e7465a8277f7c","size":485330,"data":"","first_seen":"2026-07-02T13:32:07.622498Z","last_seen":"2026-07-02T13:32:07.622498Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kms-tools.net/assets/flags/Turkey.png","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.882Z","timestamp":1782999082882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/flags/Turkey.png HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 16 Dec 2025 12:51:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694155c2-2b75\"\r\nexpires: Sat, 01 Aug 2026 13:31:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DWVs9p8PdIHlKnIoe9KatIx8DqMdR7YZCsA85cmjUlPbhjU4JUpQYL52ZCcwOr77PiZ%2B8VuIBzWeRaeYt9cjXN%2BotTSSga5EhyrVaQjkf%2Fcz9F7HNtEFse36XigINznp\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a14e02ac0ea5120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11125,"size_decoded":11285,"mime_type":"image/png","magic":"PNG image data, 800 x 534, 8-bit colormap, non-interlaced","md5":"e723f0a4b378c21325c9bf28d4513c78","sha1":"b9dca17011440366741f14ea4fadfb1c5388c81c","sha256":"7d24a9f3106f27f77571a965b0b2bf1f318011fcf65023074e145413f59458f5","sha512":"b3a4d3565e8707275d6b5b4b2ca49a99c585c0127e79340f345c6928bb2121a99c4a4cd5bd0b66b68592e17a5c9f5bf7d1ab926646c0b743448c6565ce4e192f","ssdeep":"192:KfXkAZhK0eVLuzNL7AhfBNHP9UlK7lMs1a9AqYbKINqWCUKDPQ:w0sY0zt7EZNv9Vr1avYbKIsWCzQ","tlshash":"45325b548bd86921967d16b25b338b7dfe24c7df2c620286439334333d27ad8b6b0b24","first_seen":"2025-10-29T00:38:51.799426Z","last_seen":"2026-07-02T13:32:07.594619Z","times_seen":15,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/images/ratiborus-kms-tools-logo.png","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.886Z","timestamp":1782999082886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/images/ratiborus-kms-tools-logo.png HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 05 Jan 2026 06:34:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695b5b6e-1608c\"\r\nexpires: Sat, 01 Aug 2026 13:31:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6HyPBXn9LTKdgfrMPno1QZtal7sZShnDRe37OrqhxAR9IUSelEuN59AlnqnCZv2zcLZaUzd0dHpmyVUSLve5bLL11UmxGDdAMKLUWFdOlDHnGxnmzKPmjV2V2XZJbkE%2B\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a14e02ac0ea7120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90252,"size_decoded":90057,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"3eb56f4832d49d14e26e31733fdde34b","sha1":"76f8417ed1c54a15d9729a530dffba513b3cd45c","sha256":"4443f38e6af6d051da4a5fcfdf726e9a84950b30c7c517317bc03091e7366fe6","sha512":"c897fb89f275dbf169dc4dd060445cd081ef2944bc0f898fd467c6d5fcbb8c4cfd64bcbb396d7e6896f7c1a3c0a6bbaae501cbdc45541f935cd5861786eb6e40","ssdeep":"1536:X63P+xuu6IAV2DVBYr2p7F4YTw3wfC4sFmlqa0TAGda/r6qrt9+000q1jxAE:NxCw/Yqp7FvE3Z4f0kg7Co000q1GE","tlshash":"42930269ba024203e7e9923affa4b2835364181d328fb3e5e51f455c21c97ce7d2ad64","first_seen":"2026-07-02T13:32:07.595302Z","last_seen":"2026-07-02T13:32:07.595302Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:23.001Z","timestamp":1782999083001,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 02 Jul 2026 13:31:23 GMT\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":1524,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cd46912baf19b9fe32c8e6a6320bcaf9","sha1":"08ee007e9656ed41ffbabdb06701a3895bfa0094","sha256":"92a04c9ec1ae41b88f1eda4e7c4d74ffea87294a25c63c0fcdd7472dd82f1035","sha512":"33912fabd74bd7afee0c49ddd4b89161dfc7939fabb2ac6a75b9a5b4fd3e745fcdb6a4dda2ba6ddef3c9177f4ac972ff43239bc2f1af456c7530e7b981510b9e","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kc:8KYXuM0p2+g7r","tlshash":"3f628892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T14:17:01.635764Z","last_seen":"2026-07-02T15:29:55.172239Z","times_seen":4993,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":15,"send":0,"wait":35,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:23.186Z","timestamp":1782999083186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kms-tools.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 01:48:31 GMT\r\nexpires: Fri, 02 Jul 2027 01:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 42172\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-02T18:07:15.912412Z","times_seen":224900,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":20,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:23.192Z","timestamp":1782999083192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kms-tools.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 26 Jun 2026 18:21:45 GMT\r\nexpires: Sat, 26 Jun 2027 18:21:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 500978\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":18720,"size_decoded":19533,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-07-02T17:48:39.777746Z","times_seen":10458,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/flags/France.png","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.862Z","timestamp":1782999082862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/flags/France.png HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Jul 2025 11:58:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68651efa-4d7\"\r\nexpires: Sat, 01 Aug 2026 13:31:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TsY9NGPki%2Fm7mrM0KiLmFjdxg8D50i%2FC5qKTKgHeOVHoL7nwf3oXtYzT%2BV9q3eu6ezlCbCMOi9%2Fadkv9SMLGqV660cyO0%2FiBLtDvxUw8nUFWoCwgfaos6XeZKVN3t%2FV%2F\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a14e02abee97120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1350,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"7213a16165e9ba30d33be8c953faae28","sha1":"9cad440e7ab01350a2e15833bb349c38adf82ba5","sha256":"29de8b1fa3269ff8c8638d8ca8a8c64eccda3b79188c9fadb9b9d32272e6078b","sha512":"01f83f7e8663ed0b25083df977ee320330d5be5b44121e34234b4c9e54925758653c4e20c91608c58ee35282d2d8435ecd02dd72e5a727510aee030d5846e639","ssdeep":"","tlshash":"3e217fd2d88e757fcda96b7133eab235cce306070d2004543892dd2298e8d027a77e6d","first_seen":"2024-12-08T05:39:00.972427Z","last_seen":"2026-07-02T14:20:22.452035Z","times_seen":31,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/flags/Spain.png","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.867Z","timestamp":1782999082867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/flags/Spain.png HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Jul 2025 12:00:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68651f68-2188\"\r\nexpires: Sat, 01 Aug 2026 13:31:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lKG%2F%2FwA1uZJ3aPQtT73xkefvCF03ivBIPMVCna2Qg5BHON0FRv%2FHmxaCoM0REvhrv4anM83XATpvWWje7nlJqnFxSKRBD%2BGUQynOekNgXG6zufJUImp0JURKcoa1Rd51\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a14e02abee99120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8584,"size_decoded":8121,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"530c161d2a2c44e69fa7f0134bb3b008","sha1":"c2db6aa06e2ff3707a739e87c08a93d2b23c01db","sha256":"bffe365be6726c7f7b9ad4966b2de413e4a7b4ac4ff7aac1a545015915da8852","sha512":"066c524597e083980312019c0bc9b3154e37603851b0b5bd71960e0701189a083b9fd1c0790edae49883d2f21c6e5a9d035833343f61a9439961cba47c3389c5","ssdeep":"192:eT+hIKePAIN3zJ8VfDyqNi2ZprkfnY/+jU6gOVBqK9nWwZX:eSpePEbyd2DkfY/iTgFKgwZX","tlshash":"500238d5cb998dbbc8b1c7b601c73d580ac38630a37713821fca82ad6e5b7250161e66","first_seen":"2023-08-13T10:47:13Z","last_seen":"2026-07-02T14:20:22.362789Z","times_seen":41,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/flags/Poland.png","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.877Z","timestamp":1782999082877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/flags/Poland.png HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 16 Dec 2025 13:54:18 GMT\r\netag: \"6941648a-de\"\r\nexpires: Sat, 01 Aug 2026 13:31:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vxS0LpfXHAY1%2BadRhG1UXU%2Bls8bIeubwwPrT0ud6MexgSPWoExWknTN7waqYynrogHwziO2pmJ9ibf9yErFW9EKE3xW%2F3boAg66PUfrNt1WGVAHei%2Fy2iAapp2rGYsb9\"}]}\r\ncf-ray: a14e02abfea0120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 222\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":222,"size_decoded":990,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"087f4bdfed90adbe13899805a482295f","sha1":"e892de8ab5e20a83e87793acb0d22f9398b8eb1f","sha256":"115004b9d63d480a42b3489e7e1b478e7b2a3fd135945b61ce2cdce2ba6a1683","sha512":"0b31674ff96f676db111d7b328c21084bc5bf310c624dc5470ad97e97bbc1b03376c6b63c475accac9ea7f14f1516e2607a52fc35e0b9707d775cef3b20316a5","ssdeep":"","tlshash":"71d001d15726801d4f0d28bf3fef1aa681741090609e86d1a9d74da53b778b1d7a8238","first_seen":"2026-01-13T16:26:19.973982Z","last_seen":"2026-07-02T13:32:07.601701Z","times_seen":12,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:23.191Z","timestamp":1782999083191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kms-tools.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 01:48:31 GMT\r\nexpires: Fri, 02 Jul 2027 01:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 42172\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-02T18:07:15.912412Z","times_seen":224900,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":38,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/flags/Czech_Republic.png","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.876Z","timestamp":1782999082876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/flags/Czech_Republic.png HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 16 Dec 2025 12:46:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694154b0-91b\"\r\nexpires: Sat, 01 Aug 2026 13:31:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x9Bcx1ODmgi0rxBY8h88lH2W5YtZVkJL5lhlHijWdkg9zoDb2BETpJzJIgEnE8hslfJ98Pp%2BqRHzpEXuDWT%2BhV%2FEY3YM20FxFYKkleZYm7GlonChB1%2BNiWlYHOw8%2FiSr\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a14e02abfe9f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2331,"size_decoded":2916,"mime_type":"image/png","magic":"GIF image data, version 89a, 120 x 80","md5":"ebb5200740061ca1cbd23ea92592c664","sha1":"e6b9b719160e6be74b9522ea6fd0907c87395632","sha256":"10ce1da0942e1a69d9d401f26fe6e24d51eb49e7fbf018991fa456a3b1c265ad","sha512":"06660712c8630f3f1d770b7ef0b8af9f40c2f930f2684442e0b9695c7ad0bca538c374a0bed7b176ec2d7fec6c9eb06e4b6e9f836bbb849e79d2ac4cd2234cf3","ssdeep":"","tlshash":"c641f94df5c45513fa2578f4938e28a542119f6023b96a6f15cbd0b8d410f955bd1f4c","first_seen":"2025-10-20T23:32:26.815365Z","last_seen":"2026-07-02T13:32:07.603467Z","times_seen":12,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/flags/Vietnam.png","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.883Z","timestamp":1782999082883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/flags/Vietnam.png HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 16 Dec 2025 13:55:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694164c4-4d4\"\r\nexpires: Sat, 01 Aug 2026 13:31:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a6aL2J%2BUEfwdYMDsWGgdsQwHuOzlhLfBGPLPms8VQgXrBV7A336EXp2rSViAuImlJcKJtXXkPUxKwHA9d5xAc9r8rzqlX7RQhJYuJMeOEX%2BBEbws8F60JucR6iGSl%2Bx0\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a14e02ac0ea4120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1236,"size_decoded":2022,"mime_type":"image/png","magic":"PNG image data, 275 x 183, 8-bit colormap, non-interlaced","md5":"af3417f25e7b9a7db8dfd325c0e23f2b","sha1":"ceac78d36c3c799cb38e9c880d6c298740c70580","sha256":"27a636d46104b3879faa18873e9e47d59819e71e498ad6a9a3b564e041ef5a01","sha512":"e5872e88f340e055e14d5c658d2bd57a087bdf88f631eb48bce1390b6b0ff6afaea483b9629bb9a20df3db8e575b5c470e9ee90ff0f261d5cb21f6be29e69494","ssdeep":"","tlshash":"cb21e76af6851ab7d865087952de4b7d779770121f1bd7a6d6103b4f0e9c01383d8102","first_seen":"2026-01-21T14:56:34.191993Z","last_seen":"2026-07-02T13:32:07.605062Z","times_seen":8,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/favicon/apple-touch-icon.png","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:23.360Z","timestamp":1782999083360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nCookie: _ga_NQBQS0F7V7=GS2.1.s1782999083$o1$g0$t1782999083$j60$l0$h0; _ga=GA1.1.523884516.1782999083\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 05 Jan 2026 02:28:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695b21b2-757d\"\r\nexpires: Sat, 01 Aug 2026 13:31:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pjpN1xZ9SzQ6aGMGFKBXGhK%2BGorvplbL78QZrvy2%2Fk6%2FC%2FiyFaoPhrIkfqC%2FOco555zfHhb0ZpWXKApdsUEuNd3Mh0od6AZZ9EPn8vsuHZzyBp4Xq%2FcqAzTo3tJkJK6k\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a14e02af0f33120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30077,"size_decoded":30888,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"23b678874b536d699fbec4453b464116","sha1":"1e6ac6bc3652adc98333309f468e13856908fe3a","sha256":"090c9d98f8787384b95a2c0845f7d7b755c095aaca12fefafc033dbf53440526","sha512":"681b900d8263fb1632298f8de7efdbffd4efc110ee50db1b56e5ce833c098de2c2484157497e15c5c6c53181b1035453a7631ede41e25f8df0afecc02b597068","ssdeep":"768:SIqCzkW7jChi3A5pCxaX5xOrCErY5l0cG7OU+I2nI93CP:ShCzkW7jp3AGaXz3l0DfR2n/P","tlshash":"1cd2e167d6d6985c57d07ca20bbc5b0431ac023fde2aa651b7eefdb92184c638014ac2","first_seen":"2026-06-07T06:07:38.442327Z","last_seen":"2026-07-02T13:32:07.607309Z","times_seen":2,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-02T13:31:22.175Z","timestamp":1782999082175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:22 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 04 Feb 2026 06:19:02 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nt0aTJexhWcp7WNdhFqh24ccAW82ufFqM5pzfSHfPcVYVkAP5XJgcMOzeBgRg6goBKnYpyANZhqLx2FJ%2FkIZeuGJYVXqWqRH1R6Hy2rKicaFXvzH1ZRvbMm%2BnRM7KR90\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a14e02a7ddbe120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":33689,"size_decoded":7522,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (630)","md5":"d2a6f9dcc39f0283b7fa4e3174ee13de","sha1":"6cc924fb35ba7764baea13deed4915c8e6454d7d","sha256":"cba21f84e79f69c90d8f7d0b38f9b106686602e486d2d06a6944a59df6b97a87","sha512":"1432737e32307054b9cf7a4769e969528f860d75a8e6c79b706067451a081f6506190ad12d3643c61cab3178b5d1e5a8dfd41ad1b4e19f8d8dcd8d089f14ca34","ssdeep":"768:amoPany7yrLuuVq009/ZDQA7gA2EAEAFv6A0AFI6r:boPEuuo00DQGg0RM6dsR","tlshash":"1ce2a62344f5b073025382e3aaaa7b1a6ef39153c1491804b1bd0f94efd6d63dd6367a","first_seen":"2026-07-02T13:32:07.609764Z","last_seen":"2026-07-02T13:32:07.609764Z","times_seen":1,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":17,"connect":22,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/link-download.js","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.848Z","timestamp":1782999082848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/link-download.js HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 06:04:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6982e152-100c\"\r\nexpires: Fri, 03 Jul 2026 01:31:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2BZER5Kgna29B%2FgEoDeDL3Ik0ZhQDRCZ8rLZRjRoChz7m8gwxdA188vicbXEUUJDsXCu5O9cyEIaYmrbbY8hqxTb6i1RortNM5dhrhBdUkRwN5%2BTIi2l9v6uC8yUnP2Q\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a14e02abce91120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4108,"size_decoded":2273,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"40f4d72541a62ed4d66fb3c66a0c7b96","sha1":"303859021c0569cdcf7f0647b96cd411053342dd","sha256":"7cbea4ebcc6fcd47c0dab47a85095fdabe5a205fec3e5b3326a258287478b0fe","sha512":"3d75c747c7a8a7d1f8af1dfab6975b757c60c421d176cd58e217f108d6c82798c8ef42a48649ebc362ecf52b51c888ea4bf979e992e94c3b6e343bd615f51f53","ssdeep":"96:qWVlWYQCbadyQSVBdmtyurC7KZ43GCGiQZDAAvtguS1jz5gC9alhJNM:bVlWYQFyQ+urCuZSJGiQPVg/Bz5R9EJS","tlshash":"f981219e78d7a0760623713c4bdf7945b522a0331009cd05bc6cda85afb0971b6baede","first_seen":"2026-07-02T13:32:07.611412Z","last_seen":"2026-07-02T13:32:07.611412Z","times_seen":1,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/images/Screenshots/kms-tools-interface-server-room.png","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.887Z","timestamp":1782999082887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/images/Screenshots/kms-tools-interface-server-room.png HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 07 Jan 2026 08:21:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695e1778-8fa77\"\r\nexpires: Sat, 01 Aug 2026 13:31:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lPgwB8leaz34bdkJyD0VY8JNRY1gTg5u0Yl%2BXOL4pbLOvGfYls9v3iOQuNu5IKDcAql73m%2BobjsYEEWrOGLos1sYzVW5gWE%2FMuZvJjOQpL%2Bg5BGM0xiQv3IxdvT3evwk\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a14e02ac0ea8120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":588407,"size_decoded":588729,"mime_type":"image/png","magic":"PNG image data, 1184 x 864, 8-bit/color RGBA, non-interlaced","md5":"226c31ac28481d6ea49b6f0c3a0778b9","sha1":"9a0e2fccf178f7962aa2fc52cdb71861c7b6e99c","sha256":"18e62b27359a1efdae28541c08bc14bc0b5fbdc0d431f96779662f6e1c6c8e19","sha512":"8b3e9224f88794f5ca3ebce1ed9f09e44c2e90f39d3149af5cd8d9849e9ce63aa169fab0e58294f22e947917f336e2b2267e144637cb9255acb3eba71bac2df3","ssdeep":"12288:b9Up+YI3Y0xIF65RkycILklreP2nJdvKUXCh/lTYkP/8bl7iufwOU:bupbII0uFwRkm4lreMVTS/P/Ju49","tlshash":"76c4233b81c1ce1b634a09e1160e14f58466491f1c33066b898a98fffb7fbb9e75586c","first_seen":"2026-07-02T13:32:07.613345Z","last_seen":"2026-07-02T13:32:07.613345Z","times_seen":1,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:23.189Z","timestamp":1782999083189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kms-tools.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 01:48:31 GMT\r\nexpires: Fri, 02 Jul 2027 01:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 42172\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-02T18:07:15.912412Z","times_seen":224900,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":32,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:23.194Z","timestamp":1782999083194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kms-tools.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 28 Jun 2026 12:23:01 GMT\r\nexpires: Mon, 28 Jun 2027 12:23:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 349702\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-07-02T18:14:45.954077Z","times_seen":17469,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":51,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/flags/Japan.png","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.874Z","timestamp":1782999082874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/flags/Japan.png HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 16 Dec 2025 12:50:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694155a0-b13c\"\r\nexpires: Sat, 01 Aug 2026 13:31:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qq0PpdMUInrw92Gfzhy86uALEOlWD%2F4%2B6Kmnb8p7HG4Bf11btAXFMRah2SoUHP6K1p5zF%2FvcAm7k0tWoaCZ4kXhPoKCaUCyQ0ZBLKSjdGAZ%2FZOeCjYUOs74PonBgwBib\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a14e02abfe9e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45372,"size_decoded":30052,"mime_type":"image/png","magic":"PNG image data, 2560 x 1707, 8-bit/color RGBA, non-interlaced","md5":"506b1028554f44db158db3ce4e623b22","sha1":"0ab34befe54628d00cdfbf886f9fe7b773c3ee3f","sha256":"51119fe805a468a80e6cecace1a16409aa7068b49f325c482703df8334d2a9aa","sha512":"3468a1420df59f743d40bde0bf7aa3fe66103a99cb6b96727441d154f8070c681651bdb8ae08d49706a52d2921a6d446142c776d5b484cd34d46bec0cf96c78b","ssdeep":"768:ipoXQ1N6e13X0NTlYvdqHN+i/HKqTKZG48dOSz1djRJkGAjdQPDyXr0qi7:ipf1U20EvdqHNhqqm8jdJnjRSvubK0f","tlshash":"7c130777f2104cb9d078ce7e899b4b3077f364361597973b3278a419bca26171e1ab90","first_seen":"2026-01-21T14:56:34.176395Z","last_seen":"2026-07-02T13:32:07.616067Z","times_seen":13,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/link-downloads.txt","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:23.200Z","timestamp":1782999083200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/link-downloads.txt HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kms-tools.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VHMe379n1jUFapLEKgBprqdxoJZctiU9H%2FKXNYI3TcvdtU9NTDqjX9WM0DHQMNtGvQBkPxrMgPOuNDBC0ZpXmb8J6cTGCQR0u3d9FagFgYbMnoyhcVtWgSEIds2c4Xhv\"}]}\r\nlast-modified: Wed, 04 Feb 2026 06:31:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\netag: W/\"6982e7ca-21a\"\r\ncf-ray: a14e02ae0f15120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":538,"size_decoded":868,"mime_type":"text/plain","magic":"ASCII text","md5":"92d7a55628d65d5e968d0c659ee9a8a3","sha1":"7f3e336dbbd4948c6274e48ac69735e3553ffb53","sha256":"6a4f276f6ffa00c2eee21a95a2a53715a6a5b004417d83247c9ba4eb57d826cf","sha512":"1f4211986e3cc476199d7a76edf245db5d38bc8037158223a6429fc237a2d1512d926eab4809649ae2c8f73cf2bb4bb23d765b76768850335580a31a675d4e1c","ssdeep":"","tlshash":"05f012efbc6a5c901eb9c17259d06300f71d603644e64c76f97c84a5696c76634ed314","first_seen":"2026-07-02T13:32:07.617203Z","last_seen":"2026-07-02T13:32:07.617203Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/flags/Thailand.png","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.881Z","timestamp":1782999082881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/flags/Thailand.png HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 16 Dec 2025 13:54:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694164aa-2b86\"\r\nexpires: Sat, 01 Aug 2026 13:31:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JEn4rmv0l8VtqeoKPsfIKNq5YyWnrdt94sr82cOO7MxmEOGhi5pZlth8toiq4NuCSf6VyRV7M%2BI%2B%2FzA7ae10r3YAvTWyk%2FbX8Y5qfM%2BTxYJkbnLxRKu7%2Fxp6uDq%2FiTIn\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a14e02ac0ea3120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11142,"size_decoded":1969,"mime_type":"image/png","magic":"PNG image data, 814 x 547, 8-bit/color RGBA, non-interlaced","md5":"a04b7f2cecca1828c473b3e4f0714968","sha1":"3f5fc984cd479c680ce15ba66be4821a6b20c821","sha256":"58fce49f05d3369b7a776e21db859f76894a6fbcc9627cf79d8d9b1129adaf04","sha512":"083fe405fc34bee2ac3554de102e7500b8a219def55c0c9c2b5e95b8c84c7351c17de0307906bf0eb35238cd2b1f71c0bc7097ff782b38b1ee4c67da189302a0","ssdeep":"192:Og9O9O9O9O9O9O9O9O9O9O9Yrrrrrrrrrrc/1WlO/1WlO/1WlO/1WlO/1WlO/qT:OU++++++++++YrrrrrrrrrriRRRRW","tlshash":"ec32eecb79ef3172d79a18a3e3a9f1be0127cc6d62141807b579ea81b1375681c3a474","first_seen":"2026-01-21T14:56:34.161381Z","last_seen":"2026-07-02T13:32:07.619129Z","times_seen":13,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/flags/India.png","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.885Z","timestamp":1782999082885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/flags/India.png HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 16 Dec 2025 13:56:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69416506-36746\"\r\nexpires: Sat, 01 Aug 2026 13:31:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nWF5gcCwS6zkOBqn76Afnx0XGpc3j%2F%2BrdfEj7TPDqFNKrX7Z4Md6dzA9JohQCwy5SOe4gCWcmuSZNJz38H%2FLGJf8xXXp4IoRcsTsUVHzRiRXy6n690jqCt%2BWBBcvd7e5\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a14e02ac0ea6120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":223046,"size_decoded":160426,"mime_type":"image/png","magic":"PNG image data, 4500 x 3000, 8-bit/color RGBA, non-interlaced","md5":"607b9f69862d76af04b474113c0c7ff5","sha1":"34fdac9c060c00f11c91d78c69ec6b67116d89f5","sha256":"ff23c2563f52a779f19000c53479c330ee78f97c20768ec4a1788948db918be9","sha512":"6f7fcb7631420e84b3ccae877d54f7884bef6ce4782606432119580c20b48ba2770c97eccff9c6740b1f7420ca84267b63f0af196746dc828bb1b40069db543b","ssdeep":"3072:3VFze1qSYsbzErVmtl7nuKECt/gpNnTR8/HzMWYN75yR:3VFubfzaKEygnN8/4HlK","tlshash":"1f24bf7479978afeda0960719e87bf0e37742b53a5880333d7e6db78ac421b1920f518","first_seen":"2025-05-02T12:10:02.194403Z","last_seen":"2026-07-02T13:32:07.61981Z","times_seen":29,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/flags/China.png","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.872Z","timestamp":1782999082872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/flags/China.png HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 16 Dec 2025 12:54:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69415678-23e7\"\r\nexpires: Sat, 01 Aug 2026 13:31:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpOHzZp%2BxIYW6NhFFNhFQXcG%2F1Ji79CxZrhNQOv2ElpKyaYjcLWnMwzMmWHzmzRAZGJbMExzQdXrDpY6w5DElZBfwRpdivJfJR7oycuADg0pn9HVs2LF5nJzZHNIfEKd\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a14e02abfe9d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9191,"size_decoded":8675,"mime_type":"image/png","magic":"PNG image data, 1280 x 854, 8-bit colormap, non-interlaced","md5":"333f14153dda086ca2ee4b1ee8d00e8b","sha1":"a91bbc68250ce847e2d2917a0b74b9db39fc4f4d","sha256":"ad8a51bda382b6680514c8108ba0e2d735172b60ee3b290c902dd037602f52a0","sha512":"63356add8031c2a81987983e64497505ea0176156c13107c267ad21d746496bb9d645b927beedc6a2651788da5b097c39fe19722b18123e7ad2b8f35f791a0b0","ssdeep":"192:6HHsweFM60c+W+OM/9hX6t3mth7eAP1G7hKz9TEOr:SsHMVOqXXXh6AdGczdr","tlshash":"2c124b53cc62360fd24a4196238331e1d8b54697b0959f8fbf89d0baed471e2f475e21","first_seen":"2026-01-21T14:56:34.203553Z","last_seen":"2026-07-02T13:32:07.620555Z","times_seen":13,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-NQBQS0F7V7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.836Z","timestamp":1782999082836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:39:04 GMT","end":"Mon, 07 Sep 2026 08:39:03 GMT"},"fingerprint":{"sha1":"6D:E4:85:F4:01:A4:0B:02:E0:64:E2:F2:58:93:6D:3F:4C:AB:30:9D","sha256":"4A:07:79:34:AC:03:17:68:07:4A:CB:68:23:A7:E3:14:B2:DE:22:3C:E1:AE:8D:F5:2F:2E:2D:C6:28:58:47:CE"}}},"request":{"raw":"GET /gtag/js?id=G-NQBQS0F7V7 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 02 Jul 2026 13:31:22 GMT\r\nexpires: Thu, 02 Jul 2026 13:31:22 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 165031\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":485330,"size_decoded":165635,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"52e100c3cdc3c44669e34bd6f5527484","sha1":"0696383d0affa0f664c990f1be146b0a656b8962","sha256":"4ddcef297bce2b3ceb55225e5a34c41335c79eee4265b6c833dc1222f17b35bc","sha512":"57f88b76d169f1790b0c3b26644287d8e43779da5832070cf4836b2a6d60148f6618f08972b0273670a944c8503ce18afe0485f37b2e7eef422a409a7fd0655c","ssdeep":"6144:9LAjtCn0dF5iqGCvJwXQd7pcxIGQznsWjfGUpEGmwvPrLi:xAjzFY0AQQUpEZEni","tlshash":"6fa4f8cdb3d674265396f478903f018ba57b28a2b44cc899f189cce42e7465a8277f7c","first_seen":"2026-07-02T13:32:07.622498Z","last_seen":"2026-07-02T13:32:07.622498Z","times_seen":1,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":43,"receive":53,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/flags/Germany.png","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.865Z","timestamp":1782999082865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/flags/Germany.png HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Jul 2025 11:59:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68651f08-a6f\"\r\nexpires: Sat, 01 Aug 2026 13:31:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ji80eut9z0N01vKJCW9j6pGFgoGkP7Io8T%2FQ%2FWLeplTX81i5ss0lH81ecCkiHgMx0pslaSjDdJu0hav0A8UQqQ9rndTSaTKkDhHN7cD1MrODizKViZk8g6AHQuVO9RIg\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a14e02abee98120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2671,"size_decoded":2009,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"2ca86c63f2aa7997e926b27d4a36d40b","sha1":"95a58a6c59ce153268621d23f680ee87ef5096bf","sha256":"8e39c821ed395e073bf9911fdeb356ac1e2856c80a28fe3f17ae4b1dd0884e32","sha512":"18151f69cc114427c8f65eee1abe447b4eab9bea811ecf629f1f1ccd193824cfd5f0226efe7716651a218c0e49be5859f31da39ed8fc74ac054b7e262af3cb33","ssdeep":"","tlshash":"4351d485320e5759fe2c6132c6d307a1b5f6cd97f23f82a4202c940c4ae2d8b73167e1","first_seen":"2025-10-25T20:36:50.786629Z","last_seen":"2026-07-02T13:32:07.623752Z","times_seen":20,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/flags/Saudi_Arabia.png","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.878Z","timestamp":1782999082878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/flags/Saudi_Arabia.png HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Jul 2025 11:59:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68651f2a-708c\"\r\nexpires: Sat, 01 Aug 2026 13:31:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=axlsr0iv5EosVCU568GWL4Lgc9chcCjH9HDu6GE5UERoJGEB9JYTo3tm1gDVXZ7CsZpq9UYd5jsxaUabELsL0SWcSgcu%2Buw2r1GFEWn88g6rhqr0Fx9eRXO313%2FbzJRW\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a14e02abfea1120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28812,"size_decoded":27392,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"00153a499a8bf115a5826ebf51fc2506","sha1":"9e40048ef6788b7bcdb6bdef72bc5b5eec059092","sha256":"e2c80eedf4790ef5857dfa93d9086691cb21dd81ed7b1c1a3ab8c1800f0112cb","sha512":"60562abdcca16e2b09b29b5e6fa97e6c0b96316f92f49a21832d7354a862584ca205e3b279fec2a4502da27fecf8593cf9b8317e7fbaa6985b826b1fad330626","ssdeep":"768:8qDml7Nd9VG4R4TVNZVWnVLk0I32tBKFMn4XqkftkD:bDu7Nd9DuNZ+Lk0Pd8Hfte","tlshash":"3dd2d0fd274399f7dc229fb8720b519c2bc40dec650aa8bcd693c5671352bd46e25243","first_seen":"2025-10-25T20:36:50.785504Z","last_seen":"2026-07-02T13:32:07.624569Z","times_seen":19,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/flags/South_Korea.png","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.879Z","timestamp":1782999082879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/flags/South_Korea.png HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 16 Dec 2025 12:50:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694155a8-625e\"\r\nexpires: Sat, 01 Aug 2026 13:31:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xpFzrG9FDkyrUYcbmzS93dXj0IHeeDjhinExUrXfq14bpCV1XGuOi5cGn3ce8CEi%2Bf04Gn0n0Db%2BK8BGLn7oI8SIxR5dFPqwKWz3elUSML0ncXlQzH2hTjrLfClIXrwe\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a14e02ac0ea2120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25182,"size_decoded":24356,"mime_type":"image/png","magic":"PNG image data, 900 x 600, 8-bit/color RGB, non-interlaced","md5":"26168cddf75348cc28299de4daddcb5b","sha1":"d5ec4e17352617f6d9a569095a2a1a690a00530f","sha256":"e5e6466825c7481627492c8617d3add1ed7bfcfe501496d3c17e3e7ef6c31466","sha512":"64198a591002fb43bd16e3032ae5ab3951fcc199e2996fab9a60ebadaa5133e951a0461f1ffe27c89aca7ca074ab005e249d26ffe452e4390acb11d6aa56ca37","ssdeep":"384:TLMIK5E2qJ8bbWduyExu1v0NrY4r5C+VxuZXTSikpkiXQX4E2tIC:fMcab2Emv0FSIMTSikjXQL2v","tlshash":"c2b2c0cad4c0e6dc85ebbc951c43355c23362ec36f189c20e8907cf99eabb55c524069","first_seen":"2025-09-10T10:38:10.167381Z","last_seen":"2026-07-02T13:32:07.625319Z","times_seen":15,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/styles.css","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.840Z","timestamp":1782999082840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Feb 2026 06:18:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6982e4a4-c0fc\"\r\nexpires: Fri, 03 Jul 2026 01:31:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mkbW8h0ncIzi49SS6IOjvDgADW8bF3e6DcUU8uAKyua%2FRFkCv53iB6t5vhOPFfRx0TcQI3FTOdoNsrMVEznmmdg7lYDw%2F3EsHP1H%2Bp6DrkqlqWxv%2Fv1h68Z9i8KBQoEA\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a14e02abce83120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49404,"size_decoded":9437,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (387)","md5":"af0a91f70c6e8ed194a9ac504e416f78","sha1":"2da20637969ab2feeabd58bc61c512aa61d103aa","sha256":"c35e59df05af5848ae874c26c4cb50b844c0da44d6437791d8e623c0cc28ef79","sha512":"2364cabbaeb1f1765d6f777230833746bdbe2a5fd9149e373658dfcd93b171df33cc00ba164fccdfe184af7bba404bf63253ca6feee7e6627392242e5e5d8374","ssdeep":"768:2RdsIdA6SicPV3G2HyKtBSOvn2UPgw+XOSFomOCbXmOA3qIAlJ:FyKtBSOvn2UPgw++SymOCZlJ","tlshash":"36235450677395b0a93ba2692befe70c3368a047890acc5d7bcd61045fc93fed192b49","first_seen":"2026-07-02T13:32:07.626022Z","last_seen":"2026-07-02T13:32:07.626022Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/scripts.js","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.850Z","timestamp":1782999082850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /scripts.js HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 06:22:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6982e5b2-326d\"\r\nexpires: Fri, 03 Jul 2026 01:31:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2BLNQAL%2FZNPx61BQEwrBWwML99v%2BXV4mTddbiIyGFeDJp7PxWqY9AvIruyv1%2FLRFXLXPF8cYjC3O0BnALnUyiPgoVgrSR5ELQXNLoAMKC59NLw5Za54TJT9vIi166mQU\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a14e02abde92120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12909,"size_decoded":4322,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"b11cfa22301bffb45bd0ac588e317927","sha1":"bf77c47c25b60d4ba237a61bf9c03c37f79798bb","sha256":"6b710082e92fe9a2ff8d65b860f8508affd28e9e5bf8e780126d86f8e0f90479","sha512":"f768172599c1cf8d4b88581aaf9609f0b2ae4e88d515fc727e71bc122b94b0d8553e545529045df3d2ed2390502fd6c6955cb6445aeec38662e3228059104f66","ssdeep":"192:hGobyIMKw+WHQeNJfOqJD6p9RF3F09IxUZeBIcYVezGIH3E9Y3F4x3IfduTi2MgT:h3yIM5+WweNJLcp3F0IeezGUff18xlFd","tlshash":"e142625a21b3203a407365be67cf86953b3410476109ca0a7e9d97491fc2f74aff2bd9","first_seen":"2026-07-02T13:32:07.627622Z","last_seen":"2026-07-02T13:32:07.627622Z","times_seen":1,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/flags/United_States.png","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.860Z","timestamp":1782999082860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/flags/United_States.png HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Jul 2025 11:57:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68651e96-7289\"\r\nexpires: Sat, 01 Aug 2026 13:31:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h286UG%2Fhni7HpWT7eDJN%2F9AlnFeiVcjeV62F1bU1mZw%2FkgCxboRFkbhDDmlz2975btfF2nIc9T%2FJqWINtmrdr0sH1lqOIn58XXnTqP8uh6HeP5XJsDBckr0SUtJgYMZU\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a14e02abee96120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29321,"size_decoded":28022,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"a18d005784fa6ea4417a7eb9d0c66fd0","sha1":"7d1e1ed3386fd6d04aa380502f655b29865a72c1","sha256":"3051b9d5858848eadd8fc6d102cdfe1adffb173d03143f3a773873c549391993","sha512":"fadd9c36024806d0b37668330c6b1cd04a3b892aaee9100a00b2089bb0044137178ed48b0615f98898a5b84fa01f61c1cdffe587c1c62bd1449fbe90216c6c17","ssdeep":"768:ctwZvrrkD9R9Kp1Tbrb3FjIUxHpd0YTgYUCY:cWZv3WWTOUxUYb3Y","tlshash":"40d2e15a815792594fed33f64ac0a1f4fe1b549e8fa4d0c1ab37cbf8044a696c4d05c3","first_seen":"2023-05-21T22:42:23Z","last_seen":"2026-07-02T13:32:07.628765Z","times_seen":65,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/flags/Portugal.png","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.871Z","timestamp":1782999082871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/flags/Portugal.png HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Jul 2025 12:03:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68651ffa-2036\"\r\nexpires: Sat, 01 Aug 2026 13:31:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XrdJycu3NjavA2qPGJ2zb1%2BQ1MsXcGOESLEdnuQLhkQ2Yyj%2BhJ7P017j%2BlimXQHfs0wPaK3OPhGT7Yb8j2OOmQhULxLtL089aZbNDkZKBnmFJ5DFOEncCA0lHRIyIgf7\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a14e02abfe9c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8246,"size_decoded":7784,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"ad7dc9c58db4053a22110f3e3d5c1127","sha1":"7fcf7f70505f592a8bfcab8d3a746e199982f4ed","sha256":"7f3c168d70626314f1ac4282ba599395df296ca7fc9636b6ff440b7cb530cfd1","sha512":"4ec0b32f84bb22eb63ae8391a2bdf5cc33f6b5f59ac939fed566145b02738d87edc2a0d9e7ae2c2f1092f9b5401001738c1dd98f19b6f6776ac94cf2febd28ee","ssdeep":"192:2ryvFiCjb7vqtonowrFqGdSCyp5EmhYCH9pUy4Zr:6yvFZbRrFhSCypxhyy4Zr","tlshash":"7902294be36f4c95e3268f7fc752067085b73f5c89264aab19ad3e6e106df08a84d704","first_seen":"2025-10-25T20:36:50.782332Z","last_seen":"2026-07-02T14:20:22.398116Z","times_seen":21,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:23.188Z","timestamp":1782999083188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kms-tools.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 01:48:31 GMT\r\nexpires: Fri, 02 Jul 2027 01:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 42172\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-02T18:07:15.912412Z","times_seen":224900,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":25,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:23.197Z","timestamp":1782999083197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kms-tools.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10212\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 29 Jun 2026 07:48:44 GMT\r\nexpires: Tue, 29 Jun 2027 07:48:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 279759\r\nlast-modified: Tue, 09 Sep 2025 18:33:56 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":10212,"size_decoded":11025,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10212, version 1.0","md5":"b4116ee119caa0aff77a0f99bf188184","sha1":"f1e75276e3c00e2023e07eef94288f1b5e5c4ee3","sha256":"0515874177f0862384d111fccea0b6e7c32a7da106202949775b96b1fb56b236","sha512":"956f75a5e7e46d9436c6c20d493988901701a8cb846296c27779d72f3a24c58f0d7083a52eac77ebdcd15dbb97a1654599a46a9dccc7120b30fe5516c5739971","ssdeep":"192:9STaMoBFOLgYxDRMI5Y7VblGW7jsBF9W5C1IK8WQrjNn5DCY8LRUNwjUiyq3K6+O:M0BFWVxiI5YhlnsBbgCxJQrHDECslyGf","tlshash":"5f22bf68a663671fdcc7e63004f0da5042662e491253d776dbbdb78901278fe0417bd3","first_seen":"2025-02-02T06:10:28.700493Z","last_seen":"2026-07-02T13:32:07.630196Z","times_seen":2340,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":53,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/favicon/favicon.svg","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:23.361Z","timestamp":1782999083361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/favicon/favicon.svg HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nCookie: _ga_NQBQS0F7V7=GS2.1.s1782999083$o1$g0$t1782999083$j60$l0$h0; _ga=GA1.1.523884516.1782999083\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 05 Jan 2026 02:28:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695b21b2-437a\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dWFCD2E6gQHLh6FtzzomxCauuHRQA6wY0dnbc43oG53V%2F8C95GROL8pA3m7M0%2B%2B59EX8%2BXznzqg%2BU4RM%2FQt1X8h9GqSlLZunZAHwFq7ebpX1GIi0DgBAZPHZowUl8wJq\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a14e02af0f34120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17274,"size_decoded":13711,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e6716ed08af34baa3ce462de65a6558c","sha1":"7020b3657e5d2f682b3ffa11e9a6035add1136cd","sha256":"8acfebeab369534d2f34f81c39af6ff428b9b6f709150ce77f6139743e873f09","sha512":"9294554b7fce9ffe3f229f080a84c1f16f7d47e562a0895b5a70fe51c071134b50cc040380510683bf17599a9d7c47ef04571d03d67bf398d8e3c460064a655d","ssdeep":"384:mdLjWVUCLkNBoLxZbhOVDWeXk1XJNIJocvzLIzuWykN3:TgYb8yak1Xi/zLI2kN3","tlshash":"ee72e19bf085677c134b42117e228e26bc085973ae9383c97dde9f114364aeb352b61a","first_seen":"2026-07-02T13:32:07.63079Z","last_seen":"2026-07-02T13:32:07.63079Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/favicon.ico","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.857Z","timestamp":1782999082857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/favicon.ico HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9fUwvnRhxHyNLlCeEvAMv0J0UMurwLbN430hYMz4%2F0s6Bi1qf8B8LlMF4bkYY9KE8Z7lj4HAl9YywZw9%2Fbb9q4dQEIvhfEDMn28JEPeWHrTz4bVI%2BhhvNouo%2FbkwsG3c\"}]}\r\nlast-modified: Mon, 05 Jan 2026 02:28:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"695b21b2-3aee\"\r\ncf-ray: a14e02abde95120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":7019,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"9e8033d9119c7d9cbd85a18eba278c78","sha1":"2bae9a5066d67929a23c85876f680403fb47aa8a","sha256":"82240061b5e5edf44224205dbbc0ed43b2f5921207d8639fada7da1a6e784d4a","sha512":"b40b8c1d1bbb12fbd56691f64dd928e44bee3b53c0a26440ccacbf20cba71f09cf24267ac388da003caab4ce07ca8d2d96d0dddf962edc7fcf559590c09fe628","ssdeep":"192:jEy6JrZ++Dz3GwJiBc7kHqfFle0Ka6prtzIx:j0Y+DCW/2Nacr6x","tlshash":"4d62830d3e8256f0e6f41237cda28b24522ee85c8175447615e5fd2b3d9f2c7ece6918","first_seen":"2026-07-02T13:32:07.63261Z","last_seen":"2026-07-02T13:32:07.63261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kms-tools.net/assets/flags/Russia.png","fqdn":"kms-tools.net","domain":"kms-tools.net","tld":"net"},"ip":{"addr":"104.21.22.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:22.869Z","timestamp":1782999082869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kms-tools.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 01:43:31 GMT","end":"Tue, 04 Aug 2026 02:41:04 GMT"},"fingerprint":{"sha1":"74:82:8F:09:3F:1B:95:9D:8D:DB:06:BF:1F:6A:8C:F7:9F:F1:28:9E","sha256":"21:8A:8C:44:EA:7C:F1:B3:B4:9B:E6:D9:D8:10:21:04:38:45:EA:64:6F:63:F4:46:70:9E:24:FF:82:87:29:E9"}}},"request":{"raw":"GET /assets/flags/Russia.png HTTP/1.1\r\nHost: kms-tools.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kms-tools.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 02 Jul 2026 13:31:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Jul 2025 11:58:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68651ec8-77a\"\r\nexpires: Sat, 01 Aug 2026 13:31:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rdlP9C8mP%2Bvca%2FlolXg%2BtxeZC%2FSDNHSflVAf8hP%2FfUkIMKINRUBue393BFc%2FEpDE0tYTRQ1chUvVb3ZWqMHAfOnFFyzE9sujvTDDLEY4y%2B2qCO5h6rKh2s42pACR90T4\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a14e02abfe9a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1914,"size_decoded":1160,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"5471e465a5457ea48aea23b18fb6806e","sha1":"83ed4098dc56588ec240d3df01050ceca1cd3d44","sha256":"d67a8976bdccf94cbe1e22f1c1b62502fe58ae208a8e6213e04388fb00c99a04","sha512":"00058324b242f3677a1caab3744938b6382d17904d355ed535ec34f046af75c7a8df9cc184508d1ade307a3b02898a10e144a2ece6fedc9da27346e3628abc15","ssdeep":"","tlshash":"c841180a53010783d139cc7acb170ca18df2cfd61bbf93a82a0d23590598b61fa18f80","first_seen":"2025-10-25T20:36:50.781393Z","last_seen":"2026-07-02T13:32:07.634574Z","times_seen":19,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"kms-tools.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kms-tools.net/","date":"2026-07-02T13:31:23.185Z","timestamp":1782999083185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kms-tools.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 01:48:31 GMT\r\nexpires: Fri, 02 Jul 2027 01:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 42172\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-02T18:07:15.912412Z","times_seen":224900,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":18,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}