{"report_id":"f253a66b-5b25-4a44-8d73-6952cb1138a4","version":6,"status":"done","tags":[],"date":"2026-04-12T13:07:43Z","url":{"schema":"https","addr":"kvatoday.top/","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"172.67.209.88","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kvatoday.top/","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"title":"Sweet Bonanza","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"kvatoday.top/","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"172.67.209.88","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-17T13:07:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"kvatoday.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kvatoday.top","ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":18,"request_count":18,"received_data":442293,"sent_data":8786,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-05T22:16:34.770209Z","alert_count":0,"request_count":11,"received_data":369455,"sent_data":6029,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-05T22:20:18.514512Z","alert_count":0,"request_count":1,"received_data":67862,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kvatoday.top/","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b13625eeeee517f18024de37616c17b8","sha1":"22d5c530662b9a672f2a8fc35f104e01462d65d5","sha256":"d845f92187b02c4e9831ac75798bdd0385153719fad7965e212a78e4d109ff8c","sha512":"ae2b16ae6fa71c161a4d5bd64818864def5a7c4c53caeef41121fb9487649bccc1ee1e95c3f6182dcb68892196e2029f9fbf2203aac97f69b0268749150ba676","ssdeep":"","tlshash":"a3e0a7fda0e91131b167207c36bb03e03933609779413529be6dc3801f6156b9100ac9","size":316,"data":"","first_seen":"2026-03-01T09:27:42.801147Z","last_seen":"2026-04-12T13:34:59.042079Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/assets/green/js/main.min.js?v=43.4.2","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c5516ed89b0252132df4f9f8b81249a","sha1":"af52784ffe12ed56650b4888a1bc5091d516af70","sha256":"3e0f53ce62244bda1de288529b02a165a3e3a8f3d4419c078fb3e0093378ebb3","sha512":"8d60ba299569012101ccbe3fdf897274eeff8c4cab190e4cec2c85d53f7425bb021f6580982d8577cc210471104821d51e0a8180b8f360e3df2880f13675cf43","ssdeep":"768:Tjf4u99RaLdk6nwq3Ae9/vKlLo5b5w2ZZfaV5v4dbx5R5055HyxnEETe:f4msS+Agyl1gy4bdMSDTe","tlshash":"c2e22b7ed2a6773c17d8a68cd7266e003f2b095eda4091b05dd51a86f8bdd830107b7b","size":33426,"data":"","first_seen":"2026-04-09T00:57:21.985305Z","last_seen":"2026-04-12T13:34:59.037293Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/assets/green/js/script.js?v=43.4.2","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf476bfd361bd1968b8faca737c561eb","sha1":"f2fed6bbedd0350d5aac965a1db3c49c623949b7","sha256":"2c56edcebd0c683da4b509cb9a320aa5c4b030d42396bbe75a5fd9e99bbae2d2","sha512":"31f181d79f8571b23b2ae3c3eabd9ee2d21ae446e594662599c6e622b02090aa57677fb1620231c27ad33847307723465815c71a792096fb95e6243c3190b9b8","ssdeep":"384:Pia5nuka6lO9sr8eTb8s8lyYL1lB5BYrW8fWbXOyaj:PiajlkeTb8s+9YHj","tlshash":"5852425a13fa05345573a0ba9f8b0e413120901f2847da293d9c45c96fc6e3a99fdffa","size":13382,"data":"","first_seen":"2026-01-27T03:23:56.523321Z","last_seen":"2026-04-12T13:34:59.040038Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee4735dc2b01aee5c5af3238956e9c31","sha1":"ea15c097c57160b8eff7af4aeb7d34cb44145b78","sha256":"7980494d34e625c3dedca75f6b11be68376ddaf19c1b4073d3558d27bf036686","sha512":"2df78467901ba629b8f62a4a4704b3decc8ee8a6c913868c2d013cfbb9d2b5bfa449c718df1604257362c4a67a5269d07129eea2efc8e60633aabfe3be0b2626","ssdeep":"","tlshash":"0411c068da6600773072720e1b9f2b2231269ef30290ca063f9e3e4f2fc254781817dd","size":967,"data":"","first_seen":"2026-03-01T09:27:42.803996Z","last_seen":"2026-04-12T13:34:59.042617Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbe25605d1989f8f7d92b47236de7fc4","sha1":"2a9a241d0656c609b59c0d526ea8ebc46982112b","sha256":"6dda13333a44554552c7b00d76b9a2a40e225a1e009595a3843bcbac1a52ba5d","sha512":"ac17496c43d0238f282cec7d36fffbd46bd1781d2b590b9a1f79b4e7944d1a5189e31d26a337313e5f9f901f106596df8eae4faa198eb6ac67e3956e3b0f355a","ssdeep":"","tlshash":"3641df0aaeea20b7707370585e0f6110352f96b74284d9453fed6b6e1fd3168c24e6cc","size":2061,"data":"","first_seen":"2026-04-10T19:27:27.008348Z","last_seen":"2026-04-12T13:34:59.044108Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"03adf05027812bbb527f54d7f7f1018a","sha1":"c7fdbc56ab41673deebe6ee623f9899547fff1e3","sha256":"3a1908143011980eb74015dbc72e98be259002c875ceb9b8d4d7d5ee2802d46e","sha512":"d09384daca90c2758ce8f2dc1d8dc1e66b523671fb0e17ff3a6b3c36d00921805353c4153c86ecf3c9aedf7f42adb47195dcc779266cf277fdcecb63d1ba91a1","ssdeep":"","tlshash":"f7f0e17ba8326531da63a2ade06fe3427466300b348555407d8ca8b88fd1e00043b999","size":565,"data":"","first_seen":"2026-04-12T13:07:48.069201Z","last_seen":"2026-04-12T13:33:00.469853Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4104338f53af67b5d57b2aa9cd77c4fc","sha1":"a1aee51dfad11799ad4bc25e5840f442ed26ec1d","sha256":"1d7ff706347e1b7474c6d7ecbd49e5a0ace911aef0c9f81557294832f07cee67","sha512":"e304728d32d61acce271495d700e4f85d5c4e870f53f06882f8fba4f63ffc848a127ee267c144066b5b1ce5e1008cd52c6aa490ce6a364b95e2ccc9a9a40bf86","ssdeep":"","tlshash":"dbf02e6e0aaa11308b13702926ae7b9279a22013207ad440fd1dd848efe0b4c00baad8","size":550,"data":"","first_seen":"2026-03-14T05:28:32.795906Z","last_seen":"2026-04-12T13:34:59.05077Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"be70ab3a4893c48d3811ef52e29b9503","sha1":"ebc69f4715b1367c2b5183de43103f094dc85c3d","sha256":"3ef1da1b3ed48a4a6908063b030ec50ae50ba7945981bfa825f76a122ceab362","sha512":"fab4585d8e5dd75eb3706733be0d342fe6fed09a24b2e25190647d102dd5e85df53dda29faa98fd40ceeccfdc477aed45faab77e15dade869c486ebfaf8b30dd","ssdeep":"","tlshash":"41216da89a7f22554a6fc1a7bddd669a31b0010f5004c38a7c2c849b0ff4f6725f56e5","size":1254,"data":"","first_seen":"2024-12-28T15:19:53.586052Z","last_seen":"2026-04-12T13:34:59.05144Z","times_seen":270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"kvatoday.top/service-worker.js?v=43.4.2","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:22.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kvatoday.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:54:48 GMT","end":"Fri, 19 Jun 2026 05:54:47 GMT"},"fingerprint":{"sha1":"AA:7E:8F:B8:1D:0F:F5:88:1A:BB:77:20:90:FF:E5:0B:F3:9E:7F:C0","sha256":"B2:5E:C4:7D:B0:C0:47:0A:D9:E9:C0:E2:D6:65:63:C4:B2:B2:B4:F3:FB:06:94:4A:C1:EE:15:6E:6A:D0:31:6C"}}},"request":{"raw":"GET /service-worker.js?v=43.4.2 HTTP/1.1\r\nHost: kvatoday.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kvatoday.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=d5lfgIHw87BP6ahv\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Apr 2026 13:07:22 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 04 Mar 2026 13:08:45 GMT\r\netag: W/\"69a82edd-119b\"\r\ncache-control: max-age=14400, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=65SkqeGFGGvDphE7zNgPKDrnGzPtsXqh8vJgov1ZeXVDblM5TZsQiMWeKq%2FaGJcEJe9sssFtY1cVyewjmRzWIUOAl60R0DUSG96HGl3yXl61CVV3g1Yks%2BnivF3moMw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb27421df021525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4507,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"86cc00269f504c69a5522d969a7163cb","sha1":"32ef340a83bf54ab58b19e3b162854b170dacfed","sha256":"468a60231a67800713bdc7f40428f191c212c6e3e9041015401009a4ae26b31c","sha512":"b247afe3e2d8ea868b034e5f350250a7c45f9502236db14b1f91e5897e66635ba3d0e5d2eecd948ac1fc39050bed482704fcce593031f76938af423ada64bb6a","ssdeep":"96:/dMKYwHN9+zwwfOwwwTK1ktDEkVbumgZOVRl6uAsaWLRLNHbuesaWC6JuEsaUBBn:/dzYwHqzwCOwwM7tDEkVbBfoRWFLxDWO","tlshash":"949101fb1d6817570ae7d179951e1227e27601073f4ab865b2ac09d81fcd54c83bf6c4","first_seen":"2026-03-01T09:27:42.786226Z","last_seen":"2026-04-12T13:34:59.022309Z","times_seen":43,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"kvatoday.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/assets/green/css/style.min.css?v=43.4.2","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:22.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kvatoday.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:54:48 GMT","end":"Fri, 19 Jun 2026 05:54:47 GMT"},"fingerprint":{"sha1":"AA:7E:8F:B8:1D:0F:F5:88:1A:BB:77:20:90:FF:E5:0B:F3:9E:7F:C0","sha256":"B2:5E:C4:7D:B0:C0:47:0A:D9:E9:C0:E2:D6:65:63:C4:B2:B2:B4:F3:FB:06:94:4A:C1:EE:15:6E:6A:D0:31:6C"}}},"request":{"raw":"GET /assets/green/css/style.min.css?v=43.4.2 HTTP/1.1\r\nHost: kvatoday.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kvatoday.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=d5lfgIHw87BP6ahv\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Apr 2026 13:07:22 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 04 Mar 2026 13:08:44 GMT\r\netag: W/\"69a82edc-1379b\"\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=7200\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6wmAFhTsqxrYNsmn0o9JkivtTnEsATBSZs%2F82cJwNthpsJLrl9%2F7XFljNqdacyAVm3p4Tx4ABEqpv6z3wfB%2BsLthzarixE3RRytXDTopY%2FqLvxCU8lP%2FmAMaTNcfDBM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb27421df0b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79771,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"823d49a0f6beefe8874089f871457e99","sha1":"0fec4b75b867a4d7847181e017055f922943a9d3","sha256":"697a6cf629039092f08215048be01b67598c6b0b991302fb982a5b232ac216f9","sha512":"df1183c8329c4e3a5e26f50ac8f62bd83869dc14521ff72d392747d0bd19053c30bf14bea49c674dc53d56bc6d295a0a41041a8d99ad2201b33e136f01d3fbba","ssdeep":"1536:SQGdpFwVk5MPMJMuSS02Pqj7mquj/Kmm+zpRvhGPf7vVP:SQGqTfP","tlshash":"cd73ea219a55312eb077c26aa5d2554e233cd503f6236beefa94b529c7c7783223378c","first_seen":"2026-03-14T05:28:32.78929Z","last_seen":"2026-04-12T13:34:59.037773Z","times_seen":18,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"kvatoday.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:23.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kvatoday.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Apr 2026 12:42:46 GMT\r\nexpires: Mon, 12 Apr 2027 12:42:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 1477\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-13T07:12:43.913278Z","times_seen":77416,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":75,"dns":1,"connect":7,"send":0,"wait":8,"receive":9,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:23.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kvatoday.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29392\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 01:57:31 GMT\r\nexpires: Sun, 11 Apr 2027 01:57:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 126592\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29392,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29392, version 1.0","md5":"a6323dda0842401b2923554d0ed8945f","sha1":"6a5e89b2f9b47f5a2fb11831479c02b4eebe3089","sha256":"cedb374b05a35034cf96db185db4eeb8f8ce49e1a56197673702ff11b5533d6e","sha512":"6fe8df13c6dbc738b1cfd40c14bda19dca6114b3a4f521ff46fa7ebe25f6ce11046b7d41c1a8528d2294afea5a1c985ff43db37a2de028c1fb61b7197210dac1","ssdeep":"384:Wz9Te6aaq6lpCaascbVjmWd8NifWrHJi9grlYlMl1EfUxFvskjZAFWiMhv4K6Nb2:u9jN2bVjmWQFqgskSWiVK6NbKd","tlshash":"65d2f15cb579c636a098e4b70df5e3bf9599cb39224b9b288341c0385aa3941e442b97","first_seen":"2026-02-19T22:46:38.271285Z","last_seen":"2026-04-13T07:29:28.377033Z","times_seen":3955,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":1,"connect":25,"send":0,"wait":27,"receive":1,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:23.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kvatoday.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Apr 2026 12:42:46 GMT\r\nexpires: Mon, 12 Apr 2027 12:42:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 1477\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-13T07:12:43.913278Z","times_seen":77416,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":22,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/uploads/pwas/lfHwBPhv0Z8/logo-1775494707923_512x512.webp?s=180x180","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:23.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kvatoday.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:54:48 GMT","end":"Fri, 19 Jun 2026 05:54:47 GMT"},"fingerprint":{"sha1":"AA:7E:8F:B8:1D:0F:F5:88:1A:BB:77:20:90:FF:E5:0B:F3:9E:7F:C0","sha256":"B2:5E:C4:7D:B0:C0:47:0A:D9:E9:C0:E2:D6:65:63:C4:B2:B2:B4:F3:FB:06:94:4A:C1:EE:15:6E:6A:D0:31:6C"}}},"request":{"raw":"GET /uploads/pwas/lfHwBPhv0Z8/logo-1775494707923_512x512.webp?s=180x180 HTTP/1.1\r\nHost: kvatoday.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kvatoday.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=d5lfgIHw87BP6ahv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Apr 2026 13:07:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37554\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 06 Apr 2026 16:58:28 GMT\r\netag: \"69d3e634-92b2\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qn6eMWuN5QJWsovYqzocamHNOIVH%2FMIdkfBHcHAWiyeEEqrc85wG3BNzanlLmbS8VJwag9U5oeDlSMG3lNA4xTN%2BZon5Ac7rrfw6AZ51pApAThrIDXDEQPIIsw4wbk0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb2742808021525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37554,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5ed8d3374494186520592da3eeea9e39","sha1":"28cfd0cdec61349f7a93c19e4dfd7422da6bc1d2","sha256":"c6dc11880d05df004c14aeef30e6859512635a68929ce2e6fb4b8b39c42f2d53","sha512":"369435588f6f9aee99ee587f8e41c712f3edf3f21fe300f473363c93d36801a9a40146a32e309c96ed2e0560faaa1d23329ef0b30ed0790a5e012c1b2b821793","ssdeep":"768:lQVxQlb8OGFqqjp8+1GcEebdGwTBVWxylhaeX0Q5G773/aQAgtJE0TmYB:lncqnL/UIklDN5s73/aSZTmQ","tlshash":"d1f2017c6c2804d1a89b161fe36fee90379c9b572fdde0a898518e7f92d1918188212f","first_seen":"2026-04-12T13:07:48.022852Z","last_seen":"2026-04-12T13:33:00.447121Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"kvatoday.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/uploads/pwas/lfHwBPhv0Z8/image-1775494706389-f8xq_569x320.webp","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:23.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kvatoday.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:54:48 GMT","end":"Fri, 19 Jun 2026 05:54:47 GMT"},"fingerprint":{"sha1":"AA:7E:8F:B8:1D:0F:F5:88:1A:BB:77:20:90:FF:E5:0B:F3:9E:7F:C0","sha256":"B2:5E:C4:7D:B0:C0:47:0A:D9:E9:C0:E2:D6:65:63:C4:B2:B2:B4:F3:FB:06:94:4A:C1:EE:15:6E:6A:D0:31:6C"}}},"request":{"raw":"GET /uploads/pwas/lfHwBPhv0Z8/image-1775494706389-f8xq_569x320.webp HTTP/1.1\r\nHost: kvatoday.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kvatoday.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=d5lfgIHw87BP6ahv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Apr 2026 13:07:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43464\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 06 Apr 2026 16:58:26 GMT\r\netag: \"69d3e632-a9c8\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pHO%2Fvu7xcfPXujyCgLg0BnE5cKnNpznrfNoKUMQeulvr2MSDmQvOI6ny1VYVxfC6GIwq%2BOzolRDDQtYDtdn3p5St0%2Bd3KMxSdaib0bcmUItMmPrMn%2FNosY9NeqeIyZQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb27424ff841525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43464,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 569x320, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"877badd3d5d7ac73eea2a67503339730","sha1":"29b79f1ffe763b595d0c3420cbbe6186851e07b8","sha256":"d21fd459ddf871e5507c6e5ea1f23c565c38d0d61cdc3b6ac9e5013a3e65d748","sha512":"d8ebe7e9709dd0890ad6242c390ecfc30cb42f128aa59a99377dff6f83caf7b7c5f630020c7fa1c6878d61bb3ae779723c782d1baf0941d80b61a0fea6cb05de","ssdeep":"768:d9VHObSkMy7b2NQrpTtcIxSsAmEqY5Aj3dahdBeDJ4MfM37x:dfFkMyX2NCJcIQmEqY5AUl","tlshash":"0a13f2e365453a3ef46ed4c7ec45b282e289746fd7609005b295388944c37e397e8ef8","first_seen":"2026-04-12T13:07:48.026752Z","last_seen":"2026-04-12T13:33:00.432801Z","times_seen":2,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"kvatoday.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:23.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kvatoday.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Apr 2026 12:42:46 GMT\r\nexpires: Mon, 12 Apr 2027 12:42:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 1477\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-13T07:12:43.913278Z","times_seen":77416,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":23,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/assets/green/js/main.min.js?v=43.4.2","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:22.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kvatoday.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:54:48 GMT","end":"Fri, 19 Jun 2026 05:54:47 GMT"},"fingerprint":{"sha1":"AA:7E:8F:B8:1D:0F:F5:88:1A:BB:77:20:90:FF:E5:0B:F3:9E:7F:C0","sha256":"B2:5E:C4:7D:B0:C0:47:0A:D9:E9:C0:E2:D6:65:63:C4:B2:B2:B4:F3:FB:06:94:4A:C1:EE:15:6E:6A:D0:31:6C"}}},"request":{"raw":"GET /assets/green/js/main.min.js?v=43.4.2 HTTP/1.1\r\nHost: kvatoday.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kvatoday.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=d5lfgIHw87BP6ahv\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Apr 2026 13:07:22 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 06 Apr 2026 11:46:49 GMT\r\netag: W/\"69d39d29-8292\"\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=7200\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDWJ3%2FVb1knMxAEx7%2F1hsVrQrrJwNBGuC8%2BD7WOW4rJjCG0Q%2BRiwV4WXo7qRZnGp6hjwkXQCq%2FuPy2MMwhy9bkrGqTZEFqhB%2BPyB%2BGRRNzmy02TSjVeo0DrnOq6SivA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb27421ef141525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33426,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23538), with NEL line terminators","md5":"9e29180cf8c3ba4b6d3427e7772b2bcb","sha1":"2eaafa2fda1e6bcf34b6ffe57d3d762a34ce723d","sha256":"73b74057876b7f0a0a639f2c6de45e2a2be6fbb912fa5b5fb71ad3121c534257","sha512":"16c358237f7f8d7f1de5b7ce3a3605d74899fea946d1fec967c5b97173f649fde094f83493d80e5633c61b3d185a61e2338120e17032c585394e1a92dac53c24","ssdeep":"768:Tjf4u99RaLdk6nwq3Ae9/vKlLo5b5w2ZZfaV5xq5R5055HyxnEETe:f4msS+Agyl1gVdMSDTe","tlshash":"b5f22a6ed2b6773c0be8b68cdb235f403e1b855eca4490b85d951b85bcbdd860103a7b","first_seen":"2026-04-09T00:57:21.970697Z","last_seen":"2026-04-12T13:30:04.177499Z","times_seen":13,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"kvatoday.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/analytic/d5lfgIHw87BP6ahv","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:23.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kvatoday.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:54:48 GMT","end":"Fri, 19 Jun 2026 05:54:47 GMT"},"fingerprint":{"sha1":"AA:7E:8F:B8:1D:0F:F5:88:1A:BB:77:20:90:FF:E5:0B:F3:9E:7F:C0","sha256":"B2:5E:C4:7D:B0:C0:47:0A:D9:E9:C0:E2:D6:65:63:C4:B2:B2:B4:F3:FB:06:94:4A:C1:EE:15:6E:6A:D0:31:6C"}}},"request":{"raw":"GET /analytic/d5lfgIHw87BP6ahv HTTP/1.1\r\nHost: kvatoday.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kvatoday.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=d5lfgIHw87BP6ahv\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Apr 2026 13:07:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Authorization\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-download-options: noopen\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-language: en-US\r\netag: W/\"1f4-GfpDYIClNtm04MdR3y3Cuw+sIhI\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dCer2aFVyh9ORdYa0xzAB9ra1gR1jeINkyAGVZnpddZAh%2BIB8yknK4su5dajJgu%2BQZ5Z5R%2FofhgFQTacg5XeZIpeFLgPCw6BCG55919J080a%2BBrxIkc6y9e8CSo41hQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb274250f871525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":500,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fb13ca106162ba321160c48f1c6128ca","sha1":"19fa436080a536d9b4e0c751df2dc2bb0fac2212","sha256":"654072bc05f3e7acc28c966769426f85a5fb7a131a6a69aebdc12f0bc4a04d50","sha512":"20c26fee3e66c6aa8af6f45ddd3fb34b846dae4a8c8b387d1794d53e0f4cfeb6754b40c10b8fbdc22155d95b9f2b24b09f8633342fa31bc39382e0a356a25572","ssdeep":"","tlshash":"f9f09e17814f0351fb5606b37d4d751b3dca9d09a9478491c7783f4008d35ec6181357","first_seen":"2026-04-12T13:07:48.031753Z","last_seen":"2026-04-12T13:07:48.031753Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"kvatoday.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:23.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kvatoday.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 18:14:15 GMT\r\nexpires: Sun, 11 Apr 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 67988\r\nlast-modified: Wed, 18 Feb 2026 19:51:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"f92ee388273b5931a1b09a41d3906a3a","sha1":"d38fbadd1b1ceccffbfb43f677698f3a7112f0b4","sha256":"481dd0c01e6bbb129fd147eb5d8571016193cba141c4627ca60ceabdb5a46ea8","sha512":"a3a042b0a845b46de4c272bca16e48d5f332386dc3d4e6e8cf4ebc63238950c265d5a1b3955d257ff12fa3ced224ff11818385256786612130bd35dbd5fe2033","ssdeep":"384:GnNWef/I43MJlQUfZZgeoBpKtbPjHdLE+igeN/T67+mFirVAfPdixSNCsugG3iMF:GsCvIOUfZaeoytbZLE+i9pT67+/rVSdO","tlshash":"96b2e012e6c8bdf6e0c1093e25317ecb298fd9eba8724c624c1ab95d339257c5819d4c","first_seen":"2026-02-19T22:49:57.285177Z","last_seen":"2026-04-13T06:41:45.248943Z","times_seen":3994,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:23.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kvatoday.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 18:14:15 GMT\r\nexpires: Sun, 11 Apr 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 67988\r\nlast-modified: Wed, 18 Feb 2026 19:51:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"f92ee388273b5931a1b09a41d3906a3a","sha1":"d38fbadd1b1ceccffbfb43f677698f3a7112f0b4","sha256":"481dd0c01e6bbb129fd147eb5d8571016193cba141c4627ca60ceabdb5a46ea8","sha512":"a3a042b0a845b46de4c272bca16e48d5f332386dc3d4e6e8cf4ebc63238950c265d5a1b3955d257ff12fa3ced224ff11818385256786612130bd35dbd5fe2033","ssdeep":"384:GnNWef/I43MJlQUfZZgeoBpKtbPjHdLE+igeN/T67+mFirVAfPdixSNCsugG3iMF:GsCvIOUfZaeoytbZLE+i9pT67+/rVSdO","tlshash":"96b2e012e6c8bdf6e0c1093e25317ecb298fd9eba8724c624c1ab95d339257c5819d4c","first_seen":"2026-02-19T22:49:57.285177Z","last_seen":"2026-04-13T06:41:45.248943Z","times_seen":3994,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-12T13:07:21.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kvatoday.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:54:48 GMT","end":"Fri, 19 Jun 2026 05:54:47 GMT"},"fingerprint":{"sha1":"AA:7E:8F:B8:1D:0F:F5:88:1A:BB:77:20:90:FF:E5:0B:F3:9E:7F:C0","sha256":"B2:5E:C4:7D:B0:C0:47:0A:D9:E9:C0:E2:D6:65:63:C4:B2:B2:B4:F3:FB:06:94:4A:C1:EE:15:6E:6A:D0:31:6C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kvatoday.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Apr 2026 13:07:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Authorization\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-download-options: noopen\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-language: en-US\r\nset-cookie: pwauid=d5lfgIHw87BP6ahv; Max-Age=31536000; Path=/; Expires=Mon, 12 Apr 2027 13:07:22 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PSJVD5%2Bi%2B3kzztdicGZuRQ9a%2BWVv6U7Z7rK2qeG8hK7zyuh9JbkvbueMKdH2dG1THLoGQ0ANQn3djchNnDO%2B7qL1DcVGymVxeYk5OS5fGZXvccc9Y%2Boz1kXuPrnrOsk%3D\"}]}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9eb2741e3eb156c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83641,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (991)","md5":"681d7004e87bbc9a1324b0eb1a408361","sha1":"e849dd67aba23f338fbd3e02f73021f0364e4b3d","sha256":"97a255ac1696e9ab1fb5341b0c3984aad1fa6941961bf6cd447b49f00cf702b7","sha512":"1c3b24c72cef4905957f0b44a86514022a4016e4cb38bc582a3f559f00f2641046a222beb99e5ca4b3eb161e0cdfab9702c3df409e75e2db94c4ad411e2a5656","ssdeep":"768:uaScRD0wQIkoR8aL2oSiNloSiNrEoSiNeoSiNvoSiNRoSiN46IC+c3s+nHiT:uaScRD01IpDLP69+cc+nHU","tlshash":"1f831fa150f6216210e7d1d0baa69b073ad1f703d54ac64877ed96a88fc3db2fc1329c","first_seen":"2026-04-12T13:07:48.035639Z","last_seen":"2026-04-12T13:07:48.035639Z","times_seen":1,"resource_available":true,"data":null}},"time_used":881,"timings":{"blocked":227,"dns":215,"connect":1,"send":0,"wait":423,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"kvatoday.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/assets/green/img/star-full.png","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:22.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kvatoday.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:54:48 GMT","end":"Fri, 19 Jun 2026 05:54:47 GMT"},"fingerprint":{"sha1":"AA:7E:8F:B8:1D:0F:F5:88:1A:BB:77:20:90:FF:E5:0B:F3:9E:7F:C0","sha256":"B2:5E:C4:7D:B0:C0:47:0A:D9:E9:C0:E2:D6:65:63:C4:B2:B2:B4:F3:FB:06:94:4A:C1:EE:15:6E:6A:D0:31:6C"}}},"request":{"raw":"GET /assets/green/img/star-full.png HTTP/1.1\r\nHost: kvatoday.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kvatoday.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=d5lfgIHw87BP6ahv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Apr 2026 13:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 176\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 04 Mar 2026 13:08:44 GMT\r\netag: \"69a82edc-b0\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xopptx%2Fjj9NtpJ2uyUd9bfaQz5J6uNTHFlKTdyekcTigz%2BrkO83i99WlaIJ%2FZ6jKt9DXkxLWcqEh4bbeeOplJTV6oIBIOZ%2Fr7K06Xkk55W5v2qblGGufiibjuf5Xg9E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb27421ef0e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 10, 8-bit gray+alpha, non-interlaced","md5":"3e031ab0a5a09974b011daa845aa667a","sha1":"0548289c9bc925c76bbfca859d65a5da4541fa64","sha256":"38ec1d8b7d4b66f131f79489feca40ff46a74bd2e6500c2d1dc2cceb737a4ef5","sha512":"7afa86e05dae180805234eebfd98c8c3f2967250b7bb6dd9831340d36a3536e90c38a8a77dc38c70c214217ea99011ad75aff0f089f8e16bd6cce3ea86221ee4","ssdeep":"","tlshash":"e1c022e504789d28ca43416142804870e970008f2041d9452149232c040230c00887d3","first_seen":"2023-05-29T14:41:10Z","last_seen":"2026-04-12T13:34:59.039389Z","times_seen":170,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"kvatoday.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/assets/green/js/script.js?v=43.4.2","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:22.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kvatoday.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:54:48 GMT","end":"Fri, 19 Jun 2026 05:54:47 GMT"},"fingerprint":{"sha1":"AA:7E:8F:B8:1D:0F:F5:88:1A:BB:77:20:90:FF:E5:0B:F3:9E:7F:C0","sha256":"B2:5E:C4:7D:B0:C0:47:0A:D9:E9:C0:E2:D6:65:63:C4:B2:B2:B4:F3:FB:06:94:4A:C1:EE:15:6E:6A:D0:31:6C"}}},"request":{"raw":"GET /assets/green/js/script.js?v=43.4.2 HTTP/1.1\r\nHost: kvatoday.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kvatoday.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=d5lfgIHw87BP6ahv\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Apr 2026 13:07:22 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 04 Mar 2026 13:08:44 GMT\r\netag: W/\"69a82edc-345a\"\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=7200\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iAt0qmxgQ%2BPGxNF8mgkLbd8obpBF1U75BkszSl7eEuPKFwpF8XkvmGIcTONNPROXMR9Iq11FOHKfGjFn5TsxhUv0PmTbbqtDmnoquk1IlIduugG3kW3FtvhvXGx2Ocw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb27421ef131525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13402,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"cf476bfd361bd1968b8faca737c561eb","sha1":"f2fed6bbedd0350d5aac965a1db3c49c623949b7","sha256":"2c56edcebd0c683da4b509cb9a320aa5c4b030d42396bbe75a5fd9e99bbae2d2","sha512":"31f181d79f8571b23b2ae3c3eabd9ee2d21ae446e594662599c6e622b02090aa57677fb1620231c27ad33847307723465815c71a792096fb95e6243c3190b9b8","ssdeep":"384:Pia5nuka6lO9sr8eTb8s8lyYL1lB5BYrW8fWbXOyaj:PiajlkeTb8s+9YHj","tlshash":"5852425a13fa05345573a0ba9f8b0e413120901f2847da293d9c45c96fc6e3a99fdffa","first_seen":"2026-01-27T03:23:56.523321Z","last_seen":"2026-04-12T13:34:59.040038Z","times_seen":23,"resource_available":true,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"kvatoday.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:23.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kvatoday.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Apr 2026 12:42:46 GMT\r\nexpires: Mon, 12 Apr 2027 12:42:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 1477\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-13T07:12:43.913278Z","times_seen":77416,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":267,"dns":0,"connect":22,"send":0,"wait":8,"receive":2,"ssl":249},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/uploads/pwas/lfHwBPhv0Z8/logo-1775494707923_512x512.webp?s=16x16","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:23.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kvatoday.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:54:48 GMT","end":"Fri, 19 Jun 2026 05:54:47 GMT"},"fingerprint":{"sha1":"AA:7E:8F:B8:1D:0F:F5:88:1A:BB:77:20:90:FF:E5:0B:F3:9E:7F:C0","sha256":"B2:5E:C4:7D:B0:C0:47:0A:D9:E9:C0:E2:D6:65:63:C4:B2:B2:B4:F3:FB:06:94:4A:C1:EE:15:6E:6A:D0:31:6C"}}},"request":{"raw":"GET /uploads/pwas/lfHwBPhv0Z8/logo-1775494707923_512x512.webp?s=16x16 HTTP/1.1\r\nHost: kvatoday.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kvatoday.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=d5lfgIHw87BP6ahv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Apr 2026 13:07:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37554\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 06 Apr 2026 16:58:28 GMT\r\netag: \"69d3e634-92b2\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DTrgCn23tkTsHs%2FILPnqk5og9FgeK46UL7SJa4Y3x3wXmPSDPfFnWVX56pIAJ8Ufy9JBvySr%2FjCCii%2BIrvcCAdiC7eyhwlV7%2B2GDeqG4nM5QhYsPvdYwDtkgsNYy6q8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb2742808031525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37554,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5ed8d3374494186520592da3eeea9e39","sha1":"28cfd0cdec61349f7a93c19e4dfd7422da6bc1d2","sha256":"c6dc11880d05df004c14aeef30e6859512635a68929ce2e6fb4b8b39c42f2d53","sha512":"369435588f6f9aee99ee587f8e41c712f3edf3f21fe300f473363c93d36801a9a40146a32e309c96ed2e0560faaa1d23329ef0b30ed0790a5e012c1b2b821793","ssdeep":"768:lQVxQlb8OGFqqjp8+1GcEebdGwTBVWxylhaeX0Q5G773/aQAgtJE0TmYB:lncqnL/UIklDN5s73/aSZTmQ","tlshash":"d1f2017c6c2804d1a89b161fe36fee90379c9b572fdde0a898518e7f92d1918188212f","first_seen":"2026-04-12T13:07:48.022852Z","last_seen":"2026-04-12T13:33:00.447121Z","times_seen":2,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"kvatoday.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/manifest.json","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:22.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kvatoday.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:54:48 GMT","end":"Fri, 19 Jun 2026 05:54:47 GMT"},"fingerprint":{"sha1":"AA:7E:8F:B8:1D:0F:F5:88:1A:BB:77:20:90:FF:E5:0B:F3:9E:7F:C0","sha256":"B2:5E:C4:7D:B0:C0:47:0A:D9:E9:C0:E2:D6:65:63:C4:B2:B2:B4:F3:FB:06:94:4A:C1:EE:15:6E:6A:D0:31:6C"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: kvatoday.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kvatoday.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=d5lfgIHw87BP6ahv\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Apr 2026 13:07:22 GMT\r\ncontent-type: application/manifest+json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t5CeEDv6EVCEJ9BSPrhBhTqZvxEykwqZZcdw56mSXsUbU37oizkAO7%2FYyhLOCvgwAJd2owRkjO%2B5qelB5k%2Bpm5HefUj03ohM%2B9qCB7cCBI%2FcIqtvh671GrSxtJgnz%2FU%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Authorization\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-download-options: noopen\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-language: en-US\r\netag: W/\"542-wCsRZI28E39/GqpQbanFNdmCuFk\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb27421df061525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1346,"size_decoded":0,"mime_type":"application/manifest+json; charset=utf-8","magic":"JSON text data","md5":"3fb938f5088197a1f877546413509ddc","sha1":"c02b11648dbc137f7f1aaa506da9c535d982b859","sha256":"edcdb3d4fe36ea80cbc951003586e726504c2378591701a97bd2c9135ee7bc0c","sha512":"a2cf16c81dcb534f698c1346069957512c00c4c55df0e90b7041d4659142a4b3315350c3f83a52cfdaf48295c2242109657d64db1e68f73dc0e29c27861eb5c6","ssdeep":"","tlshash":"9121017b089aec7e5be903ea029fb60d9a3e310b14d9b941ee80383c21d4b91005b125","first_seen":"2026-04-12T13:07:48.042438Z","last_seen":"2026-04-12T13:33:00.44133Z","times_seen":2,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"kvatoday.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/uploads/pwas/lfHwBPhv0Z8/logo-1775494707923_512x512.webp?s=192x192","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:22.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kvatoday.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:54:48 GMT","end":"Fri, 19 Jun 2026 05:54:47 GMT"},"fingerprint":{"sha1":"AA:7E:8F:B8:1D:0F:F5:88:1A:BB:77:20:90:FF:E5:0B:F3:9E:7F:C0","sha256":"B2:5E:C4:7D:B0:C0:47:0A:D9:E9:C0:E2:D6:65:63:C4:B2:B2:B4:F3:FB:06:94:4A:C1:EE:15:6E:6A:D0:31:6C"}}},"request":{"raw":"GET /uploads/pwas/lfHwBPhv0Z8/logo-1775494707923_512x512.webp?s=192x192 HTTP/1.1\r\nHost: kvatoday.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kvatoday.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=d5lfgIHw87BP6ahv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Apr 2026 13:07:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37554\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 06 Apr 2026 16:58:28 GMT\r\netag: \"69d3e634-92b2\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mauv%2BBt3aHm9jiTlSi1k5jRbfRL6QwqI5SnoeLpdC40ySz3pkjmXwAEskNdfNw9RwQTJrScsNHFDnxwaqC1qxkar8dnVhtgj%2B8B%2Bch1XCZzA0nFft3spQ%2BUnG3mwN0E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb27421df0a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37554,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5ed8d3374494186520592da3eeea9e39","sha1":"28cfd0cdec61349f7a93c19e4dfd7422da6bc1d2","sha256":"c6dc11880d05df004c14aeef30e6859512635a68929ce2e6fb4b8b39c42f2d53","sha512":"369435588f6f9aee99ee587f8e41c712f3edf3f21fe300f473363c93d36801a9a40146a32e309c96ed2e0560faaa1d23329ef0b30ed0790a5e012c1b2b821793","ssdeep":"768:lQVxQlb8OGFqqjp8+1GcEebdGwTBVWxylhaeX0Q5G773/aQAgtJE0TmYB:lncqnL/UIklDN5s73/aSZTmQ","tlshash":"d1f2017c6c2804d1a89b161fe36fee90379c9b572fdde0a898518e7f92d1918188212f","first_seen":"2026-04-12T13:07:48.022852Z","last_seen":"2026-04-12T13:33:00.447121Z","times_seen":2,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"kvatoday.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/assets/green/img/user.png","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:22.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kvatoday.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:54:48 GMT","end":"Fri, 19 Jun 2026 05:54:47 GMT"},"fingerprint":{"sha1":"AA:7E:8F:B8:1D:0F:F5:88:1A:BB:77:20:90:FF:E5:0B:F3:9E:7F:C0","sha256":"B2:5E:C4:7D:B0:C0:47:0A:D9:E9:C0:E2:D6:65:63:C4:B2:B2:B4:F3:FB:06:94:4A:C1:EE:15:6E:6A:D0:31:6C"}}},"request":{"raw":"GET /assets/green/img/user.png HTTP/1.1\r\nHost: kvatoday.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kvatoday.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=d5lfgIHw87BP6ahv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Apr 2026 13:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 148\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 04 Mar 2026 13:08:44 GMT\r\netag: \"69a82edc-94\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kNuGAJQtC7chB%2FRJfeFag%2BSg%2FltUrzbniLOjNlQHu%2FUWYhrx9KlAVuR4tE%2BpZOu%2Fx2G2PS%2FPOj0OVT6RyQ7A31xvkOG%2Buvk3YCYYvUk0XLH5bpOuvI83tVTie3H7sV4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb27421ef101525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":148,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced","md5":"6a82d2ed501108b93ae141c24ec8ff31","sha1":"0fa770617167b0445abca473adf6ad119282e028","sha256":"9137b07942abada9db72a2a5596506a46532a071339fd07f7434a76017bbacd0","sha512":"ad9d427f163998e028457bbc5d61a869c122f85a31f3167245280b744a9a468c40a3c9b629ae797eafa4a8f46cfe810ade182849013467a8b448139970af759f","ssdeep":"","tlshash":"6ec02bc317c47f7ec6ef03239d18ce157a2280b8168826100c428019753214e647dac1","first_seen":"2023-05-15T07:31:55Z","last_seen":"2026-04-12T13:34:59.034699Z","times_seen":190,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"kvatoday.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/assets/green/img/right-arrow.svg","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:22.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kvatoday.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:54:48 GMT","end":"Fri, 19 Jun 2026 05:54:47 GMT"},"fingerprint":{"sha1":"AA:7E:8F:B8:1D:0F:F5:88:1A:BB:77:20:90:FF:E5:0B:F3:9E:7F:C0","sha256":"B2:5E:C4:7D:B0:C0:47:0A:D9:E9:C0:E2:D6:65:63:C4:B2:B2:B4:F3:FB:06:94:4A:C1:EE:15:6E:6A:D0:31:6C"}}},"request":{"raw":"GET /assets/green/img/right-arrow.svg HTTP/1.1\r\nHost: kvatoday.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kvatoday.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=d5lfgIHw87BP6ahv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Apr 2026 13:07:22 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bhPwbh29IFEQAsMm9TZC5b3V0uX4pZHbwKzDJCkwu3LJtAAL4rzNoe4PJ4LMnbdT0LPRn79N3F6kNTE4hLP9eW3pbUJCQXLbZUsv%2BHZivqZbhj4QuVP4xpihUbzqJyY%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 04 Mar 2026 13:08:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\netag: W/\"69a82edc-e2\"\r\ncf-ray: 9eb27421ef111525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cdc8c4dfb326d61e002af3717a6ba6b8","sha1":"1cd5de8164afc52d01339fc90c67cb28c2caaeec","sha256":"e83c7215bc8fc58ea06d5e459ee3c3823cb9a556f967326884189f281699e33e","sha512":"1dd538575a6d85ea30915995f05e545488673e7d022d481faf660a6d5f6ad43c9c647cc487d62bfb8429a0f2b6070de895bf3b1b498710bbecd33e282f081247","ssdeep":"","tlshash":"c8d02361d15c5e88df0cc2609f7cbd6312e9f1b60a4901cfe400d3116505467dc47edc","first_seen":"2023-06-12T09:53:26Z","last_seen":"2026-04-12T13:34:59.030685Z","times_seen":164,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"kvatoday.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:23.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kvatoday.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Apr 2026 12:42:46 GMT\r\nexpires: Mon, 12 Apr 2027 12:42:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 1477\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-13T07:12:43.913278Z","times_seen":77416,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":130,"dns":1,"connect":20,"send":0,"wait":8,"receive":3,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:23.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kvatoday.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 18:14:15 GMT\r\nexpires: Sun, 11 Apr 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 67988\r\nlast-modified: Wed, 18 Feb 2026 19:51:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"f92ee388273b5931a1b09a41d3906a3a","sha1":"d38fbadd1b1ceccffbfb43f677698f3a7112f0b4","sha256":"481dd0c01e6bbb129fd147eb5d8571016193cba141c4627ca60ceabdb5a46ea8","sha512":"a3a042b0a845b46de4c272bca16e48d5f332386dc3d4e6e8cf4ebc63238950c265d5a1b3955d257ff12fa3ced224ff11818385256786612130bd35dbd5fe2033","ssdeep":"384:GnNWef/I43MJlQUfZZgeoBpKtbPjHdLE+igeN/T67+mFirVAfPdixSNCsugG3iMF:GsCvIOUfZaeoytbZLE+i9pT67+/rVSdO","tlshash":"96b2e012e6c8bdf6e0c1093e25317ecb298fd9eba8724c624c1ab95d339257c5819d4c","first_seen":"2026-02-19T22:49:57.285177Z","last_seen":"2026-04-13T06:41:45.248943Z","times_seen":3994,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":68,"dns":1,"connect":26,"send":0,"wait":27,"receive":1,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:23.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kvatoday.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20556\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Apr 2026 18:54:16 GMT\r\nexpires: Sat, 10 Apr 2027 18:54:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 151987\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20556,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20556, version 1.0","md5":"8feefe1e602c4b14ff414a77c3af2c2c","sha1":"e57daae78e76c8944e97edecfa656f8608e09db5","sha256":"2addf2d86d7a5778653b36d551e97a39da52855f82fac7461cfc1bd86d460aed","sha512":"893f9695ee887eed00246f24d4ec3e17ed64e2af4fab055f951795f50d34f3685aafcfbda943060a132c42169d2ef5c99d3db4fb901d57a09e712b4ff02afd92","ssdeep":"384:tpv6fcCujSd2+uNZ0omwRnNPqfWvx/CldKV8D2w9lQXL79Ci5q8S/USM2BHRpWp6:fxC0So4wRhx90K6ywQLIWS8S5By5AR","tlshash":"8792e056b288746a77e4e3ecc859ae6c65ed9b0f0c1b15b909322122f196c4734930f9","first_seen":"2026-02-19T22:35:21.90447Z","last_seen":"2026-04-13T07:13:19.319863Z","times_seen":8081,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/uploads/pwas/lfHwBPhv0Z8/Cv4UgABq4X.webp?v=1773073599826","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:23.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kvatoday.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:54:48 GMT","end":"Fri, 19 Jun 2026 05:54:47 GMT"},"fingerprint":{"sha1":"AA:7E:8F:B8:1D:0F:F5:88:1A:BB:77:20:90:FF:E5:0B:F3:9E:7F:C0","sha256":"B2:5E:C4:7D:B0:C0:47:0A:D9:E9:C0:E2:D6:65:63:C4:B2:B2:B4:F3:FB:06:94:4A:C1:EE:15:6E:6A:D0:31:6C"}}},"request":{"raw":"GET /uploads/pwas/lfHwBPhv0Z8/Cv4UgABq4X.webp?v=1773073599826 HTTP/1.1\r\nHost: kvatoday.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kvatoday.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=d5lfgIHw87BP6ahv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Apr 2026 13:07:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2526\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 21 Mar 2026 10:50:13 GMT\r\netag: \"69be77e5-9de\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ChCZWLZb%2BUHX9UZ4qAYHam0Gaga5H6T8t5TK0YndcvEnxvvU3apaE7Yn9wcZBn21QKAv9bZxIy0ZChg37j5PskuBUmzO483ByfnD5EiddJppuc6MGo7JKwact4CMh7E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb274250f851525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2526,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8ed4dffdc63aa49ddf8b68b2f4193e57","sha1":"d57c2812cb31a28f28b35ffcf54609e75b46c68d","sha256":"61936fc4276bf6be611dabcb45e41e2c317e8d3cfe3b7ff098ae28be6a6d294a","sha512":"4f2d1d496b5078c50c04b3c6f21e5d6478834841cd667906e59b80580e09ffb2592db36ab6d371666a3933f9e747b56fbbceaeb0bd3377688bfcea6df4bf34cc","ssdeep":"","tlshash":"6c513a61a4cad7c4a0f1137c780eaff4805229a77486ef13b415d9f870b969b69e09a4","first_seen":"2026-04-12T13:07:48.05144Z","last_seen":"2026-04-12T13:33:00.437715Z","times_seen":2,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"kvatoday.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/uploads/pwas/lfHwBPhv0Z8/yvRirdp6xCM.webp?v=1775495022404","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:23.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kvatoday.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:54:48 GMT","end":"Fri, 19 Jun 2026 05:54:47 GMT"},"fingerprint":{"sha1":"AA:7E:8F:B8:1D:0F:F5:88:1A:BB:77:20:90:FF:E5:0B:F3:9E:7F:C0","sha256":"B2:5E:C4:7D:B0:C0:47:0A:D9:E9:C0:E2:D6:65:63:C4:B2:B2:B4:F3:FB:06:94:4A:C1:EE:15:6E:6A:D0:31:6C"}}},"request":{"raw":"GET /uploads/pwas/lfHwBPhv0Z8/yvRirdp6xCM.webp?v=1775495022404 HTTP/1.1\r\nHost: kvatoday.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kvatoday.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=d5lfgIHw87BP6ahv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Apr 2026 13:07:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3130\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 06 Apr 2026 17:03:42 GMT\r\netag: \"69d3e76e-c3a\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FU1MDKy3mSYdh5GY%2FTRQMVd0Ir2pSeSTGT%2BmhRBdxG3b9kCNPAaCE9R36MV%2FpT7p8cNP1C8tSBlYa%2FhMhyObNwtL%2F2PsvBp4ktNfvrJ8fC9gM9Fm%2FkQqnI0J9ExCDTs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb274250f861525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3130,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0b2bd1180147dbf28f576fd64f9e26f8","sha1":"2bd77f8512163ea62278b377c1abd26c985c72df","sha256":"0ffad23909929f81d4af8f18944e14b71d446c1e0527601de330eb190ff0a0a6","sha512":"7b334411ce8af919f5688f13fefe24e065880092220fdd5bd43c6bb278a7e46699a09d563054c78bf04285d60705eb0feee4d1f6f6a2fd2ff56a27c52848be28","ssdeep":"","tlshash":"5d516d81753817d8ce671462c685954002df7a4591ccb32d06836a1a97621367ff1f7e","first_seen":"2026-04-12T13:07:48.053595Z","last_seen":"2026-04-12T13:33:00.445398Z","times_seen":2,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"kvatoday.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/uploads/pwas/lfHwBPhv0Z8/logo-1775494707923_512x512.webp?s=180x180","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:22.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kvatoday.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:54:48 GMT","end":"Fri, 19 Jun 2026 05:54:47 GMT"},"fingerprint":{"sha1":"AA:7E:8F:B8:1D:0F:F5:88:1A:BB:77:20:90:FF:E5:0B:F3:9E:7F:C0","sha256":"B2:5E:C4:7D:B0:C0:47:0A:D9:E9:C0:E2:D6:65:63:C4:B2:B2:B4:F3:FB:06:94:4A:C1:EE:15:6E:6A:D0:31:6C"}}},"request":{"raw":"GET /uploads/pwas/lfHwBPhv0Z8/logo-1775494707923_512x512.webp?s=180x180 HTTP/1.1\r\nHost: kvatoday.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kvatoday.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=d5lfgIHw87BP6ahv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Apr 2026 13:07:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37554\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 06 Apr 2026 16:58:28 GMT\r\netag: \"69d3e634-92b2\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=12mchytwqQzMfvQ8Lx4RIwL9n2Mab%2FDHFXjVvkw7Jut9JevTyho7IurNfvoUkQFmkEJTl5Ok9UjFQidie6ObpNGpV0TnoDmiyshSCODtaueoaD9OLwRpmdl6r1peeEE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb27421df091525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37554,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5ed8d3374494186520592da3eeea9e39","sha1":"28cfd0cdec61349f7a93c19e4dfd7422da6bc1d2","sha256":"c6dc11880d05df004c14aeef30e6859512635a68929ce2e6fb4b8b39c42f2d53","sha512":"369435588f6f9aee99ee587f8e41c712f3edf3f21fe300f473363c93d36801a9a40146a32e309c96ed2e0560faaa1d23329ef0b30ed0790a5e012c1b2b821793","ssdeep":"768:lQVxQlb8OGFqqjp8+1GcEebdGwTBVWxylhaeX0Q5G773/aQAgtJE0TmYB:lncqnL/UIklDN5s73/aSZTmQ","tlshash":"d1f2017c6c2804d1a89b161fe36fee90379c9b572fdde0a898518e7f92d1918188212f","first_seen":"2026-04-12T13:07:48.022852Z","last_seen":"2026-04-12T13:33:00.447121Z","times_seen":2,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"kvatoday.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kvatoday.top/assets/green/img/choise.png","fqdn":"kvatoday.top","domain":"kvatoday.top","tld":"top"},"ip":{"addr":"104.21.66.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:22.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kvatoday.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 05:54:48 GMT","end":"Fri, 19 Jun 2026 05:54:47 GMT"},"fingerprint":{"sha1":"AA:7E:8F:B8:1D:0F:F5:88:1A:BB:77:20:90:FF:E5:0B:F3:9E:7F:C0","sha256":"B2:5E:C4:7D:B0:C0:47:0A:D9:E9:C0:E2:D6:65:63:C4:B2:B2:B4:F3:FB:06:94:4A:C1:EE:15:6E:6A:D0:31:6C"}}},"request":{"raw":"GET /assets/green/img/choise.png HTTP/1.1\r\nHost: kvatoday.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kvatoday.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pwauid=d5lfgIHw87BP6ahv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Apr 2026 13:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 218\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 04 Mar 2026 13:08:44 GMT\r\netag: \"69a82edc-da\"\r\ncache-control: public, max-age=172800, stale-while-revalidate=7200\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()\r\nx-content-security-policy: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\nx-webkit-csp: default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com;\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1TLrVdD6NqCOELzk6KTctegbPq%2Bxn%2FATYG5Nb775yIdv7tcEKHHCgtIT8gn1stZFk%2BlhqUOH1hW9e4zI0GeNXHNHX5YtUdzBRKhdsgC0mhPAUlYE%2BHNJvNG6Dp2TwHQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb27421df0d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":218,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 14 x 14, 4-bit colormap, non-interlaced","md5":"d76b357bdf86c3bde77124fe200cbb0f","sha1":"01fbbdb6193cc2452993a3315e99b5de0a2b0a6e","sha256":"3d1510bb842ca08d4529ada5711e0bd4724153439efe49c5ff6f2f8d36c23027","sha512":"976fef7cb7c754418201de38dc4b62fe625aa18f8827a584ab5a0c7b61510c802d44669697bcefbc1b5d37efe38bd483c2233d0caaf2d435f02755c1efd6b9d1","ssdeep":"","tlshash":"0dd023e7dd459d311400d157db9c1e4088d1473d1417531acbbaf51f5f6248cd3d05c5","first_seen":"2023-05-29T14:41:10Z","last_seen":"2026-04-12T13:34:59.038343Z","times_seen":188,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"kvatoday.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:23.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kvatoday.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Apr 2026 13:07:23 GMT\r\ndate: Sun, 12 Apr 2026 13:07:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67176,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ab850d710cb8d2c822eca52fcb39630d","sha1":"6b1016a61cb54834b42380de194088a39d0673b5","sha256":"acbf6e2b73bf91ea123df383211a180d57eb23c883a466afdec45a80fd03587d","sha512":"75908bb4facb97dbdbb3df2cdd51b28165d7d9c0dbd60997f507c7e79d44709c97566f25b5249bae201225d5fb83877c43734052ebfe858a19edfd9ba4ef471f","ssdeep":"768:yDdD9DADNDgBDUKD7DnDWHncXgLUahdPuOJ+gaULUIIV1ClghUULPy7bYLgXU+l5:GyDSegtxyllff","tlshash":"6b630e91041b5440ab834ce223cebf35fe1f92507151d0b9abfc9b6baddbca6526835c","first_seen":"2026-02-19T23:42:18.856088Z","last_seen":"2026-04-13T06:47:02.654486Z","times_seen":2623,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":61,"dns":0,"connect":7,"send":0,"wait":21,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kvatoday.top/","date":"2026-04-12T13:07:23.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kvatoday.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 18:14:15 GMT\r\nexpires: Sun, 11 Apr 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 67988\r\nlast-modified: Wed, 18 Feb 2026 19:51:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"f92ee388273b5931a1b09a41d3906a3a","sha1":"d38fbadd1b1ceccffbfb43f677698f3a7112f0b4","sha256":"481dd0c01e6bbb129fd147eb5d8571016193cba141c4627ca60ceabdb5a46ea8","sha512":"a3a042b0a845b46de4c272bca16e48d5f332386dc3d4e6e8cf4ebc63238950c265d5a1b3955d257ff12fa3ced224ff11818385256786612130bd35dbd5fe2033","ssdeep":"384:GnNWef/I43MJlQUfZZgeoBpKtbPjHdLE+igeN/T67+mFirVAfPdixSNCsugG3iMF:GsCvIOUfZaeoytbZLE+i9pT67+/rVSdO","tlshash":"96b2e012e6c8bdf6e0c1093e25317ecb298fd9eba8724c624c1ab95d339257c5819d4c","first_seen":"2026-02-19T22:49:57.285177Z","last_seen":"2026-04-13T06:41:45.248943Z","times_seen":3994,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":69,"dns":0,"connect":20,"send":0,"wait":27,"receive":1,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}