{"report_id":"f8e2380d-8c04-4b2c-b3ea-a1a49318e67e","version":6,"status":"done","tags":[],"date":"2025-09-26T04:41:16Z","url":{"schema":"http","addr":"www.kisaran4dpermai.com/wap/","fqdn":"www.kisaran4dpermai.com","domain":"kisaran4dpermai.com","tld":"com"},"ip":{"addr":"104.21.41.182","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.kisaran4dpermai.com/wap/","fqdn":"www.kisaran4dpermai.com","domain":"kisaran4dpermai.com","tld":"com"},"title":"Kisaran 4D"},"submit":{"url":{"schema":"http","addr":"www.kisaran4dpermai.com/wap/","fqdn":"www.kisaran4dpermai.com","domain":"kisaran4dpermai.com","tld":"com"},"ip":{"addr":"104.21.41.182","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-31T04:41:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"www.kisaran4dpermai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"vsa115.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3106324,"first_seen":"2020-06-19T04:03:48Z","last_seen":"2025-09-22T06:20:46.585641Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1088,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2025-09-21T22:30:58.785257Z","alert_count":0,"request_count":5,"received_data":8121,"sent_data":2680,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2025-09-21T22:30:58.768233Z","alert_count":0,"request_count":26,"received_data":1573091,"sent_data":12182,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-09-21T22:12:58.070161Z","alert_count":0,"request_count":2,"received_data":305071,"sent_data":877,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.kisaran4dpermai.com","ip":{"addr":"172.67.149.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-09-26T04:41:18.15857Z","last_seen":"2025-09-26T04:41:18.15857Z","alert_count":8,"request_count":8,"received_data":191291,"sent_data":4384,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:1.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"waktugold.com","ip":{"addr":"172.67.71.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-01-14","domain_rank":297872,"first_seen":"2020-01-14T08:43:59Z","last_seen":"2025-09-08T21:39:57.855235Z","alert_count":0,"request_count":4,"received_data":3938731,"sent_data":1826,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fbc89a58786b22123cdd3346cc3b728","sha1":"1f4af46a87647949bde1f12d5922fa01b984362e","sha256":"d67f9d7dca1c007e3bc5605e3f02d8e4990385b145d9b692e6d38692b1f5a766","sha512":"90c8d6587887ecf0c419272c287bbf3afff0d92f2adf0ee531e0b9b6bee3b41288256e91412cd39aaeddd90bab50652b5404d2316c437e7e56564689350ed54c","ssdeep":"192:0CFny7Cpmx7bZTxcwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mCmZTJr40v0GF/LvV4hwsR","tlshash":"9f2295b7e0a1107ea316871c506fa610f62f6c8ab2461da5ba7ab45f900ddcfc065f7c","size":10789,"data":"","first_seen":"2025-04-29T08:39:38.305646Z","last_seen":"2026-04-10T07:58:25.921352Z","times_seen":9391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6718c4b3d62001e7df4e8cd01b700c13","sha1":"9645434b9d5896aea27797337335c2c5dc142b38","sha256":"4dcf61fc9add2a94aa1e4b28c96f780c79e715d7d3acf71e4d608aaad2a22b65","sha512":"596a3b45e29ed941d433b15f1c0f708010d395ee7466f62a4aa4f0101547cd0ab6cd213d2d6b93c75b0f6ae077b0575bf6bb32e5fb48949d72139b1cee470e20","ssdeep":"384:eqw/U5YK8Hx9KJSThWamNbUZDkM0kWEdPk6x+UtKMAeH:7+9KJSThWamNbUZDkM0kWEdPk6x+9veH","tlshash":"bb52c6a7b2a4782d46379712708f3204f33b7d457215da19f36edcea4aa88c16056f3e","size":14269,"data":"","first_seen":"2025-09-23T04:46:31.122179Z","last_seen":"2025-09-30T05:37:29.516067Z","times_seen":319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kisaran4dpermai.com/assets/js/jquery-1.7.1.min.js","fqdn":"www.kisaran4dpermai.com","domain":"kisaran4dpermai.com","tld":"com"},"ip":{"addr":"172.67.149.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddb84c1587287b2df08966081ef063bf","sha1":"9eb9ac595e9b5544e2dc79fff7cd2d0b4b5ef71f","sha256":"88171413fc76dda23ab32baa17b11e4fff89141c633ece737852445f1ba6c1bd","sha512":"0640605a22f437f10521b2d96064e06e4b0a1b96d2e8fb709d6bd593781c72ff8a86d2bfe3090bc4244687e91e94a897c7b132e237d369b2e0dc01083c2ec434","ssdeep":"1536:k5RKUpVgklsdbuLP/l+0fGzA8gmtasgx/c9Rzzi4yff8qeLvHHEjam7rSnmBn9gn:Ee8FbGzA81+xRRi1Z3","tlshash":"0a93e7d9b2d6716387b731bc50af510bb13698aa784c8c50f068d8e4be74a48907bf7d","size":93868,"data":"","first_seen":"2023-03-07T01:03:13Z","last_seen":"2026-04-16T21:10:19.629223Z","times_seen":15840,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-2d0b383d.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"34312812f7dddcf71dd6e3448516aa3b","sha1":"f6360863c25395582063ee7d514e98e8bbdbd553","sha256":"38eb2a87e5f34a104ee13b7c9d12ed8e9d43036c587c96fe146a232a0131805d","sha512":"6b2110e1c14fa56d65029c51b080e7971b6210b5df0760e884255cb5826769540a1d2b3f788273af6c7a0399fbeae8d4b92294f7a759900a7cbfbd57415890fb","ssdeep":"","tlshash":"79011bc8b01bf8b80da7f240857ba13979625b8d461888a0ea31eaf95984205d20fb5e","size":686,"data":"","first_seen":"2025-01-10T07:39:13.639642Z","last_seen":"2026-04-10T07:58:26.00267Z","times_seen":11358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64d4726e3af8a10bea07fac08bb44cc1","sha1":"8b9fb4cdfb56b2777732b362edef4dced915a8de","sha256":"a2b5251308db3d187fb7372134bb9683874d12b6aa3d79113f567262efbf5821","sha512":"e3d13bcfe7325ff7468e08ebe4652a53c6c1be51ad2828e9b810490b13b6e8badb1c3dae35406b8f40d16337ca9f1cdaead00321942584b540b3929dd3c05abb","ssdeep":"1536:BigMXSFu1R6wtTn32jzDVgaOEUWbaGlDluK1NFYXdZ3x3u4V5pXYMrlSf:4DiuHBkGyPkx3u4V5pXrlSf","tlshash":"87a3096ef091b47d8993d26120af3212f3353d55a919d0a8f238cdf859d89c9a127f3e","size":105323,"data":"","first_seen":"2025-09-23T04:46:31.1417Z","last_seen":"2025-09-30T05:37:29.400753Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bb7aac0cac89a90304af1c72eb4f50d","sha1":"729f6f8ca5787d89743b0ed7eb27fd76406bf985","sha256":"f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b","sha512":"ed26bf873a3c5b2e48d8b3c955240a46d8f7d7f3c635ab138179b999dbadc77802285879cb1a833f703059762c346066090a9a740bfe881f56d6d95f2dca7f30","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSob5/ove:Q/drlyogMVc6FIKV+ZLBSob5l","tlshash":"59546c7a87606deeea94d02d86db374af58c3c0453ed1266b66482cb27f543a33487dc","size":302554,"data":"","first_seen":"2023-04-05T07:49:38Z","last_seen":"2026-04-16T20:55:09.100226Z","times_seen":44823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kisaran4dpermai.com/assets/js/function.js","fqdn":"www.kisaran4dpermai.com","domain":"kisaran4dpermai.com","tld":"com"},"ip":{"addr":"172.67.149.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3105d10b2e5a2da199bcccb8f668e145","sha1":"eae77eeeff5adc7b5a29fb7c5b12241d86e1d05a","sha256":"086fbbf1032a4b6c0293610144bead2f78af2ac7d9a680ad28fc5fdf3ddee865","sha512":"ecc51eee68072af0bdbde5a646c26f35f816b2dc9ca5705b441a76d0114b62b72bb6ebb0e109e524162e73e9416eceb7c17e1fe19eb91ced8bd8a1089929ee78","ssdeep":"","tlshash":"80411e68b9922166027733390b2e500af27a9c7303499441fd2ca9da6f31530a7fcead","size":2310,"data":"","first_seen":"2023-03-12T17:38:53Z","last_seen":"2026-04-06T04:12:51.461934Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","size":1000,"data":"","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-04-16T20:55:08.992911Z","times_seen":34864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kisaran4dpermai.com/wap/","fqdn":"www.kisaran4dpermai.com","domain":"kisaran4dpermai.com","tld":"com"},"ip":{"addr":"172.67.149.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2af93a536e4c1fb02953d01710cd06d","sha1":"7b93db8eb5123fb763163dcf1c9494f9f98f9beb","sha256":"1c214cf69b925e7f21df3be170f40b3b1ea39828d5df6cbc6e76dc555bfd4aaf","sha512":"fabf57a3bd9052c3adbc0f7774cb7e62268935ba5dffa6e37174bbe9ebcbedb5021280f2dac40c85a9eda153cafe94b22bacd4a8af8dd25773fd00bb8d31d8d2","ssdeep":"","tlshash":"8fd02375c1d95a0981d980f0c577b31e1f2f70025b67655549193580170e776d43f1e4","size":213,"data":"","first_seen":"2025-09-18T07:45:38.62229Z","last_seen":"2025-11-21T22:58:28.141011Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kisaran4dpermai.com/wap/","fqdn":"www.kisaran4dpermai.com","domain":"kisaran4dpermai.com","tld":"com"},"ip":{"addr":"172.67.149.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a7caf35539c3e6a134d03e639e1b76e","sha1":"50bb8612df05746153e60193224306711d7d595c","sha256":"81fefb561e60a88a2104ddbe9f3dfc01799039bbdab5681dc27d4f5130f4299e","sha512":"8386aac46d40d89f4fa6aed8e763081d0c6b64abd3bfb43f68e8bf3cef73e494d96b077d2e85c34923ca44e93e05ef3363e7314c4c20e365f707e0c83556912b","ssdeep":"","tlshash":"4fe0269e65006e25925352bb14b6de5c382230249a59d891499fcc8a2a4cd9a442ded9","size":334,"data":"","first_seen":"2025-09-18T07:45:38.624078Z","last_seen":"2025-11-21T22:58:28.142746Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/63578dcab0d6371309cb5d71/1gg95jmr6","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c3216ceaf1270f6607fe293f63e194b","sha1":"e92d44ac26781313834a04e9037a76616bf43172","sha256":"03b5ad5d2ea7d227427a27a4e83e322246fd4c09aefb1c13f5346f3d1720a57b","sha512":"b1e1410d90a426f1fe30e5e9a8d356c24859315067e5ab02439cf74c4c7d01262aad3ec4f9ae544945189f649c9e40ed4e4402c2de24f66fe8edeeb057b9a746","ssdeep":"","tlshash":"e841fde36b4f5d93a26450d80cbffd0e7473b4e64ad8ac928728049172656ad26ced2c","size":2123,"data":"","first_seen":"2025-09-26T04:41:23.563214Z","last_seen":"2025-09-26T05:46:17.750087Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-04-16T20:55:09.069806Z","times_seen":75508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-04-16T20:55:09.019854Z","times_seen":48994,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce187f6f987765cd6c747fe9b0b7cf0e","sha1":"6f4a725f053e03590194863b29731d6b02dfba98","sha256":"da0f026185fe18c3bced4b9bc942095378a0bc062722e6bd9c3540a2db95fd4f","sha512":"f0531c3625114c6de9b57c11753df6af2e8241bc4a5e6947ce5993a60489efcd410501f123eadc8a587d515cb2cf0efa1fcdbd4e5a82b2056526b231b8598e30","ssdeep":"","tlshash":"934183d936e8f9b6434318a1043f9016f6353976097be4c0531dd4f5bc78849815afb6","size":2306,"data":"","first_seen":"2025-09-23T04:46:31.228628Z","last_seen":"2025-09-30T05:52:13.033344Z","times_seen":382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kisaran4dpermai.com/assets/js/jquery.form.js","fqdn":"www.kisaran4dpermai.com","domain":"kisaran4dpermai.com","tld":"com"},"ip":{"addr":"172.67.149.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60c0735ed5ae6ccdcd941fbb3fe28163","sha1":"afeb5ecfd1ba1336dbda769ad9a8fb39fe1e6b34","sha256":"af70787177d7f2dcd370dc718c2278af33bf3fc3d5d966a12ef60748aff6f126","sha512":"67c91239e32db9540efd38064d7292bf65e292c86e4b13932fc5b4a260e8dbf276384a6208d0713c853c9dc2be0bbb97135c64b1d0cebc41b400e50c97a1e92d","ssdeep":"768:+hSewzM/NoW11Merew8t++pj366+PZAsWAa3ij6lOTwIcsKiMIzMJViZpZLZZzYO:i9wzM/NoW11JrewypwPZAf/SjCOJKiMg","tlshash":"8e03904a79eb12a2193334bd0befa1497739d0270209dda17d4c53906f94d74a2fafe8","size":38140,"data":"","first_seen":"2023-03-07T12:58:51Z","last_seen":"2026-04-15T16:49:48.934807Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kisaran4dpermai.com/assets/js/jquery.validate.min.js","fqdn":"www.kisaran4dpermai.com","domain":"kisaran4dpermai.com","tld":"com"},"ip":{"addr":"172.67.149.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"428390a3c112b8c5d7652a6dc055acdf","sha1":"4e4c224b63365495e328b71e31c367ffcb0c9919","sha256":"bf32a2487ad4f1768afd27c48d4d3815242851137f3fd8eea3f1d28f3b31edcc","sha512":"d02e6a97ce875b6a47cc5a537efb471f523e50b65e779332b4f628d17275bf13e0f4507166506c36d656f3d994656f42eca4d2df39840e8492a365722f739fe7","ssdeep":"384:h0jDU1a04f0Bfl/dgzh6qhCqsXhlFfTWvqMny+33zxe6MpRCuj0i1dpR0cEbN9Ka:+OD4Ydgzh6AbCMny+TyzdpRTEZoH+NR","tlshash":"d192b6097282b01b9bf630f5a45b610f70f25de9b04ca83db5b8d4d2bee4e854166f78","size":21077,"data":"","first_seen":"2023-04-07T03:33:13Z","last_seen":"2026-04-16T14:33:15.569913Z","times_seen":753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7187987440ee544ae011125a0c9ee40","sha1":"fa2bfdc9cc470a9e8277d6b3f4321fa2ffc6e8cb","sha256":"cacd267bd8b2bea1cab5cfed54427fb06c73c6b286a3de34310b4a72288c9c1b","sha512":"5b4387976dc30301ce68a621164086650a0d708a85206308600498f599f5d567839d33dc60f424c70f47bb2c654ba7f0db468e6e331de239790fc0db33d347d3","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJ7MoZm+odXsJ5Ar6VKkOP6I/:FGABPVhO5wdKJVMo4sJ5Ar6kSI/","tlshash":"03644bc8f183b0b606e6a1a5009f5207737a151968ed8498f574dfe968e8e5c633bf3c","size":324017,"data":"","first_seen":"2025-06-13T09:29:49.213683Z","last_seen":"2026-04-10T07:58:25.860572Z","times_seen":6944,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f140403032844ab34eebdf26dcb792cb","sha1":"584e667c5dd3ea49c1185951b6b661d7609a10b3","sha256":"9b237df0a413f1aaaf4d05ae57bda10a7a070efb4436529b1331dcbb538a3c77","sha512":"aa7d4b5022bf3696483c05218bf7b750d96b5a38105b58af320e64f982bb899e7502ff75b523a550f7b234b7f487337a2963111930ee4fb5309bcf67207fe8c5","ssdeep":"96:zNC9Hqt7pEma7hY/rcKkJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYOLRIvgx43nVY","tlshash":"b2b1859af247b456c156225150ef3b1df33a281ca61ccdc4a66565f218784cba077f3d","size":5261,"data":"","first_seen":"2025-09-23T04:46:31.201878Z","last_seen":"2025-09-30T05:37:29.551484Z","times_seen":337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e366e287ec14916e467a8fa84fd050aa","sha1":"7566228b5bf431a55aed0c4c5e9ba0c352b0119b","sha256":"e3b02ccde07fe748bead4e8c1c657982fda86f8a11d133b9c725ba4a07d8d01e","sha512":"3a89119449da8b6e4ca2d3aef2550f1236cdf2806f2544faa3cf7fe7f2a317948d05369098077c88d2ca8e06f06c530990e57149bac3b934e221fde1c9cc4af9","ssdeep":"192:kHNM+ORIU9HkC40V2tl+f9lVo7QYcb26o5A8f6uYZvUZaUZSPgM:GOb9HkCreHA87YZHh","tlshash":"d132d7c6f9c7b9624227524841efa618f73f2a947706dc18f06899f30a948c75077bbe","size":10989,"data":"","first_seen":"2025-09-23T04:46:31.119732Z","last_seen":"2025-09-30T03:34:55.164137Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-16T20:55:09.04778Z","times_seen":75467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"afe79fd63814e250ea6c3e9aa0712914","sha1":"8c10349ea972a02e3ffd0fe11865f8db282e5154","sha256":"39fcf207ca22aa2b2fbcaca1b95f6bb3184982c83a33516a9086a577b5e87890","sha512":"68554c77fc343c123eec3569eb5b58435cf73bbe4533a40ac8f016722d4bfb5b417fd6c1d9ab6bb46de67a0496b12af8acd63ca52f0d8ed23200d7d1d6cc82a2","ssdeep":"3072:Ce9YgYYqWzhT9d9WFW1Wv+fMAfOvKCrQYKMZdLMz9mw/S:J9WFW1WWfMAfrKNLMz9l/S","tlshash":"fb34c69df186b47606a37130501f320af23a685ab45ac4d4f636d8e1bd789cea133f79","size":239451,"data":"","first_seen":"2025-09-23T04:46:31.233194Z","last_seen":"2025-09-30T05:52:13.131201Z","times_seen":382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d5e48a3dc1ca8087b73688a1ff9d1d9","sha1":"deb1fce1bac5c1d1e563b1d730bd721d34adca5a","sha256":"8e8f6cbc964b3da544e11a2ad0d0cab69a32eb901b8375a3b511ee26c017ba8d","sha512":"5fc02f9d9e198ef8aa852811195239fe05a69c2311f6fba76effa97de96cab9718d5e84ac751e530a00455eb72ca62abd3b89b0e03f55f21b329e5d7c8299d39","ssdeep":"768:Vlxfu8+HYUmI+rToWf2z+y+Um/+VRJWf/W+Hc1Zt7Gj67IW8/JGvgLCBxf6stK43:xfurojf20UJWfO+st7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","size":53552,"data":"","first_seen":"2025-06-13T09:29:49.257135Z","last_seen":"2025-11-13T10:07:04.770796Z","times_seen":7262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kisaran4dpermai.com/wap/","fqdn":"www.kisaran4dpermai.com","domain":"kisaran4dpermai.com","tld":"com"},"ip":{"addr":"172.67.149.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"51d1a0c9e2bc651c51efa06e3121b434","sha1":"18770c211047ef1447c2c081f2ad32306b64365c","sha256":"f93153a71f28b9b96901934ee1566784681a069afad27ccf0c368b34e04db0bd","sha512":"4f49e76aca7767a4d927a10418b1a0135c3482ea88ef515849603ed7117b4dc384e8d5d6ea96acdcc067f50ba8ff8d04a05623eac9da275ae9d2dca123bd7d1b","ssdeep":"","tlshash":"24f0b457be596c39c5fbe872a0899a587b15e0c19c858c000978cd5e0e32ed694f7bc7","size":502,"data":"","first_seen":"2024-09-19T22:50:47.010684Z","last_seen":"2026-04-06T04:12:51.535339Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"781d2b0cd4ef81ae85170945a08c7012","sha1":"f5e31c40bc1e1ff37c095be93c4f2153fdfffcd5","sha256":"fa03d61b740a26ee807fdf07bf50f7fbf26ac8bcb107605a38bfda2b0eb53013","sha512":"abf87ab05ccc02fb7da90886b6f3843ac8f55e7942b5b4261a9245a5a7d5735d4fc57bcd8902118ef875aae6fb0e2a3a6dad9c355074b983b34c8ec1b5452139","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCRGN//h6LiJq:SzP2DTSLi8","tlshash":"e9822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","size":18392,"data":"","first_seen":"2025-09-23T04:46:31.136266Z","last_seen":"2025-09-30T05:37:29.448786Z","times_seen":336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:54.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/js/twk-chunk-2d0c8092.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\netag: \"f140403032844ab34eebdf26dcb792cb\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 117324\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\ncf-ray: 985015fbe8e256b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5261,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5261), with no line terminators","md5":"f140403032844ab34eebdf26dcb792cb","sha1":"584e667c5dd3ea49c1185951b6b661d7609a10b3","sha256":"9b237df0a413f1aaaf4d05ae57bda10a7a070efb4436529b1331dcbb538a3c77","sha512":"aa7d4b5022bf3696483c05218bf7b750d96b5a38105b58af320e64f982bb899e7502ff75b523a550f7b234b7f487337a2963111930ee4fb5309bcf67207fe8c5","ssdeep":"96:zNC9Hqt7pEma7hY/rcKkJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYOLRIvgx43nVY","tlshash":"b2b1859af247b456c156225150ef3b1df33a281ca61ccdc4a66565f218784cba077f3d","first_seen":"2025-09-23T04:46:31.201878Z","last_seen":"2025-09-30T05:37:29.551484Z","times_seen":337,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:55.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 39460\r\ncf-ray: 985016042e0556bd-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230085-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1437169\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MuLfZo7lX8LSF%2BbtTdLsjx%2BMwuDXNmpsN9L3LCYLWe4FuDtWI8a9ZvFQKdRTIujbII%2Baoo0I1mPalbMa56eVxW15%2BsbCr0tfeq7liOYntJMV3wpNKkhomanzxUuCoOuabXo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":302554,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32014)","md5":"3ebdfd5d06617d7d3cf6bf6e5c458085","sha1":"ac433f0c7c8c06dbb26a85d08a47eadcf30d783e","sha256":"a642ac8ca5dc75fc2fa88c4c1d54b6f57f2a27bac6a74e15a5667e78f2af8e0b","sha512":"7ea52d1e4cfb1b61b84f58790fe6e1649d22b1b4b854e45df4b7ecb1b30a6b4e2f6366c794c51f5ce605f8ed0e85f0577dcb7d0a250d3b4a7182c3639edae402","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifirh3dfEm+E5ove:Q/drlyogMVc6FIKV+ZhdfEm+ET","tlshash":"ab646f7d86506deee994902d86db3b4af9883c0493ed1276f66441cb37ba43a33487dc","first_seen":"2025-09-10T06:37:47.236235Z","last_seen":"2026-04-16T20:11:43.081546Z","times_seen":5620,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":31,"dns":1,"connect":1,"send":0,"wait":11,"receive":2,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kisaran4dpermai.com/assets/js/jquery.form.js","fqdn":"www.kisaran4dpermai.com","domain":"kisaran4dpermai.com","tld":"com"},"ip":{"addr":"172.67.149.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:51.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kisaran4dpermai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 11:26:57 GMT","end":"Wed, 10 Dec 2025 12:24:39 GMT"},"fingerprint":{"sha1":"83:1F:52:65:A4:0B:D7:82:E4:E3:B4:1F:34:60:57:46:7E:5E:76:4C","sha256":"DE:BF:E7:EC:91:69:CE:99:D7:39:7F:49:32:0A:71:7E:07:45:F3:35:FC:E3:C3:52:CC:E9:42:D2:00:6E:61:62"}}},"request":{"raw":"GET /assets/js/jquery.form.js HTTP/1.1\r\nHost: www.kisaran4dpermai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/wap/\r\nCookie: csrf=22f811617398fa3f2af2e4f710875cb2; togeking=d85ac8a1be71924d47893695e5f5852609979d44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 08 Dec 2021 09:34:34 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QPaSbkQ6x5fKc3NRPBWOZIqJOBkjpkjNsYPLTYl1cwl9qHwfeiOtUqp%2BvKOfHLenSvIgqQlosazZZ9DO2wMCloUdzsLLuuAQT7VPPplI2NPGQSYCYg%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=86400; includeSubDomains\r\netag: W/\"61b07c2a-94fc\"\r\ncontent-encoding: br\r\ncf-ray: 985015e85f1c56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38140,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"60c0735ed5ae6ccdcd941fbb3fe28163","sha1":"afeb5ecfd1ba1336dbda769ad9a8fb39fe1e6b34","sha256":"af70787177d7f2dcd370dc718c2278af33bf3fc3d5d966a12ef60748aff6f126","sha512":"67c91239e32db9540efd38064d7292bf65e292c86e4b13932fc5b4a260e8dbf276384a6208d0713c853c9dc2be0bbb97135c64b1d0cebc41b400e50c97a1e92d","ssdeep":"768:+hSewzM/NoW11Merew8t++pj366+PZAsWAa3ij6lOTwIcsKiMIzMJViZpZLZZzYO:i9wzM/NoW11JrewypwPZAf/SjCOJKiMg","tlshash":"8e03904a79eb12a2193334bd0befa1497739d0270209dda17d4c53906f94d74a2fafe8","first_seen":"2023-03-07T12:58:51Z","last_seen":"2026-04-15T16:49:48.934807Z","times_seen":133,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"www.kisaran4dpermai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waktugold.com/4dpgroup/banner-promotion/400x100a.gif","fqdn":"waktugold.com","domain":"waktugold.com","tld":"com"},"ip":{"addr":"172.67.71.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:51.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waktugold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 14:17:03 GMT","end":"Tue, 28 Oct 2025 15:15:40 GMT"},"fingerprint":{"sha1":"4D:98:78:9E:27:6D:00:59:B8:FE:77:27:F6:9E:A0:77:24:8C:74:80","sha256":"E1:15:76:0F:54:53:F1:DD:5A:CC:9E:EF:E4:6D:3E:A6:7B:19:EC:AE:A4:0C:2E:87:E8:40:FC:E4:38:B6:0C:CB"}}},"request":{"raw":"GET /4dpgroup/banner-promotion/400x100a.gif HTTP/1.1\r\nHost: waktugold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:51 GMT\r\ncontent-type: image/gif\r\ncontent-length: 865023\r\nserver: cloudflare\r\nlast-modified: Fri, 02 Dec 2022 02:46:52 GMT\r\netag: \"d32ff-5eecf5992ff00\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iKOqqqBw9Y9Tvao7aauX%2B3t%2BO0wPbXE86D4ZNto7unu%2FEjwjo%2FojWtVnyEWfl5udrJr5yS2N7mgVhT0hpEmwk9ghDa%2BAgRJM4Zzg\"}]}\r\ncf-ray: 985015ea2f525694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":865023,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 100","md5":"87ab0efa5efb80f988a3b28e23517193","sha1":"880e16c1fed928b735109c165cabe873dfb7d938","sha256":"c9ca93db2e53745f815ad678637e727255a4269f1fdd873e91b0679b84f55f76","sha512":"36d07c6d046fa7379a894a7d62c612185f0f5e59905d5c2ee39ac749e989a85ae331362b7703034d3cb70bf41a8d1ca9ea24d1a8b7df41b1af58337049941938","ssdeep":"24576:jVkV7tiRTPs585th/s0K0hhuPIjFEuftWwImsV:xy7tws5i9Kdoa1mw","tlshash":"40052336ca66e98abede599061f80a0c575dfdbf7031c84cf855b369389c2fc19c8948","first_seen":"2025-09-26T04:41:23.561961Z","last_seen":"2025-11-21T22:37:39.720254Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1510,"timings":{"blocked":269,"dns":6,"connect":3,"send":0,"wait":199,"receive":756,"ssl":274},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/63578dcab0d6371309cb5d71/1gg95jmr6","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:51.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /63578dcab0d6371309cb5d71/1gg95jmr6 HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.kisaran4dpermai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:52 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-68d221335f8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 985015eaacafb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"5c3216ceaf1270f6607fe293f63e194b","sha1":"e92d44ac26781313834a04e9037a76616bf43172","sha256":"03b5ad5d2ea7d227427a27a4e83e322246fd4c09aefb1c13f5346f3d1720a57b","sha512":"b1e1410d90a426f1fe30e5e9a8d356c24859315067e5ab02439cf74c4c7d01262aad3ec4f9ae544945189f649c9e40ed4e4402c2de24f66fe8edeeb057b9a746","ssdeep":"","tlshash":"e841fde36b4f5d93a26450d80cbffd0e7473b4e64ad8ac928728049172656ad26ced2c","first_seen":"2025-09-26T04:41:23.563214Z","last_seen":"2025-09-26T05:46:17.750087Z","times_seen":2,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":56,"dns":4,"connect":1,"send":0,"wait":467,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:54.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/js/twk-chunk-2d224aff.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\netag: \"781d2b0cd4ef81ae85170945a08c7012\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 179670\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\ncf-ray: 985015fbd8db56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18392), with no line terminators","md5":"781d2b0cd4ef81ae85170945a08c7012","sha1":"f5e31c40bc1e1ff37c095be93c4f2153fdfffcd5","sha256":"fa03d61b740a26ee807fdf07bf50f7fbf26ac8bcb107605a38bfda2b0eb53013","sha512":"abf87ab05ccc02fb7da90886b6f3843ac8f55e7942b5b4261a9245a5a7d5735d4fc57bcd8902118ef875aae6fb0e2a3a6dad9c355074b983b34c8ec1b5452139","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCRGN//h6LiJq:SzP2DTSLi8","tlshash":"e9822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","first_seen":"2025-09-23T04:46:31.136266Z","last_seen":"2025-09-30T05:37:29.448786Z","times_seen":336,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"vsa115.tawk.to/s/?k=68d61956046514e35bed890d\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2MzU3OGRjYWIwZDYzNzEzMDljYjVkNzEiLCJ2aWQiOiI2MzU3OGRjYWIwZDYzNzEzMDljYjVkNzEtRjBIc3NlVW41S0pMU0k2ZE1kRlBDIiwic2lkIjoiNjhkNjE5NTYwNDY1MTRlMzViZWQ4OTBkIiwiaWF0IjoxNzU4ODYxNjU0LCJleHAiOjE3NTg4NjM0NTQsImp0aSI6IlY1b25SREJyZVRobWRHbDRYRnZYNyJ9.p4F7meHcqlXGJeO-Un1ODc6kRoSmPqu8NLrhZGmbL0pzxdmkgFoFVucFneJyTgUsUKDplqE0htUqi-BBkMBA_Q\u0026EIO=3\u0026transport=websocket\u0026__t=Pc4KlbX","fqdn":"vsa115.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:54.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /s/?k=68d61956046514e35bed890d\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2MzU3OGRjYWIwZDYzNzEzMDljYjVkNzEiLCJ2aWQiOiI2MzU3OGRjYWIwZDYzNzEzMDljYjVkNzEtRjBIc3NlVW41S0pMU0k2ZE1kRlBDIiwic2lkIjoiNjhkNjE5NTYwNDY1MTRlMzViZWQ4OTBkIiwiaWF0IjoxNzU4ODYxNjU0LCJleHAiOjE3NTg4NjM0NTQsImp0aSI6IlY1b25SREJyZVRobWRHbDRYRnZYNyJ9.p4F7meHcqlXGJeO-Un1ODc6kRoSmPqu8NLrhZGmbL0pzxdmkgFoFVucFneJyTgUsUKDplqE0htUqi-BBkMBA_Q\u0026EIO=3\u0026transport=websocket\u0026__t=Pc4KlbX HTTP/1.1\r\nHost: vsa115.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.kisaran4dpermai.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 0atUytRf4hgSqoMzpeOxuw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 26 Sep 2025 04:40:54 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: 37yrg9zW6qp261cc8/1u/2JG/xo=\r\nsec-websocket-extensions: permessage-deflate\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: 985015fc6fe34c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":16,"connect":16,"send":0,"wait":479,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/log-performance/v3","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:54.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"OPTIONS /log-performance/v3 HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.kisaran4dpermai.com/\r\nOrigin: https://www.kisaran4dpermai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-crmc\r\naccess-control-allow-origin: https://www.kisaran4dpermai.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Fri, 26 Sep 2025 04:40:55 GMT\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 985015ff78f156b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kisaran4dpermai.com/assets/js/function.js","fqdn":"www.kisaran4dpermai.com","domain":"kisaran4dpermai.com","tld":"com"},"ip":{"addr":"172.67.149.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:51.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kisaran4dpermai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 11:26:57 GMT","end":"Wed, 10 Dec 2025 12:24:39 GMT"},"fingerprint":{"sha1":"83:1F:52:65:A4:0B:D7:82:E4:E3:B4:1F:34:60:57:46:7E:5E:76:4C","sha256":"DE:BF:E7:EC:91:69:CE:99:D7:39:7F:49:32:0A:71:7E:07:45:F3:35:FC:E3:C3:52:CC:E9:42:D2:00:6E:61:62"}}},"request":{"raw":"GET /assets/js/function.js HTTP/1.1\r\nHost: www.kisaran4dpermai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/wap/\r\nCookie: csrf=22f811617398fa3f2af2e4f710875cb2; togeking=d85ac8a1be71924d47893695e5f5852609979d44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 08 Dec 2021 09:34:34 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fm1qUvVOSygTyHSeubBH4S5n01FzE1MDIhp7H3gpGwQzomYSSEDCoSiawC1yOAQNakFB%2Befpe1fUyrM8jjHNQMMVYPde3ahY%2FK2nKgI%2F9fTVUTEZdg%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=86400; includeSubDomains\r\netag: W/\"61b07c2a-906\"\r\ncontent-encoding: br\r\ncf-ray: 985015e85f1e56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2310,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"3105d10b2e5a2da199bcccb8f668e145","sha1":"eae77eeeff5adc7b5a29fb7c5b12241d86e1d05a","sha256":"086fbbf1032a4b6c0293610144bead2f78af2ac7d9a680ad28fc5fdf3ddee865","sha512":"ecc51eee68072af0bdbde5a646c26f35f816b2dc9ca5705b441a76d0114b62b72bb6ebb0e109e524162e73e9416eceb7c17e1fe19eb91ced8bd8a1089929ee78","ssdeep":"","tlshash":"80411e68b9922166027733390b2e500af27a9c7303499441fd2ca9da6f31530a7fcead","first_seen":"2023-03-12T17:38:53Z","last_seen":"2026-04-06T04:12:51.461934Z","times_seen":117,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"www.kisaran4dpermai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:53.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.kisaran4dpermai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\ncontent-encoding: br\r\ncf-ray: 985015f409a6b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-04-16T20:55:09.069806Z","times_seen":75508,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:53.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kisaran4dpermai.com/\r\nOrigin: https://www.kisaran4dpermai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\ncontent-type: application/json\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\netag: W/\"586d518585b166811a617b7f5060f71e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\ncf-ray: 985015f8c9485fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10639,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"586d518585b166811a617b7f5060f71e","sha1":"6ea81179776e5977ac49304b176923e61409393e","sha256":"2cc3a63ae0b79ab96b21a927c9f9a192ff287e877df5e54ee0b0dbe33debb900","sha512":"df7a3a88b5effe5f52c27897e20995a32973ae1b34aa260e42286833c68838afd61fcd0d4cc057ed5d8c941280e2e5167cdf394add607763363bdc96f4a099ac","ssdeep":"192:ImwHJ/LrnzPLEgVE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:sxLrnzXE1iN+xkDOy+Hp8/5Avy","tlshash":"18224369ce504ea702c29646399f35437624829b1f54382eb78891ac0f8ed6f71f77ce","first_seen":"2025-07-18T03:22:00.530906Z","last_seen":"2026-03-06T11:22:10.716013Z","times_seen":30248,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:54.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/js/twk-chunk-2d0d2b7c.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\netag: \"2fbc89a58786b22123cdd3346cc3b728\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 162348\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\ncf-ray: 985015fbc8da56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10789,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10789), with no line terminators","md5":"2fbc89a58786b22123cdd3346cc3b728","sha1":"1f4af46a87647949bde1f12d5922fa01b984362e","sha256":"d67f9d7dca1c007e3bc5605e3f02d8e4990385b145d9b692e6d38692b1f5a766","sha512":"90c8d6587887ecf0c419272c287bbf3afff0d92f2adf0ee531e0b9b6bee3b41288256e91412cd39aaeddd90bab50652b5404d2316c437e7e56564689350ed54c","ssdeep":"192:0CFny7Cpmx7bZTxcwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mCmZTJr40v0GF/LvV4hwsR","tlshash":"9f2295b7e0a1107ea316871c506fa610f62f6c8ab2461da5ba7ab45f900ddcfc065f7c","first_seen":"2025-04-29T08:39:38.305646Z","last_seen":"2026-04-10T07:58:25.921352Z","times_seen":9391,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:54.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/js/twk-chunk-2d0da3af.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\netag: \"6718c4b3d62001e7df4e8cd01b700c13\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 97829\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\ncf-ray: 985015fbd8de56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14269,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14269), with no line terminators","md5":"6718c4b3d62001e7df4e8cd01b700c13","sha1":"9645434b9d5896aea27797337335c2c5dc142b38","sha256":"4dcf61fc9add2a94aa1e4b28c96f780c79e715d7d3acf71e4d608aaad2a22b65","sha512":"596a3b45e29ed941d433b15f1c0f708010d395ee7466f62a4aa4f0101547cd0ab6cd213d2d6b93c75b0f6ae077b0575bf6bb32e5fb48949d72139b1cee470e20","ssdeep":"384:eqw/U5YK8Hx9KJSThWamNbUZDkM0kWEdPk6x+UtKMAeH:7+9KJSThWamNbUZDkM0kWEdPk6x+9veH","tlshash":"bb52c6a7b2a4782d46379712708f3204f33b7d457215da19f36edcea4aa88c16056f3e","first_seen":"2025-09-23T04:46:31.122179Z","last_seen":"2025-09-30T05:37:29.516067Z","times_seen":319,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/assets/png/25b6.png?v=2.2.7","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:55.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /emojione/assets/png/25b6.png?v=2.2.7 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 429\r\ncf-ray: 98501605cb075691-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"1ad-d6Ch3/eBIfTbClWcsqmeg1QRe+4\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230137-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 750185\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WpHu9CHtgh1gniuv2LYwYPvapSE%2B3xsU%2BpfTMGppRDo49QDfIExHV81vONo3T%2BMUtC%2FxrixwgCcH5hNxcvGC4sQ3bZZkP2JwpDCZrCRWxlsZsW%2FDaPiudk1vlFlsNpcvPzA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":429,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"85976f8b8bdd5a13cb2f877e0d7b7d52","sha1":"77a0a1dff78121f4db0a559cb2a99e8354117bee","sha256":"db77d9accd1e02224f5d612f79cd691e6befdf22063475204836be6572510fb7","sha512":"6a8bf36b2b74f39047940268eea362f175d7af225bec58a9f5afdd927d88bf68373b68a860642b95f56af7a6d0beb415528ec2be90a539727a433faa1cacb83f","ssdeep":"","tlshash":"99e0f1dbc7820fa0b49011f413e08113a161461d72b2d96c2e8ad6a6ae4374ec242843","first_seen":"2023-09-17T05:45:36Z","last_seen":"2025-11-21T22:58:28.125653Z","times_seen":22,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waktugold.com/4dpgroup/rtp/kisaran.gif","fqdn":"waktugold.com","domain":"waktugold.com","tld":"com"},"ip":{"addr":"172.67.71.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:51.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waktugold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 14:17:03 GMT","end":"Tue, 28 Oct 2025 15:15:40 GMT"},"fingerprint":{"sha1":"4D:98:78:9E:27:6D:00:59:B8:FE:77:27:F6:9E:A0:77:24:8C:74:80","sha256":"E1:15:76:0F:54:53:F1:DD:5A:CC:9E:EF:E4:6D:3E:A6:7B:19:EC:AE:A4:0C:2E:87:E8:40:FC:E4:38:B6:0C:CB"}}},"request":{"raw":"GET /4dpgroup/rtp/kisaran.gif HTTP/1.1\r\nHost: waktugold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:51 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2967694\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Nov 2022 12:57:24 GMT\r\netag: \"2d488e-5ee4b101f5500\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TDwFO9%2FrHvFo3KFhpaY6lHzjnf6wckXQmd30%2F4ulqbPMaLqTegZMY1KKU6L%2FRoWgdccwc8LbDutzrwx0jZX9FnyChNa5brVE1PKx\"}]}\r\ncf-ray: 985015ea8f855694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2967694,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"365ce4095aefa67bcd07ca5e4e8699e0","sha1":"c02b4c4c801529faad76edaed7dd25905e05f546","sha256":"1a5c320d2ebef1d54b3981a2aeec1a39cee06b39828da6b3d428a3378c3b01be","sha512":"8ed6700ae4dc0af4e9fceff6989af407434aa647843398f0b0a3865391a665c3231a107719e707f35508fcaa04305a9b4b2f13d81afea851757c1f6dfc76f164","ssdeep":"24576:HSU0Xq/xA8If8HSu1xgkYWqhg0DdWub7VeC95yFqa:d+kyufgkYFhxDdWubZeC9U7","tlshash":"b8253323fa54e9e9ca87e866f58d3d01b80f0819b3381520f815495e3fe645e65c3efa","first_seen":"2025-09-18T07:45:38.585589Z","last_seen":"2025-11-21T22:58:28.140034Z","times_seen":13,"resource_available":false,"data":null}},"time_used":2159,"timings":{"blocked":333,"dns":6,"connect":1,"send":0,"wait":198,"receive":1279,"ssl":339},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kisaran4dpermai.com/favicon.ico","fqdn":"www.kisaran4dpermai.com","domain":"kisaran4dpermai.com","tld":"com"},"ip":{"addr":"172.67.149.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:52.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kisaran4dpermai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 11:26:57 GMT","end":"Wed, 10 Dec 2025 12:24:39 GMT"},"fingerprint":{"sha1":"83:1F:52:65:A4:0B:D7:82:E4:E3:B4:1F:34:60:57:46:7E:5E:76:4C","sha256":"DE:BF:E7:EC:91:69:CE:99:D7:39:7F:49:32:0A:71:7E:07:45:F3:35:FC:E3:C3:52:CC:E9:42:D2:00:6E:61:62"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.kisaran4dpermai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/wap/\r\nCookie: csrf=22f811617398fa3f2af2e4f710875cb2; togeking=d85ac8a1be71924d47893695e5f5852609979d44\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:52 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=86400; includeSubDomains\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NEl%2FcNuCkM5VO7svHpEexAQPk2Wq67X6lWyPtKUiCUcgp5Nn9P5SqfelQTkLt68%2B4eD%2BYi6oakjrHk4A0rYgm6J%2BcRhFKGNBezFeiv%2FWYqK5cnynSQ%3D%3D\"}]}\r\ncf-ray: 985015ef08a3b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":580,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9e47d3a502a7b2bcec1f1375430ca0eb","sha1":"e3845e5e982ae0580fa31abf301c803d89adab52","sha256":"cbf1fdfdb7257daf8b0905d94bd04e2829c502c9c01b1d96bb979069e2ebc895","sha512":"8239210b404e0b19e841d7832d73452617a17c39a29f7cb6e8cce8f1474b7c17d6acba630efb6510cb3f0315c3147b7bb62c0b0beecef8ef29764b8b906e8ef3","ssdeep":"","tlshash":"58f0a99f5f12287f2e238171f4c35168cf680a56fbd925e28748111f7aca04549f5fad","first_seen":"2023-04-07T09:01:27Z","last_seen":"2026-04-06T04:12:51.453678Z","times_seen":114,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"www.kisaran4dpermai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:53.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.kisaran4dpermai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\netag: W/\"a7187987440ee544ae011125a0c9ee40\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 985015f3f9a3b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":324017,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"a7187987440ee544ae011125a0c9ee40","sha1":"fa2bfdc9cc470a9e8277d6b3f4321fa2ffc6e8cb","sha256":"cacd267bd8b2bea1cab5cfed54427fb06c73c6b286a3de34310b4a72288c9c1b","sha512":"5b4387976dc30301ce68a621164086650a0d708a85206308600498f599f5d567839d33dc60f424c70f47bb2c654ba7f0db468e6e331de239790fc0db33d347d3","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJ7MoZm+odXsJ5Ar6VKkOP6I/:FGABPVhO5wdKJVMo4sJ5Ar6kSI/","tlshash":"03644bc8f183b0b606e6a1a5009f5207737a151968ed8498f574dfe968e8e5c633bf3c","first_seen":"2025-06-13T09:29:49.213683Z","last_seen":"2026-04-10T07:58:25.860572Z","times_seen":6944,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:53.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.kisaran4dpermai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\netag: W/\"ce187f6f987765cd6c747fe9b0b7cf0e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 985015f3f9a5b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"ce187f6f987765cd6c747fe9b0b7cf0e","sha1":"6f4a725f053e03590194863b29731d6b02dfba98","sha256":"da0f026185fe18c3bced4b9bc942095378a0bc062722e6bd9c3540a2db95fd4f","sha512":"f0531c3625114c6de9b57c11753df6af2e8241bc4a5e6947ce5993a60489efcd410501f123eadc8a587d515cb2cf0efa1fcdbd4e5a82b2056526b231b8598e30","ssdeep":"","tlshash":"934183d936e8f9b6434318a1043f9016f6353976097be4c0531dd4f5bc78849815afb6","first_seen":"2025-09-23T04:46:31.228628Z","last_seen":"2025-09-30T05:52:13.033344Z","times_seen":382,"resource_available":true,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:53.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.kisaran4dpermai.com/\r\nOrigin: https://www.kisaran4dpermai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-dr2z\r\naccess-control-allow-origin: https://www.kisaran4dpermai.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 985015f8d94a5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:54.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/js/twk-chunk-4fe9d5dd.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\netag: W/\"8249fafc9a9fbe0f75d4bef0aae2305a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 260050\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\ncf-ray: 985015fbe8df56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1000), with no line terminators","md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-04-16T20:55:08.992911Z","times_seen":34864,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:54.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\netag: \"af9830eef563b4df395870a483ce549c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 125822\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\ncf-ray: 985015fc48e656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36092,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36049)","md5":"af9830eef563b4df395870a483ce549c","sha1":"2c678a245c7b8984569447c9bbfe182583ef7e56","sha256":"5d919993a3fe6ec4c27ec6696b643900c02b95584a4a21a518eb8809edf12531","sha512":"16416617f0c79b40d196c1a7df699f1e01a130e3df75a4f437b4adfc04fa666ac7987d080bbfe759b849bd81860e6bab5b2af02356a8814f0dd1fa9a64b726d4","ssdeep":"384:uTTacuVZNgxYe4fbgL3w23U3xi7vxEbXR+ziLwH0Lg26/tFTiBB6TX3DYC8:yeyna+ziLwH0Lg261F2BBCX3DZ8","tlshash":"47f2bef1f4b700c8b363c122c3d5f67c6459b770ca86ce92f427666c49e16a63581abc","first_seen":"2025-05-21T12:18:34.219676Z","last_seen":"2026-04-16T20:55:09.028681Z","times_seen":34687,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/log-performance/v3","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:55.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"POST /log-performance/v3 HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kisaran4dpermai.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 95\r\nOrigin: https://www.kisaran4dpermai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-8839\r\naccess-control-allow-origin: https://www.kisaran4dpermai.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Fri, 26 Sep 2025 04:40:55 GMT\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98501600c8f556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"fda44910deb1a460be4ac5d56d61d837","sha1":"f6d0c643351580307b2eaa6a7560e76965496bc7","sha256":"933b971c6388d594a23fa1559825db5bec8ade2db1240aa8fc9d0c684949e8c9","sha512":"57dda9aa7c29f960cd7948a4e4567844d3289fa729e9e388e7f4edcbdf16bf6a94536598b4f9ff8942849f1f96bd3c00bc24a75e748a36fbf2a145f63bf904c1","ssdeep":"","tlshash":"0e3000000000000000000000000000000000000000000000300000000000000000000c","first_seen":"2023-04-06T02:18:46Z","last_seen":"2026-04-16T20:55:09.082761Z","times_seen":33783,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:53.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.kisaran4dpermai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\netag: W/\"afe79fd63814e250ea6c3e9aa0712914\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 985015f3f9a4b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239451,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"afe79fd63814e250ea6c3e9aa0712914","sha1":"8c10349ea972a02e3ffd0fe11865f8db282e5154","sha256":"39fcf207ca22aa2b2fbcaca1b95f6bb3184982c83a33516a9086a577b5e87890","sha512":"68554c77fc343c123eec3569eb5b58435cf73bbe4533a40ac8f016722d4bfb5b417fd6c1d9ab6bb46de67a0496b12af8acd63ca52f0d8ed23200d7d1d6cc82a2","ssdeep":"3072:Ce9YgYYqWzhT9d9WFW1Wv+fMAfOvKCrQYKMZdLMz9mw/S:J9WFW1WWfMAfrKNLMz9l/S","tlshash":"fb34c69df186b47606a37130501f320af23a685ab45ac4d4f636d8e1bd789cea133f79","first_seen":"2025-09-23T04:46:31.233194Z","last_seen":"2025-09-30T05:52:13.131201Z","times_seen":382,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=63578dcab0d6371309cb5d71\u0026widgetId=1gg95jmr6\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:53.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=63578dcab0d6371309cb5d71\u0026widgetId=1gg95jmr6\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kisaran4dpermai.com/\r\nOrigin: https://www.kisaran4dpermai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-13lw\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-98-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\ncf-ray: 985015f8c9495fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3849,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3d38bd0007036876db4c6b078c6db394","sha1":"0efff6296ee0838aaf52e5ef76e4bbc5579b6ee3","sha256":"2f229be7d0d3e21ab14bab79342192917dd09907ffa95b17197de1b04d4f73b4","sha512":"90f2d3fd59f4c90c74ee0847537070201d7f7e893b7c1742e7cd4e354cb176139152083fa1f97b133bfb3fd0d6e4f1dee6d76ca82a71f891297ba13f7fab01e2","ssdeep":"","tlshash":"208134290d19cd79a3c9928365df7623e569e123d3c81a5de1988f3883ef6cd215131f","first_seen":"2025-09-18T07:45:38.599799Z","last_seen":"2025-11-21T22:58:28.127532Z","times_seen":13,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:53.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kisaran4dpermai.com/\r\nOrigin: https://www.kisaran4dpermai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\ncontent-type: application/json\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\netag: W/\"4662c7c182dfe30065936bfa05f8c773\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\ncf-ray: 985015f8c9475fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11595,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4662c7c182dfe30065936bfa05f8c773","sha1":"d1f155c335c31be5947ef8ebf82be1eee2782fc2","sha256":"2d2d85dfc80ec4f42d12bea574d59879d269b5c06557cf888367fbfa9036fe47","sha512":"abd2530371ef02602814b0bed360225c0530615c5db002d61511bca5e8cda0d8da2bd288631ee02da5fbf952b31bd4380284dcd56838277b52654f7d13dc6229","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9svKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59L3Zwfi","tlshash":"ed323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2025-06-18T04:11:24.033166Z","last_seen":"2026-04-16T20:55:09.037397Z","times_seen":43710,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:54.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/js/twk-chunk-2d0aef27.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\netag: \"e366e287ec14916e467a8fa84fd050aa\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 88083\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\ncf-ray: 985015fbd8dc56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10989,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10989), with no line terminators","md5":"e366e287ec14916e467a8fa84fd050aa","sha1":"7566228b5bf431a55aed0c4c5e9ba0c352b0119b","sha256":"e3b02ccde07fe748bead4e8c1c657982fda86f8a11d133b9c725ba4a07d8d01e","sha512":"3a89119449da8b6e4ca2d3aef2550f1236cdf2806f2544faa3cf7fe7f2a317948d05369098077c88d2ca8e06f06c530990e57149bac3b934e221fde1c9cc4af9","ssdeep":"192:kHNM+ORIU9HkC40V2tl+f9lVo7QYcb26o5A8f6uYZvUZaUZSPgM:GOb9HkCreHA87YZHh","tlshash":"d132d7c6f9c7b9624227524841efa618f73f2a947706dc18f06899f30a948c75077bbe","first_seen":"2025-09-23T04:46:31.119732Z","last_seen":"2025-09-30T03:34:55.164137Z","times_seen":256,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:54.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/js/twk-chunk-7941cc06.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\netag: W/\"1d5e48a3dc1ca8087b73688a1ff9d1d9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 260050\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\ncf-ray: 985015fbe8e056b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53552,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53433)","md5":"1d5e48a3dc1ca8087b73688a1ff9d1d9","sha1":"deb1fce1bac5c1d1e563b1d730bd721d34adca5a","sha256":"8e8f6cbc964b3da544e11a2ad0d0cab69a32eb901b8375a3b511ee26c017ba8d","sha512":"5fc02f9d9e198ef8aa852811195239fe05a69c2311f6fba76effa97de96cab9718d5e84ac751e530a00455eb72ca62abd3b89b0e03f55f21b329e5d7c8299d39","ssdeep":"768:Vlxfu8+HYUmI+rToWf2z+y+Um/+VRJWf/W+Hc1Zt7Gj67IW8/JGvgLCBxf6stK43:xfurojf20UJWfO+st7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","first_seen":"2025-06-13T09:29:49.257135Z","last_seen":"2025-11-13T10:07:04.770796Z","times_seen":7262,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:54.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/js/twk-chunk-6289ff8e.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\netag: \"64d4726e3af8a10bea07fac08bb44cc1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 179670\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\ncf-ray: 985015fbe8e156b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105323,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"64d4726e3af8a10bea07fac08bb44cc1","sha1":"8b9fb4cdfb56b2777732b362edef4dced915a8de","sha256":"a2b5251308db3d187fb7372134bb9683874d12b6aa3d79113f567262efbf5821","sha512":"e3d13bcfe7325ff7468e08ebe4652a53c6c1be51ad2828e9b810490b13b6e8badb1c3dae35406b8f40d16337ca9f1cdaead00321942584b540b3929dd3c05abb","ssdeep":"1536:BigMXSFu1R6wtTn32jzDVgaOEUWbaGlDluK1NFYXdZ3x3u4V5pXYMrlSf:4DiuHBkGyPkx3u4V5pXrlSf","tlshash":"87a3096ef091b47d8993d26120af3212f3353d55a919d0a8f238cdf859d89c9a127f3e","first_seen":"2025-09-23T04:46:31.1417Z","last_seen":"2025-09-30T05:37:29.400753Z","times_seen":334,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:54.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\netag: W/\"02bc616a305b5b0d659cf5b32331694b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 260050\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\ncf-ray: 985015fcc8e956b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53931,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53883)","md5":"02bc616a305b5b0d659cf5b32331694b","sha1":"cfaa91c891fb42b4c721df68c55a9043c8a2df71","sha256":"c6e457fbeacde6b98ee70038d44db3a6430bd05f005a9b4c4480d4739d4cccdf","sha512":"30a49e639e7258c41598b87fb929b15351a08d87416f838868067e786895423dec55a45ff2eb09fd1774b2d5fdfd1e5c58e029e53c13b7a03365b9f4b96f793a","ssdeep":"1536:fGUifm7kUdwddCri2iLc0Lg261F2BBCsEe:X1e","tlshash":"923322b2f56710ccb367c22292d1f6bc202ae770d746ce96f427766c4ad12a63541fac","first_seen":"2025-09-03T16:00:41.550451Z","last_seen":"2025-12-22T08:34:24.637031Z","times_seen":5489,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kisaran4dpermai.com/assets/wap/bootstrap.min.css","fqdn":"www.kisaran4dpermai.com","domain":"kisaran4dpermai.com","tld":"com"},"ip":{"addr":"172.67.149.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:51.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kisaran4dpermai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 11:26:57 GMT","end":"Wed, 10 Dec 2025 12:24:39 GMT"},"fingerprint":{"sha1":"83:1F:52:65:A4:0B:D7:82:E4:E3:B4:1F:34:60:57:46:7E:5E:76:4C","sha256":"DE:BF:E7:EC:91:69:CE:99:D7:39:7F:49:32:0A:71:7E:07:45:F3:35:FC:E3:C3:52:CC:E9:42:D2:00:6E:61:62"}}},"request":{"raw":"GET /assets/wap/bootstrap.min.css HTTP/1.1\r\nHost: www.kisaran4dpermai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/wap/\r\nCookie: csrf=22f811617398fa3f2af2e4f710875cb2; togeking=d85ac8a1be71924d47893695e5f5852609979d44\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 08 Dec 2021 09:34:38 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yXTTcTJ5m6n%2B3lNZCTF0tqabjjDx7IleUp%2BFCeSre36XZx%2BjAciMFw%2FAnKq%2FiSs6fdfY6ibruCdEPd8DkMi6v%2Bh0K3Za7138%2BKnFGrWAil2%2FkrX8Tw%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=86400; includeSubDomains\r\netag: W/\"61b07c2e-3e3a\"\r\ncontent-encoding: br\r\ncf-ray: 985015e85f1556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15930,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15403)","md5":"e76f83ef7117b3f9f19a9085afd23825","sha1":"cabda4c1125820cb9f95a41244eb93a3d144735e","sha256":"f9a004ecb53f6d1699ca1e6ed2522423c47f7e769fb83ee2a20ac3e94b3b683d","sha512":"293899dc2e178dfedfd730b701c5f8494b40d11e82f8b6ad8a9df0bd213a2a004bf0a0cb1c5ff9acd7f2e0657756115bf6765162a11e6baffef9b158132f6178","ssdeep":"192:0BuNl311eJp2Th5U5d9+mZ519hpJ+QJaUi:0C311e/2vUNV19V+QJaF","tlshash":"9e621fc659202d764037ce2f70d57e5f556a38267bb2eebbf3822e648e9e2470471903","first_seen":"2024-09-19T22:50:46.992746Z","last_seen":"2026-04-06T04:12:51.524579Z","times_seen":42,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"www.kisaran4dpermai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kisaran4dpermai.com/assets/js/jquery.validate.min.js","fqdn":"www.kisaran4dpermai.com","domain":"kisaran4dpermai.com","tld":"com"},"ip":{"addr":"172.67.149.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:51.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kisaran4dpermai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 11:26:57 GMT","end":"Wed, 10 Dec 2025 12:24:39 GMT"},"fingerprint":{"sha1":"83:1F:52:65:A4:0B:D7:82:E4:E3:B4:1F:34:60:57:46:7E:5E:76:4C","sha256":"DE:BF:E7:EC:91:69:CE:99:D7:39:7F:49:32:0A:71:7E:07:45:F3:35:FC:E3:C3:52:CC:E9:42:D2:00:6E:61:62"}}},"request":{"raw":"GET /assets/js/jquery.validate.min.js HTTP/1.1\r\nHost: www.kisaran4dpermai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/wap/\r\nCookie: csrf=22f811617398fa3f2af2e4f710875cb2; togeking=d85ac8a1be71924d47893695e5f5852609979d44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 08 Dec 2021 09:34:34 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=794H9pI9hoXiAxtj1EwszdwMSNQoyXicclkX0djA5JjQywEigS%2BZofcs82FIHvqUqe1r2NHEdHweDTMFefCFiUGK5K0IWlOvJB3zelV0Z%2B%2FrdnmVvw%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=86400; includeSubDomains\r\netag: W/\"61b07c2a-5256\"\r\ncontent-encoding: br\r\ncf-ray: 985015e85f1d56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21078,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1242)","md5":"428390a3c112b8c5d7652a6dc055acdf","sha1":"4e4c224b63365495e328b71e31c367ffcb0c9919","sha256":"bf32a2487ad4f1768afd27c48d4d3815242851137f3fd8eea3f1d28f3b31edcc","sha512":"d02e6a97ce875b6a47cc5a537efb471f523e50b65e779332b4f628d17275bf13e0f4507166506c36d656f3d994656f42eca4d2df39840e8492a365722f739fe7","ssdeep":"384:h0jDU1a04f0Bfl/dgzh6qhCqsXhlFfTWvqMny+33zxe6MpRCuj0i1dpR0cEbN9Ka:+OD4Ydgzh6AbCMny+TyzdpRTEZoH+NR","tlshash":"d192b6097282b01b9bf630f5a45b610f70f25de9b04ca83db5b8d4d2bee4e854166f78","first_seen":"2023-04-07T03:33:13Z","last_seen":"2026-04-16T14:33:15.569913Z","times_seen":753,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"www.kisaran4dpermai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:53.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.kisaran4dpermai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 985015f3e99eb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-04-16T20:55:09.019854Z","times_seen":48994,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kisaran4dpermai.com/wap/","fqdn":"www.kisaran4dpermai.com","domain":"kisaran4dpermai.com","tld":"com"},"ip":{"addr":"172.67.149.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-26T04:40:50.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kisaran4dpermai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 11:26:57 GMT","end":"Wed, 10 Dec 2025 12:24:39 GMT"},"fingerprint":{"sha1":"83:1F:52:65:A4:0B:D7:82:E4:E3:B4:1F:34:60:57:46:7E:5E:76:4C","sha256":"DE:BF:E7:EC:91:69:CE:99:D7:39:7F:49:32:0A:71:7E:07:45:F3:35:FC:E3:C3:52:CC:E9:42:D2:00:6E:61:62"}}},"request":{"raw":"GET /wap/ HTTP/1.1\r\nHost: www.kisaran4dpermai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EkaYZmAp1k73NlopoK%2Bo7%2Fw0yECb8UxBM85CthlkGEk774yBAf5VXm%2BZEcREt4FmVckQ9NwvjiKUT0TSvjKDt%2F67dW8DOjRBW9OgFEEM9na4wQP3kQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=86400; includeSubDomains\r\ncontent-encoding: br\r\nset-cookie: csrf=22f811617398fa3f2af2e4f710875cb2; Path=/; Max-Age=600; Expires=Fri, 26 Sep 2025 04:50:50 GMT\ntogeking=d85ac8a1be71924d47893695e5f5852609979d44; HttpOnly; Path=/; Max-Age=7200; Expires=Fri, 26 Sep 2025 06:40:50 GMT\r\ncf-ray: 985015e53d0656ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:1.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11255,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11254), with no line terminators","md5":"e48593c679c756832059fe6293a36be8","sha1":"85c9276108398770bf341a9fd1f0cf43199e2272","sha256":"ec38a66a0a211973a2b1476d8938525e51999dfaf9e4f4947bc6a6b36985a668","sha512":"9a84d5d192067906078f857e160d86b49edcdd041dbea9590f1011f9acb3d1b7f93f8ef78bd599dd53506cb89e489934d2b69149d992bc843497275d82da0a94","ssdeep":"96:7juDDStsfk8/gy3buvklLC3Oqf4s06g4ceYi9U4HhYYPpeAYyWtWQJIavoq41fir:aXfk8JrLdC3Zf/g4ce99U4HakQJIavb","tlshash":"53320bb299814e16a705c4e1d1f2e33d6115b1cbd9464dccd5e20ebebb8afb54037ac8","first_seen":"2025-09-26T04:41:23.581941Z","last_seen":"2025-09-26T04:41:23.581941Z","times_seen":1,"resource_available":false,"data":null}},"time_used":829,"timings":{"blocked":272,"dns":5,"connect":1,"send":0,"wait":285,"receive":0,"ssl":264},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"www.kisaran4dpermai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waktugold.com/4dpgroup/kisaran-popupwap.jpg","fqdn":"waktugold.com","domain":"waktugold.com","tld":"com"},"ip":{"addr":"172.67.71.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:51.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waktugold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 14:17:03 GMT","end":"Tue, 28 Oct 2025 15:15:40 GMT"},"fingerprint":{"sha1":"4D:98:78:9E:27:6D:00:59:B8:FE:77:27:F6:9E:A0:77:24:8C:74:80","sha256":"E1:15:76:0F:54:53:F1:DD:5A:CC:9E:EF:E4:6D:3E:A6:7B:19:EC:AE:A4:0C:2E:87:E8:40:FC:E4:38:B6:0C:CB"}}},"request":{"raw":"GET /4dpgroup/kisaran-popupwap.jpg HTTP/1.1\r\nHost: waktugold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 97948\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Oct 2024 11:07:59 GMT\r\netag: \"17e9c-624459dd488ac\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aa8aeX03Tb%2FUcR0Ro4XArm8oyc7u1pfOk3GWHOYekQF3ysx9HqoG0jK2MFfx9U7Y09ZaA8OxYr3JdTcJDOUgHQSSE%2Fe0JiBH%2FG%2FI\"}]}\r\ncf-ray: 985015ea9f8c5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97948,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1019x420, components 3","md5":"97fb193c6e39ef848bdc41379ffad71a","sha1":"7c2d8f10ba8e299bf1f35b88576d1fd0689f5bd5","sha256":"b1ad9dfeaf7a8487e547d671bf0e965ff0cbbe15ec528b5f6af91fca7a787b3d","sha512":"38644786b42ee69a37247f6801caedf04716bb0c218fab655131aeaa689fec657c1d56daaecb55cf1aa1ab2affd7c2a36c468798b8f8ef3cf22ccbb7122653ff","ssdeep":"1536:DFEiR4GcJng7Is39o04epd6c8nIEP+8jV+257TLg7028iJZIQAqF+kzkhIx9e:D74GcuND4epH8nu8Zh2X7A4+BIre","tlshash":"f2a30272405fa94be8623d3605a42dbceddc2f2dfba3cc91852fddae70c516568c4522","first_seen":"2025-09-18T07:45:38.581084Z","last_seen":"2025-11-21T22:58:28.123586Z","times_seen":13,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":188,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:53.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.kisaran4dpermai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\ncontent-encoding: br\r\ncf-ray: 985015f3e99cb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-16T20:55:09.04778Z","times_seen":75467,"resource_available":true,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/languages/id.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:54.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/languages/id.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kisaran4dpermai.com/\r\nOrigin: https://www.kisaran4dpermai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\ncontent-type: application/json\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\netag: W/\"ad35cd0d91e8ff678d330f2ed8790ff8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\ncf-ray: 985015fbb95e5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11666,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ad35cd0d91e8ff678d330f2ed8790ff8","sha1":"79f3c1122fed2d4993c0fd39f523f36d0b55f8a9","sha256":"f502994557ac91f4537debbb1ab1d906e42c3015e1b61dcc053961134109aa6f","sha512":"1fc89311be303140073d3fd771c5cc5eb7f44584b2a2e2644c77014a5c9751fbe14391022bbd22d71fc45e9190de161f0e10552ca7b1d183b6ed09c6d34d8647","ssdeep":"192:nh+odmEHzLjssiw0V3Y4nrbOm8d5x9hYt0kbbtgT1Q5ENxJF7:h+odlHsDw01Y4nrbD8l9hYSy0Q5mzx","tlshash":"173261b1cd655dd701815286b8ea265339a842931f08391e3b4c9bfc0f8fd9f66b636c","first_seen":"2025-06-19T05:28:43.717583Z","last_seen":"2026-04-16T19:10:58.66003Z","times_seen":1081,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":451,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/js/twk-chunk-2d0b383d.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:54.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/js/twk-chunk-2d0b383d.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\ncontent-type: application/javascript\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 260050\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\netag: W/\"34312812f7dddcf71dd6e3448516aa3b\"\r\ncf-ray: 985015fbd8dd56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":686,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (686), with no line terminators","md5":"34312812f7dddcf71dd6e3448516aa3b","sha1":"f6360863c25395582063ee7d514e98e8bbdbd553","sha256":"38eb2a87e5f34a104ee13b7c9d12ed8e9d43036c587c96fe146a232a0131805d","sha512":"6b2110e1c14fa56d65029c51b080e7971b6210b5df0760e884255cb5826769540a1d2b3f788273af6c7a0399fbeae8d4b92294f7a759900a7cbfbd57415890fb","ssdeep":"","tlshash":"79011bc8b01bf8b80da7f240857ba13979625b8d461888a0ea31eaf95984205d20fb5e","first_seen":"2025-01-10T07:39:13.639642Z","last_seen":"2026-04-10T07:58:26.00267Z","times_seen":11358,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/css/max-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:54.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/css/max-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\netag: \"5e3f116e01383af76ed86da3a23a02ea\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 115143\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\ncf-ray: 985015fcc8ea56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100218,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5e3f116e01383af76ed86da3a23a02ea","sha1":"acce3b6d19169663700a2ca3c2cf0c0d058d32b9","sha256":"cfba03ea709cc1a47c7dcdf572e2dd7b22775965b680b6a767c6872342a9aeb6","sha512":"d064f1f2a353bdf678b94c51a31f0bd4255e585530ae66cfa8fd2ee75686efefd6989ef4527c68ae6bc006cc4ff4332daef9b20bc76b1c43228e4bc291304688","ssdeep":"1536:f/Uifm7kUdwddCri3iLc0Lg261F2BBC9ikKuV3cGiH27PNWE98MGfU0nPROpmi0U:jkuVLmi0V0d+tKaK","tlshash":"1aa399b2e56710cc7363c22692c1faac1029e370c757caaaf827767d4bc25963552f9c","first_seen":"2025-09-03T16:00:41.475912Z","last_seen":"2025-12-22T08:34:24.66502Z","times_seen":5807,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kisaran4dpermai.com/assets/wap/style.css?ver=20190520","fqdn":"www.kisaran4dpermai.com","domain":"kisaran4dpermai.com","tld":"com"},"ip":{"addr":"172.67.149.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:51.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kisaran4dpermai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 11:26:57 GMT","end":"Wed, 10 Dec 2025 12:24:39 GMT"},"fingerprint":{"sha1":"83:1F:52:65:A4:0B:D7:82:E4:E3:B4:1F:34:60:57:46:7E:5E:76:4C","sha256":"DE:BF:E7:EC:91:69:CE:99:D7:39:7F:49:32:0A:71:7E:07:45:F3:35:FC:E3:C3:52:CC:E9:42:D2:00:6E:61:62"}}},"request":{"raw":"GET /assets/wap/style.css?ver=20190520 HTTP/1.1\r\nHost: www.kisaran4dpermai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/wap/\r\nCookie: csrf=22f811617398fa3f2af2e4f710875cb2; togeking=d85ac8a1be71924d47893695e5f5852609979d44\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 17 Nov 2022 14:58:22 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YSlhF5jMc3I5j%2B%2FoShvGMRrL6Xy4H61xMkZt3nHrkjmXaZpdtuQy9X0yUtxtHLqrqFakpVxKez%2Fptr5qFVbvNEHGErkiZ0schPz6sVIEkWRE5CfbXA%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=86400; includeSubDomains\r\netag: W/\"63764c0e-599\"\r\ncontent-encoding: br\r\ncf-ray: 985015e85f1856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1433,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6bfe1f44f55a322debeb80b81cc269db","sha1":"cf9b35074be4fe65b376a00706d8a2646c85ac41","sha256":"c913cee98e1ea0967f9f76d9b5c112228bb767eb948c505a7a02cb9373b5ba55","sha512":"d8f419a49fbee9769c0b9e26f7da06e71d0217c04ef95ad7e37097ecb2dbfdc8a0194bdfe822443e5ee4c402a2fef7c480067cbe3e137f6a095026576afe493a","ssdeep":"","tlshash":"852180eea54920db3313e8a5fb758621bf2911d94d1fc7d1b8e09154d20d0387bba998","first_seen":"2025-09-26T04:41:23.586517Z","last_seen":"2025-11-21T22:37:39.726767Z","times_seen":4,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"www.kisaran4dpermai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kisaran4dpermai.com/assets/js/jquery-1.7.1.min.js","fqdn":"www.kisaran4dpermai.com","domain":"kisaran4dpermai.com","tld":"com"},"ip":{"addr":"172.67.149.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:51.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kisaran4dpermai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 11:26:57 GMT","end":"Wed, 10 Dec 2025 12:24:39 GMT"},"fingerprint":{"sha1":"83:1F:52:65:A4:0B:D7:82:E4:E3:B4:1F:34:60:57:46:7E:5E:76:4C","sha256":"DE:BF:E7:EC:91:69:CE:99:D7:39:7F:49:32:0A:71:7E:07:45:F3:35:FC:E3:C3:52:CC:E9:42:D2:00:6E:61:62"}}},"request":{"raw":"GET /assets/js/jquery-1.7.1.min.js HTTP/1.1\r\nHost: www.kisaran4dpermai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/wap/\r\nCookie: csrf=22f811617398fa3f2af2e4f710875cb2; togeking=d85ac8a1be71924d47893695e5f5852609979d44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 08 Dec 2021 09:34:34 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8wULgugg9UJUo95TZQXJBsm5ExwvOiVzI6W1ilbJVetIh%2Bi0QysuVPLeqNI%2F1GM5SBvUSnn0WRmwNkLvKon8Ej7NTJFEylteYObsPwYnaxJsqz9E6g%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=86400; includeSubDomains\r\netag: W/\"61b07c2a-16eac\"\r\ncontent-encoding: br\r\ncf-ray: 985015e85f1956ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93868,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32769)","md5":"ddb84c1587287b2df08966081ef063bf","sha1":"9eb9ac595e9b5544e2dc79fff7cd2d0b4b5ef71f","sha256":"88171413fc76dda23ab32baa17b11e4fff89141c633ece737852445f1ba6c1bd","sha512":"0640605a22f437f10521b2d96064e06e4b0a1b96d2e8fb709d6bd593781c72ff8a86d2bfe3090bc4244687e91e94a897c7b132e237d369b2e0dc01083c2ec434","ssdeep":"1536:k5RKUpVgklsdbuLP/l+0fGzA8gmtasgx/c9Rzzi4yff8qeLvHHEjam7rSnmBn9gn:Ee8FbGzA81+xRRi1Z3","tlshash":"0a93e7d9b2d6716387b731bc50af510bb13698aa784c8c50f068d8e4be74a48907bf7d","first_seen":"2023-03-07T01:03:13Z","last_seen":"2026-04-16T21:10:19.629223Z","times_seen":15840,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"www.kisaran4dpermai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waktugold.com/eye/eye.png","fqdn":"waktugold.com","domain":"waktugold.com","tld":"com"},"ip":{"addr":"172.67.71.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:51.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waktugold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 14:17:03 GMT","end":"Tue, 28 Oct 2025 15:15:40 GMT"},"fingerprint":{"sha1":"4D:98:78:9E:27:6D:00:59:B8:FE:77:27:F6:9E:A0:77:24:8C:74:80","sha256":"E1:15:76:0F:54:53:F1:DD:5A:CC:9E:EF:E4:6D:3E:A6:7B:19:EC:AE:A4:0C:2E:87:E8:40:FC:E4:38:B6:0C:CB"}}},"request":{"raw":"GET /eye/eye.png HTTP/1.1\r\nHost: waktugold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kisaran4dpermai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Sep 2025 04:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 5409\r\nserver: cloudflare\r\nlast-modified: Mon, 20 Jun 2022 06:26:49 GMT\r\netag: \"1521-5e1db3060b5ea\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uPFgv4VZcAEZ9xHgmwzkghf1w396FCtH17HD61oaB2rIrC%2FRFRF2sYHtWilqyRe5eBLEfgqBwweCTg7MoC9OFUtKDJw9NY4b7jiM\"}]}\r\ncf-ray: 985015ea6f705694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5409,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 258 x 168, 8-bit/color RGBA, non-interlaced","md5":"9f1d02e8f2c461e19d003e1ca68362b9","sha1":"ca3a2bc2b8ff3ed710b479c6a9c5ff99d42e92f9","sha256":"7d397e1036ae7ab048d741a2b86182cf022c83fae4ed9b4793ae660f7df763e4","sha512":"c8fbb70934f83c55aac51e1864649c1a33578c7c20b6893d7ea0ddc0daee0febd1f14acaa76a065c8fe9d6c96b8403987f49b15f70e5912df5faba0a1d941f73","ssdeep":"96:q2VchGgGsbyHMHWwzI1CHTBNL6Z/MpCDmExUGV9e3XwLFihANI:rchSseHMBz3zBAUTQfVLLQeNI","tlshash":"f8b17e0ff56658130283ec8b45e1f47d385724015e99ece191879e247966cc89cbee7e","first_seen":"2023-09-17T05:45:36Z","last_seen":"2026-04-06T04:12:51.419814Z","times_seen":62,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:54.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kisaran4dpermai.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 189\r\nOrigin: https://www.kisaran4dpermai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-vfcw\r\naccess-control-allow-origin: https://www.kisaran4dpermai.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 985015f9c9505fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1048,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b53dc241b2ab07e0c86b355789a4b174","sha1":"b26160d9e3ed0aae9f2ab2f492a4c3b3ef939b6c","sha256":"d22f5d1749cc1e6223a032476fc1a409dd405926f0909e43aedc4bd67bea7129","sha512":"12851066967d3aa9f42734cdbfd18fd1a48aab4c3491479caf20df0b52e9d31e435e2bf382a0b52c9a3ca15d7f4e6dc2659d881662940cc0a8254ae0cee5ab7f","ssdeep":"","tlshash":"a611a5021f9a8e4d6b77b5830b147f1207cca7c2758284bdc8c24e6835aa37b9a464b1","first_seen":"2025-09-26T04:41:23.589489Z","last_seen":"2025-09-26T04:41:23.589489Z","times_seen":1,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/68d221335f8/css/bubble-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:54.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/app/68d221335f8/css/bubble-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 23 Sep 2025 04:26:01 GMT\r\netag: \"ce7c2f1d3256f84d0760bd9f400963fc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 141768\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\ncf-ray: 985015fcb8e856b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23063,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23017)","md5":"ce7c2f1d3256f84d0760bd9f400963fc","sha1":"1375bb0f0223b374f9805cb441970de2cb004591","sha256":"ff92cac16c5ea67e7df480d38f6fd806385a85e69d13da5317ceb3acc469af62","sha512":"3f33f2cf811797404a3bdd12ab6af60b5356bdd577c82e8a97ad7d4cf81dcd1b24bf87c1256e175a6ae6f44d0d2f9c9daf8c29316bc60b370288f98e78e5716e","ssdeep":"384:Wgfco+ziLwH0Lg26/tFTiBB6TXngxYe4fbFU3xi7Ur3K:B+ziLwH0Lg261F2BBCXrsr3K","tlshash":"efa2dbf5e47b10d87363c02293d4f2685499f370ca8adea1f52b661c49e52763682efc","first_seen":"2025-04-29T09:54:46.086393Z","last_seen":"2026-04-16T20:55:09.033813Z","times_seen":27889,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:54.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.kisaran4dpermai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\ncontent-type: font/woff\r\ncontent-length: 93868\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 985015fce9785fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93868,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-04-16T20:55:09.018308Z","times_seen":25881,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/images/attention-grabbers/107-br.svg","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:54.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/assets/images/attention-grabbers/107-br.svg HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:54 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 22 May 2021 07:25:19 GMT\r\netag: W/\"fb42c1c3806fbbc85c494d9d5652cb36\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1469327\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\ncf-ray: 985015fce8eb56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":252798,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb42c1c3806fbbc85c494d9d5652cb36","sha1":"9c8e810bb3a4f91abf2db4b4e0f67de7bf084fec","sha256":"ae3fa5b4458f60de8cf8703def4c5c1225ac5dbb17c5feb9ef3f11286f6a2f28","sha512":"d8295404ef5aa303eeeadb4d1205ecae1c1928c4b1ba9eefeee6825641176715c57309074b76c1b4903315eef9e4e3ae17be264e8cf177bcfe3e1b3e02250c32","ssdeep":"3072:u7EN5Tjm5CuxEHSbRdhK7aohIlnVC4xmlx1wOZRolXRUZkOpZW:fpEDhKBIlVC4OjZRCRUSOpZW","tlshash":"2434923e0b44a3bd66f9e4f9af12b5aa32c85099713bc2056bd8c754d6c2cb4fc1a153","first_seen":"2023-06-15T19:09:49Z","last_seen":"2026-03-17T12:22:38.691148Z","times_seen":32,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.kisaran4dpermai.com/wap/","date":"2025-09-26T04:40:55.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:07:09 GMT","end":"Tue, 09 Dec 2025 06:07:05 GMT"},"fingerprint":{"sha1":"72:3D:B7:C9:7E:2A:D8:B8:D7:B9:7D:FF:32:F9:B0:F4:4A:CC:A8:D4","sha256":"4B:96:BD:DD:84:B5:62:B9:1D:FB:29:64:75:BF:46:BB:A5:76:04:CE:99:2C:05:38:39:D5:1B:BF:7F:BA:35:A3"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.kisaran4dpermai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 26 Sep 2025 04:40:55 GMT\r\ncontent-type: font/woff\r\ncontent-length: 93868\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 98501603f9985fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93868,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-04-16T20:55:09.018308Z","times_seen":25881,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}