{"report_id":"f8f8766c-3b4e-428f-8340-9b77b1603305","version":0,"status":"done","tags":[],"date":"2026-08-18T12:05:33Z","url":{"schema":"https","addr":"shieldex.ltd/","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"shieldex.ltd/","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"title":"Vertex Finance","dom":{"size":29409,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11874)","md5":"75c802c40b590a8622f55d6578f5af9a","sha1":"5d851f7889314b432c314d599409163c0f25dab0","sha256":"345ad3ed5431e6f76dbeca936057a83789c67f9425ba6183740c45e086474f0a","sha512":"f37cbfbc316c17e729be612db6a79b489b092eb2a1a4dcc8c9f0335ab677c37f9d94551a88b26352dd0b2ce4648eb316270308661caab295e6891f1e9f044872","ssdeep":"384:rByjccir9ZNZZR1SL5tkIIdLBMmT/DLbygpVIbKkQ3+1b:+ybtqQ3+1b","tlshash":"84d23e31f1813226412745d1e4aa3fbcb86af3079b2a6db547e877bd5fc2de26ca1110","dom_hash":"domhashc56b8caa8053613ec3a24c3e6ec9d20f","first_seen":"2026-08-18T12:05:43.980228Z","last_seen":"2026-08-18T12:05:43.980228Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"shieldex.ltd/","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-22T12:05:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"accounts.google.com","ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2026-08-17T09:27:13.390731Z","alert_count":0,"request_count":1,"received_data":266406,"sent_data":457,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fghgfhg235.icu","ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2025-08-21","domain_rank":0,"first_seen":"2025-10-20T01:02:38.132353Z","last_seen":"2026-04-09T04:03:20.089567Z","alert_count":0,"request_count":2,"received_data":266,"sent_data":1136,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-16T23:03:23.649094Z","alert_count":0,"request_count":1,"received_data":303627,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-08-17T20:40:48.421509Z","alert_count":0,"request_count":26,"received_data":1407854,"sent_data":12777,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-08-18T00:58:21.627091Z","alert_count":0,"request_count":3,"received_data":6266,"sent_data":1674,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"vsb10.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1475707,"first_seen":"2020-04-04T03:22:33Z","last_seen":"2026-08-07T12:50:17.064018Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1102,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"recharge-override.pages.dev","ip":{"addr":"172.66.47.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-06-29T18:41:47.03049Z","last_seen":"2026-08-18T11:45:45.150724Z","alert_count":0,"request_count":1,"received_data":3526,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"shieldex.ltd","ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-20T01:02:38.126482Z","last_seen":"2026-08-18T11:45:47.847909Z","alert_count":0,"request_count":23,"received_data":3168173,"sent_data":11782,"comment":"","tags":null,"fingerprints":[{"name":"Google Sign-in","description":"Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.","website":"https://developers.google.com/identity/sign-in/web","common_platform_enumeration":"","icon":"Google.svg","categories":["Authentication"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","size":5504,"data":"","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-18T14:35:51.330543Z","times_seen":42711,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7d88b42e6403da8e9ff02766a45cb8b","sha1":"3350c387ebb138ebd523634d2afe02a2e51da0bd","sha256":"fd7b35fad22d36ed72bc9ed33b416c8dd43b337484ed41c6fff2cd3817df5bd6","sha512":"91102e89de58787e9c70103ebd5767c2fd2ceccd7597136706590e08750d5a1cb833b5577a222c13e0ab44c4e001253d3c53331358f07d93e4a65edd8c753c0f","ssdeep":"96:zNC9Hqt7pEma7hY/rcKOJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYMLRIvgx43nVY","tlshash":"43b1859af247b456c156225150ef3b1df33a281ca61ccdc4a66965f218784cba077b3d","size":5261,"data":"","first_seen":"2026-08-14T21:10:06.99602Z","last_seen":"2026-08-18T13:54:03.664899Z","times_seen":202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b7571445a752df762894d31268e7c12","sha1":"54b956960bd4376f15523f25f586fc5478a626fc","sha256":"2a768547370a8933454d03757e1981e616d448234e06e5b9dcf1608f35bec644","sha512":"12e90c52c5cce1f2767060de43c8627fb789a49f5a1b1a681048e732f08ae67194f4ee0c7a80f305778c67e31a756555c54d463bbdab66f19b03f8f050aa4e71","ssdeep":"768:Vlxfu8+HYUmI+rT1Wf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK4/:xfuro0f20UJWfO+Et7GZrCi20k","tlshash":"8133d9cdb2d6f4258763632130af3006f27a4964a81dd155f334d8f6b9ece49a226f2d","size":54211,"data":"","first_seen":"2026-07-08T23:24:03.874474Z","last_seen":"2026-08-18T13:54:03.645447Z","times_seen":3571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recharge-override.pages.dev/vendor.Z6835.js","fqdn":"recharge-override.pages.dev","domain":"recharge-override.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a28b0a80e5d6aac8c7c343fd2025ffe","sha1":"47d99a9a5a0a86d10cffea91b6218d299f98571d","sha256":"e237183641e7ab0959923ad0b1405fad86bdd15705b31b654adebd8dcd96eedb","sha512":"06b29342733075eb366e0883c26a13720dfd932b39ea8056ed0e16fc42bda76352082f64c622e3445608e4fd91b7db69385ea0ac63c0fcb39c92ebd93a3060fd","ssdeep":"","tlshash":"da51a7a94a54c27749d20feea0b3c3cc7e623449b507e86a5b0c0c1d5547fa74ea6ddc","size":2761,"data":"","first_seen":"2026-07-17T15:25:32.014748Z","last_seen":"2026-08-18T13:59:33.405518Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.google.com/js/platform.js?onload=renderButton","fqdn":"apis.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae235004e4ef87324d9f517ccafb871d","sha1":"25b99edbb0aa636f0050ed7d9342bd5ab988d75d","sha256":"3834f3665da217bd9293a221d34571c50c95d3fd180a77d88dfd7ca87cdd2656","sha512":"c8bebfc773de8bf98451ebcde045eb7a2455c397f95f01ef68e73532116b859d8b4d8008cad2b7fef8e0415df16827ab239dea1fe8b336d8e48c734fa34597a9","ssdeep":"1536:0DGSJRzsqdJ0mzAyPIxG531y/fN6M6GZBsZL:2RzjVIU5A63Gs9","tlshash":"9b53dad976a5702283a3b5a5103f010ef17f6da9fc4c98a8b199c4e42d78e89017bf7d","size":64841,"data":"","first_seen":"2026-08-18T12:05:44.083834Z","last_seen":"2026-08-18T12:05:44.083834Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c30dacb5eab82fcc774efa5e9a7648e","sha1":"17ad955811f541c8d6dfeb63ec76e72911f0e989","sha256":"f1e317e731329be9c1206376e79cab783fa14bef6a1089951206a42d38517baa","sha512":"cb5d5ab3cd2a329f503d05e6602c618a3afec17e752d0aeb35a92e5f78f9cb3eb1615ee18756677649ef23a3b1c1256af3d31d8306b9a9eec94a60a34bed290c","ssdeep":"","tlshash":"494183d937e8f9b6434318e1043f9016f6352976097be8c0531dd4f5bc78849815afb6","size":2306,"data":"","first_seen":"2026-08-14T21:10:07.022852Z","last_seen":"2026-08-18T13:54:03.694055Z","times_seen":253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"563a805630dd08a9393defdbf2df2bb4","sha1":"ac843996f7ecf9a3e81089a0c95aa437ee73416f","sha256":"df87d66b9d25ff5731a825fd2a0c4759f6f6147a64f5c100bb92a95da4528ff2","sha512":"f7ba303a56e5b2bc3df4bad10b034366d2e85f5f3cc7cdd8d6840f9538ac5c3eb798227152a0f2d1f64fb04b8cdeb8d4bff908763c021d644356bca1e6c276fa","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kC7GN//h6LiJq:SzP2DxSLi8","tlshash":"77822ba6f149311bc925c751605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","size":18392,"data":"","first_seen":"2026-08-14T21:10:07.006778Z","last_seen":"2026-08-18T13:54:03.671263Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-18T14:35:51.442565Z","times_seen":93751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-18T14:35:51.460222Z","times_seen":67249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d629d92b0f3db8cf35d9033bfb8bb4de","sha1":"540ad35dc02ac9fe95061c719494cf13f6569aea","sha256":"83e55b6787ffce43087562d22b0af12c12a25e0f729c4c2b76f534278c838499","sha512":"2c4b20bb80ceffa32e292237ab932d36b496b962878f505daab5924b87798cd60d4ecdb3430914fa2bb3e6ab9ffd0bafd9d54e461d530664c470f03e5354ef96","ssdeep":"1536:BigMvSFu1D6woLGnA2jYDpgaOJDWbaylDluKzWNraURPkx3uYV5pKYerlSy:47iul4vGia2x3uYV5pwrlSy","tlshash":"f4b3196ef091b43d89939162209f3212f3363d55a919d0a8f678cef419d89c96127f3e","size":111386,"data":"","first_seen":"2026-08-14T21:10:07.016579Z","last_seen":"2026-08-18T13:54:03.685435Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","size":1000,"data":"","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-18T14:35:51.329709Z","times_seen":50305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bb7aac0cac89a90304af1c72eb4f50d","sha1":"729f6f8ca5787d89743b0ed7eb27fd76406bf985","sha256":"f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b","sha512":"ed26bf873a3c5b2e48d8b3c955240a46d8f7d7f3c635ab138179b999dbadc77802285879cb1a833f703059762c346066090a9a740bfe881f56d6d95f2dca7f30","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSob5/ove:Q/drlyogMVc6FIKV+ZLBSob5l","tlshash":"59546c7a87606deeea94d02d86db374af58c3c0453ed1266b66482cb27f543a33487dc","size":302554,"data":"","first_seen":"2023-04-05T07:49:38Z","last_seen":"2026-08-18T14:35:51.428662Z","times_seen":51776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c2091a992e4303600967e53388cb5c8","sha1":"70cb06404a117829d3c53f5890077f5ff82957c9","sha256":"52edf640b5358d2e388d34d85bae2bf9973c26383165c4187da4e98b7703233a","sha512":"4d379fa96658dead5908f119d36ff91db8ec34d145fad5888370bd681ec575615351eaa0336fba48e4ad102b84e07881286bb1a958ec15ac36f86677de149d15","ssdeep":"192:0CFny7CpmYbZTxcwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mCTZTJr40v0GF/LvV4hwsR","tlshash":"9332a6b7e0a1107ea316871c106fa610f61f6c8ab2561da5ba7ab46f900ddcfc065f7c","size":10918,"data":"","first_seen":"2026-04-21T04:02:24.334927Z","last_seen":"2026-08-18T14:35:51.37156Z","times_seen":14593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b42986e1b152902aa7e221095c824a29","sha1":"a78d1753a6da51657c1451f10d9b40f9dd6ef534","sha256":"a371707a17d64af6fa61b9084ea1ac40ba60728b383eab5777837453266bbb69","sha512":"af6e1f60ea2ca3241e57215fd80039acc29cec382a248b6cd580ace6c71a69e1f6ce2c7f96a091da044aa0cf7e92ff5bba19b5b1f7431b93b63f047adc0b8c3d","ssdeep":"384:Nqw/U5YK8Hxhq0ThWazJbUZDkM0kWEYPk6c+VtKM5eW:A+hq0ThWazJbUZDkM0kWEYPk6c+e2eW","tlshash":"ac52d7a7b2a4782d02379712308f3204f33b7d45b615da19f36edcea4aa84c16056f3e","size":14277,"data":"","first_seen":"2026-08-14T21:10:07.034439Z","last_seen":"2026-08-18T13:54:03.694881Z","times_seen":194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e19c0da389ad9712c2e71b0e43e5c630","sha1":"4e79810c51af2b59bc4e3a3f20b351f7b616781e","sha256":"6da44a8a7001fc8a0c55c4cadd6c63676c14320127a79fca94fcec049b56f171","sha512":"857f0d8e3dbcbf5ea9e41c3eb7040e45332c2cb99b3f283b37a25dab090443526fc1c954e6d33ac8ce4f318b08ee4ff270a428d79df8467552e4357875ac6710","ssdeep":"6144:fdth217hxy56hIJFMS/4y/PIwnpjSsMnaCrW3/Ic3iU:fUhsh/4y/gsdjMnaCrW3/IpU","tlshash":"3e444bdcb2e270359212f8b5c43f410ab076a679f0498cacf695c6f5acb1d890167f7a","size":265306,"data":"","first_seen":"2026-08-12T18:13:26.386427Z","last_seen":"2026-08-18T14:36:59.564796Z","times_seen":802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/js/app.2a4495e2.js","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce5c1b0dbbc6aa39b4d83195508ff18d","sha1":"27fea0b9ae5cc2d8ada3e2a364cbc3918e10aff8","sha256":"330747df682bd0c85fdf23d3e5094597c0d36791f6c5ebe5b37db8792c65c46c","sha512":"a91e378ff85535ff7c9cd649bad6fea993ab1bdc352e3e1e13a1f3eab482807e1569eee39e9afb2cbf8075911fe53dcca99e29eb5f5d2e5120d75aacc6524986","ssdeep":"12288:PmANNz0ANYo31/4clBA28p8HzUAtUfmY4FqRDT8bZm+DDPsp66jA9dSYE:pNNz0c/xMYE","tlshash":"4a848e7b214a8e799bc107c2210b3759b1b81de2b341f4e05addde1d13eeb48e14ae79","size":401597,"data":"","first_seen":"2026-08-18T11:45:48.294574Z","last_seen":"2026-08-18T12:05:44.001737Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca30657f0402cac8339147c951d92e0d","sha1":"91f3ab87c99148c4ef2d7af45207de86c660032a","sha256":"b307b937a93ef6602be9220479c091f96c45d8a07958ec34d204b3123218ce9a","sha512":"a84d1b34bc1f791beed7fad274bd8555a424aa837f1b947134874ff4b10332b8d26d847bfd6811d97d23c486faddd6d082e7c185ea1b38e98d533ca04ab00fcd","ssdeep":"3072:A8gYgcvYqhJrTodCWFW1Wx08fMOAUTqCpQio/rtxLMz9gZ1a:5OCWFW1WxVfMOA/uKbLMz9S1a","tlshash":"4134c69df186b47606a37131501f320af23a685ab45ac0d4f636d8e1bd789cea133f79","size":244281,"data":"","first_seen":"2026-08-14T21:10:06.988881Z","last_seen":"2026-08-18T13:54:03.644948Z","times_seen":253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-18T14:35:51.432006Z","times_seen":93779,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fecc9d90ae6ad7f85d676e274e5d4a5","sha1":"0e1300fb36969ed28db617c9bba0c8d0bff72c8e","sha256":"db389f4bb5872ace6ade114d9a15d1afc02e7d411680f6f98fa5a350b0b4ee5c","sha512":"e5fe2e55710dccb04046bf588c1cdfd27a153447b5a8f818af6e4f536abc89f4e38f242c117a4a6f2214a017653008272075811e9a40a5718a08b3900ecd71a0","ssdeep":"6144:jzicBg7MOpWK+1ZWwehNo4TR+5Ar6k+WS:nicBgoO27WwKvC","tlshash":"39744cc8f193b0b946e2a2a5009f5207737b052968e88494f574dfe968e8d5c637bf3c","size":348923,"data":"","first_seen":"2026-05-25T09:57:47.440233Z","last_seen":"2026-08-18T14:35:51.450489Z","times_seen":10457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7308b5ce68bf72454e6d5e038697c151","sha1":"e3256a93e366928adcbae91772415048bcbbf453","sha256":"52070db866258a8cec9501fc7a2f6262a16c2517ce72901c996900a8f2ac65a3","sha512":"898434a37758ede4df98d8ba0fe1d64eefe80419cbf5bbfbc0b8b59d3acf47f14bd2dbda3c5a61f36e10329befe8317ae572123c095276ed62edd0b23b7637bc","ssdeep":"192:0H9Ma8RIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:K8b9HkS316xAFKpLZEh","tlshash":"3632a3c6e8c7b9564227160451efe128f73f2a94771adc18f0a895f34a948c3507bfba","size":11888,"data":"","first_seen":"2026-08-14T21:10:07.032126Z","last_seen":"2026-08-18T14:35:51.471564Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/js/chunk-vendors.c669cb70.js","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c35eadac1cb4a38a4189e173fa51db0","sha1":"fb151d2c3ea2289df7cd6115e3f33551f42e2322","sha256":"7e81e8a0cc0b9d8ac59ca663e9c1f3d765fa0a92c0ac5d55e241be1608db61ee","sha512":"dacf774bbf36eeeabd244c5e944c10eb0238b250fd72a966c4c47b98f1886b2ff799ab173da232faa2920068b0b0c4151ade1ab8f17fc5decb4c791b9d43a881","ssdeep":"49152:W+VFUFXGYO4ocmazY4Zx3dRKfUH4ZYdVTF:9V+FXG+o1WL","tlshash":"ad85f889b2d1b07547e760b0402f150ff23b695da40a84a8f675e8ea6cbc94e513bf7c","size":1844779,"data":"","first_seen":"2026-08-18T11:45:48.399376Z","last_seen":"2026-08-18T12:05:44.086935Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6a146e6a4442d91c3266d294/1jpfsukbd","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfd988bf8a930c06f6e2d3d48fd3d9a2","sha1":"a0bf0572b58f85c3817b56807eefd5ed588a14c5","sha256":"e2fec4acb23266a70e2ffea5debc28514da37088304a40bab9c20e1f57e361d8","sha512":"b768787095bbdb3f020b001f2b542599107d0c97831d96d7e1e8e6cd3b1e5b16626409eaaf4756045ded689d2a51ab18c96d5a67b8b69f539679675d2ec2e0fc","ssdeep":"","tlshash":"2541d0e39f9f1857e32410d90daffa0e747b21da4de85cd2470c0411b2557ad6acee28","size":2123,"data":"","first_seen":"2026-08-18T11:45:48.314926Z","last_seen":"2026-08-18T12:05:44.022237Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"localStorage中的userInfo字符串:map[type:null]","filename":"https://shieldex.ltd/js/app.2a4495e2.js","line_number":1,"column_number":45825},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj24 class:Object extensible:false frozen:true isError:false ownPropertyLength:8 preview:map[kind:Object ownProperties:map[fullPath:map[configurable:false enumerable:true value:/ writable:false] hash:map[configurable:false enumerable:true value: writable:false] matched:map[configurable:false enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj28 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:ArrayLike length:1] sealed:false type:object] writable:false] meta:map[configurable:false enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj25 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] writable:false] name:map[configurable:false enumerable:true value:home writable:false] params:map[configurable:false enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj27 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] writable:false] path:map[configurable:false enumerable:true value:/ writable:false] query:map[configurable:false enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj26 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] writable:false]] ownPropertiesLength:8] sealed:true type:object]","filename":"https://shieldex.ltd/js/app.2a4495e2.js","line_number":1,"column_number":12496},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj29 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[items:[] kind:ArrayLike length:0] sealed:false type:object]","filename":"https://shieldex.ltd/js/app.2a4495e2.js","line_number":1,"column_number":36700},{"level":"log","text":"App.vue: Set i18n locale to:en","filename":"https://shieldex.ltd/js/app.2a4495e2.js","line_number":1,"column_number":19124},{"level":"log","text":"map[type:null]","filename":"https://shieldex.ltd/js/app.2a4495e2.js","line_number":1,"column_number":19257},{"level":"log","text":"wss://fghgfhg235.icu/websocket/message","filename":"https://shieldex.ltd/js/app.2a4495e2.js","line_number":1,"column_number":51399},{"level":"log","text":"启动空闲检测，10分钟无操作自动断开连接","filename":"https://shieldex.ltd/js/app.2a4495e2.js","line_number":1,"column_number":22679},{"level":"log","text":"this.establishWebSocketConnection is not a function","filename":"https://shieldex.ltd/js/app.2a4495e2.js","line_number":1,"column_number":19975},{"level":"log","text":"111","filename":"https://shieldex.ltd/js/app.2a4495e2.js","line_number":1,"column_number":24011},{"level":"log","text":"1.6666666666666665scale","filename":"https://shieldex.ltd/js/app.2a4495e2.js","line_number":1,"column_number":24194},{"level":"log","text":"100rootFontSize","filename":"https://shieldex.ltd/js/app.2a4495e2.js","line_number":1,"column_number":24249},{"level":"log","text":"Network Error","filename":"https://shieldex.ltd/js/app.2a4495e2.js","line_number":1,"column_number":38533}]},"http":[{"url":{"schema":"https","addr":"shieldex.ltd/","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-18T12:04:54.362Z","timestamp":1787054694362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:55 GMT\r\ncontent-type: text/html\r\ncontent-length: 953\r\nlast-modified: Mon, 13 Jul 2026 15:11:41 GMT\r\netag: \"6a55002d-3b9\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Sign-in","description":"Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.","website":"https://developers.google.com/identity/sign-in/web","common_platform_enumeration":"","icon":"Google.svg","categories":["Authentication"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":953,"size_decoded":1221,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (952)","md5":"fc9e19911b18de7baad311da8107c608","sha1":"dd967c7b8b3a1fed45e19681caa2c642388d6d80","sha256":"aaf5af5d64c2a62783aea90a3ed27b8aa75e34089621c02221aaa160ff534f00","sha512":"be9b53597d0b76c281f5e23429dff0bb4c29342f2891edaab77c331574bf25125fc4080e63b11be88ccc28c17068103059dc478b07cbd12988df508fcdef49c3","ssdeep":"","tlshash":"2611bad3dc10d09e47506f81f871f30d988b79099fa1e8a07bf9417d19e4fc98c9a8a4","first_seen":"2026-08-18T11:45:48.289617Z","last_seen":"2026-08-18T12:05:43.988485Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1044,"timings":{"blocked":-1,"dns":86,"connect":239,"send":0,"wait":237,"receive":0,"ssl":482},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:55.750Z","timestamp":1787054695750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:44:35 GMT","end":"Wed, 28 Oct 2026 20:44:34 GMT"},"fingerprint":{"sha1":"64:D6:F8:4D:6D:41:DD:C8:84:FF:B5:AF:E5:36:6E:EB:F1:FD:B9:4B","sha256":"64:03:31:A4:45:80:6B:21:97:39:5A:8D:6E:60:1D:8A:7C:16:0C:7F:ED:80:30:EC:46:AA:D6:FB:DF:D0:CA:07"}}},"request":{"raw":"GET /gsi/client HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nexpires: Tue, 18 Aug 2026 12:04:55 GMT\r\ndate: Tue, 18 Aug 2026 12:04:55 GMT\r\ncache-control: private, max-age=1800\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-Vw6xiVQ7XKwyzGBmSMDJdQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_dd7de8473bddc59c6b748810a67a39b1\"\r\nreport-to: {\"group\":\"coop_dd7de8473bddc59c6b748810a67a39b1\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1\"}]}\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":265306,"size_decoded":99391,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2663)","md5":"e19c0da389ad9712c2e71b0e43e5c630","sha1":"4e79810c51af2b59bc4e3a3f20b351f7b616781e","sha256":"6da44a8a7001fc8a0c55c4cadd6c63676c14320127a79fca94fcec049b56f171","sha512":"857f0d8e3dbcbf5ea9e41c3eb7040e45332c2cb99b3f283b37a25dab090443526fc1c954e6d33ac8ce4f318b08ee4ff270a428d79df8467552e4357875ac6710","ssdeep":"6144:fdth217hxy56hIJFMS/4y/PIwnpjSsMnaCrW3/Ic3iU:fUhsh/4y/gsdjMnaCrW3/IpU","tlshash":"3e444bdcb2e270359212f8b5c43f410ab076a679f0498cacf695c6f5acb1d890167f7a","first_seen":"2026-08-12T18:13:26.386427Z","last_seen":"2026-08-18T14:36:59.564796Z","times_seen":802,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":3,"connect":17,"send":0,"wait":40,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:58.338Z","timestamp":1787054698338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://shieldex.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"2fecc9d90ae6ad7f85d676e274e5d4a5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1199\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8b89fc45696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348923,"size_decoded":117195,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"2fecc9d90ae6ad7f85d676e274e5d4a5","sha1":"0e1300fb36969ed28db617c9bba0c8d0bff72c8e","sha256":"db389f4bb5872ace6ade114d9a15d1afc02e7d411680f6f98fa5a350b0b4ee5c","sha512":"e5fe2e55710dccb04046bf588c1cdfd27a153447b5a8f818af6e4f536abc89f4e38f242c117a4a6f2214a017653008272075811e9a40a5718a08b3900ecd71a0","ssdeep":"6144:jzicBg7MOpWK+1ZWwehNo4TR+5Ar6k+WS:nicBgoO27WwKvC","tlshash":"39744cc8f193b0b946e2a2a5009f5207737b052968e88494f574dfe968e8d5c637bf3c","first_seen":"2026-05-25T09:57:47.440233Z","last_seen":"2026-08-18T14:35:51.450489Z","times_seen":10457,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:58.468Z","timestamp":1787054698468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://shieldex.ltd/\r\nOrigin: https://shieldex.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:58 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 14 Aug 2026 20:52:24 GMT\r\netag: W/\"73eea1de9215521cb137b51419ba55a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1198\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8b96fcd5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10839,"size_decoded":4369,"mime_type":"application/json","magic":"JSON text data","md5":"73eea1de9215521cb137b51419ba55a9","sha1":"a8876b573146cd5450adc92a5450febea8d33f22","sha256":"df1d970dbd95be40780e8c006102fa7892bfe26bc989ee0c9222b089038542ee","sha512":"277849fa8a9d59430663b5c1aac29a198436731ab59bc5968ed9fcfb839f00a31e6e278c3c78547f6e1c20d94847963375de011be6493af268a7bac25cd15257","ssdeep":"192:ImwHq/LrnzPLEgIE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:s6LrnzCE1iN+xkDOy+Hp8/5Avy","tlshash":"c7224269ce504ea702c29647399f35437624429b1f54382eb78891ac0f8ec6f71f779e","first_seen":"2026-02-18T09:54:55.751197Z","last_seen":"2026-08-18T14:35:51.301234Z","times_seen":29567,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:59.593Z","timestamp":1787054699593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0aef27.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"7308b5ce68bf72454e6d5e038697c151\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 313650\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8c07f0c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11888,"size_decoded":4542,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11888), with no line terminators","md5":"7308b5ce68bf72454e6d5e038697c151","sha1":"e3256a93e366928adcbae91772415048bcbbf453","sha256":"52070db866258a8cec9501fc7a2f6262a16c2517ce72901c996900a8f2ac65a3","sha512":"898434a37758ede4df98d8ba0fe1d64eefe80419cbf5bbfbc0b8b59d3acf47f14bd2dbda3c5a61f36e10329befe8317ae572123c095276ed62edd0b23b7637bc","ssdeep":"192:0H9Ma8RIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:K8b9HkS316xAFKpLZEh","tlshash":"3632a3c6e8c7b9564227160451efe128f73f2a94771adc18f0a895f34a948c3507bfba","first_seen":"2026-08-14T21:10:07.032126Z","last_seen":"2026-08-18T14:35:51.471564Z","times_seen":142,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:59.600Z","timestamp":1787054699600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-6289ff8e.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"d629d92b0f3db8cf35d9033bfb8bb4de\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 313651\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8c07f13783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111386,"size_decoded":28597,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d629d92b0f3db8cf35d9033bfb8bb4de","sha1":"540ad35dc02ac9fe95061c719494cf13f6569aea","sha256":"83e55b6787ffce43087562d22b0af12c12a25e0f729c4c2b76f534278c838499","sha512":"2c4b20bb80ceffa32e292237ab932d36b496b962878f505daab5924b87798cd60d4ecdb3430914fa2bb3e6ab9ffd0bafd9d54e461d530664c470f03e5354ef96","ssdeep":"1536:BigMvSFu1D6woLGnA2jYDpgaOJDWbaylDluKzWNraURPkx3uYV5pKYerlSy:47iul4vGia2x3uYV5pwrlSy","tlshash":"f4b3196ef091b43d89939162209f3212f3363d55a919d0a8f678cef419d89c96127f3e","first_seen":"2026-08-14T21:10:07.016579Z","last_seen":"2026-08-18T13:54:03.685435Z","times_seen":200,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:59.602Z","timestamp":1787054699602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0c8092.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"a7d88b42e6403da8e9ff02766a45cb8b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 313651\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8c07f14783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5261,"size_decoded":2633,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5261), with no line terminators","md5":"a7d88b42e6403da8e9ff02766a45cb8b","sha1":"3350c387ebb138ebd523634d2afe02a2e51da0bd","sha256":"fd7b35fad22d36ed72bc9ed33b416c8dd43b337484ed41c6fff2cd3817df5bd6","sha512":"91102e89de58787e9c70103ebd5767c2fd2ceccd7597136706590e08750d5a1cb833b5577a222c13e0ab44c4e001253d3c53331358f07d93e4a65edd8c753c0f","ssdeep":"96:zNC9Hqt7pEma7hY/rcKOJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYMLRIvgx43nVY","tlshash":"43b1859af247b456c156225150ef3b1df33a281ca61ccdc4a66965f218784cba077b3d","first_seen":"2026-08-14T21:10:06.99602Z","last_seen":"2026-08-18T13:54:03.664899Z","times_seen":202,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/img/service.bb8e9ee1.svg","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.573Z","timestamp":1787054697573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /img/service.bb8e9ee1.svg HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:57 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a14773f-591\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1425,"size_decoded":977,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4f4dbd11018c5e948ad3ca184bd6ab7","sha1":"3490ecfa742c52caab0838830a1b82bc5e37c657","sha256":"0f3cbdd9e999a73a556e836b5402a23c06dcc066106e3c0778f30bc5a22f0cff","sha512":"572b006bcadd9be92cf641700ff6335b1996314040e4612e8c38c11f76e5b460f2f8a3dafa4ae30e37a2fd4b7b46781dd2470c2652f3aa27a86e12e603278c53","ssdeep":"","tlshash":"9521c2ece61d155ca4c273ca8638e4c953277095b6a20529d48f997880738edcb4fd5c","first_seen":"2025-08-16T11:30:34.812642Z","last_seen":"2026-08-18T12:05:43.998405Z","times_seen":19,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/img/icon_trading.733e50e8.66511d24.svg","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.585Z","timestamp":1787054697585,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /img/icon_trading.733e50e8.66511d24.svg HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 969\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\netag: \"6a14773f-3c9\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":969,"size_decoded":1241,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c52183d361ba0bbcb020eb1a7215d8b2","sha1":"494cb60466c07097fd4ecbfa3ce619efa9f19119","sha256":"c65cf57d776a0f497a5a82d969735326e9ea83edffda7f90b580598bc54b961e","sha512":"f7f8a2f57593b1fb68e139fd7c6c5b03ec8a3694eb74c7876f130a441a3d6cb5f8fc0fc616ec3bd6c916574f814a3a061dc10b47df3f61db21cf614f2568a147","ssdeep":"","tlshash":"2811a8784368d8a4b341c3f8cb1430921a3f2093eb2761980be17a360a2511d6cbb1b9","first_seen":"2025-08-16T11:30:34.800764Z","last_seen":"2026-08-18T12:05:43.999289Z","times_seen":18,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fghgfhg235.icu/swx/customer/index/listMarketByType","fqdn":"fghgfhg235.icu","domain":"fghgfhg235.icu","tld":"icu"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.591Z","timestamp":1787054697591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fghgfhg235.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:16:41 GMT","end":"Tue, 13 Oct 2026 07:16:40 GMT"},"fingerprint":{"sha1":"75:CD:39:34:66:E6:F8:CD:1F:00:51:EE:9D:1D:33:80:44:19:41:39","sha256":"B2:07:3E:DE:8C:A0:A6:47:BD:E5:42:67:56:B8:F1:D1:2D:90:47:17:2D:70:2E:22:77:25:65:AC:63:AD:36:15"}}},"request":{"raw":"OPTIONS /swx/customer/index/listMarketByType HTTP/1.1\r\nHost: fghgfhg235.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: virtually\r\nReferer: https://shieldex.ltd/\r\nOrigin: https://shieldex.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:58 GMT\r\ncontent-type: text/html\r\ncontent-length: 150\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":133,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T14:37:28.899243Z","times_seen":17956565,"resource_available":true,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":92,"connect":237,"send":0,"wait":237,"receive":0,"ssl":242},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:59.595Z","timestamp":1787054699595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0da3af.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"b42986e1b152902aa7e221095c824a29\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 313651\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8c07f10783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14277,"size_decoded":5537,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14277), with no line terminators","md5":"b42986e1b152902aa7e221095c824a29","sha1":"a78d1753a6da51657c1451f10d9b40f9dd6ef534","sha256":"a371707a17d64af6fa61b9084ea1ac40ba60728b383eab5777837453266bbb69","sha512":"af6e1f60ea2ca3241e57215fd80039acc29cec382a248b6cd580ace6c71a69e1f6ce2c7f96a091da044aa0cf7e92ff5bba19b5b1f7431b93b63f047adc0b8c3d","ssdeep":"384:Nqw/U5YK8Hxhq0ThWazJbUZDkM0kWEYPk6c+VtKM5eW:A+hq0ThWazJbUZDkM0kWEYPk6c+e2eW","tlshash":"ac52d7a7b2a4782d02379712308f3204f33b7d45b615da19f36edcea4aa84c16056f3e","first_seen":"2026-08-14T21:10:07.034439Z","last_seen":"2026-08-18T13:54:03.694881Z","times_seen":194,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/js/app.2a4495e2.js","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:55.755Z","timestamp":1787054695755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /js/app.2a4495e2.js HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a14773f-620bd\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":401597,"size_decoded":113878,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62271), with no line terminators","md5":"ce5c1b0dbbc6aa39b4d83195508ff18d","sha1":"27fea0b9ae5cc2d8ada3e2a364cbc3918e10aff8","sha256":"330747df682bd0c85fdf23d3e5094597c0d36791f6c5ebe5b37db8792c65c46c","sha512":"a91e378ff85535ff7c9cd649bad6fea993ab1bdc352e3e1e13a1f3eab482807e1569eee39e9afb2cbf8075911fe53dcca99e29eb5f5d2e5120d75aacc6524986","ssdeep":"12288:PmANNz0ANYo31/4clBA28p8HzUAtUfmY4FqRDT8bZm+DDPsp66jA9dSYE:pNNz0c/xMYE","tlshash":"4a848e7b214a8e799bc107c2210b3759b1b81de2b341f4e05addde1d13eeb48e14ae79","first_seen":"2026-08-18T11:45:48.294574Z","last_seen":"2026-08-18T12:05:44.001737Z","times_seen":2,"resource_available":true,"data":null}},"time_used":991,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":991,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/img/app_store.f539e414.a975603b.svg","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.575Z","timestamp":1787054697575,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /img/app_store.f539e414.a975603b.svg HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 695\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\netag: \"6a14773f-2b7\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":695,"size_decoded":967,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8593bfb0fa9337fd16494132b19f1d3f","sha1":"e98b6155d081507c324a03ac98a2f1d0c2f1cd20","sha256":"77e7beb7a72d2fa97ab33afddcb119d41e5a2c1c2c1c25bbfc813bf3eac8d4ff","sha512":"24237e685dfcf25311aec3a9175d24df5fc8ff08fdd47e429f9ae26fd6a4b93e20aff23856dd9b215e7a86d22b91c38997f05ab9473fdcb4cc65f206eea493c2","ssdeep":"","tlshash":"7701c0d4a3e8c5904b077bf4da315461da6158d41b86c37547a129dafd350dd980d024","first_seen":"2025-08-27T11:07:37.135696Z","last_seen":"2026-08-18T12:05:44.016088Z","times_seen":13,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:58.466Z","timestamp":1787054698466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://shieldex.ltd/\r\nOrigin: https://shieldex.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:58 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 14 Aug 2026 20:52:24 GMT\r\netag: W/\"17fa2497bdae7324a17eaedfe6fc8650\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1198\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8b96fca5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11596,"size_decoded":4376,"mime_type":"application/json","magic":"JSON text data","md5":"17fa2497bdae7324a17eaedfe6fc8650","sha1":"27bce6a96d49d0077bc16228801a3089fce5be2a","sha256":"cce37a30801a132937edb0ac257f4ed917559c00d6a648716bd9ac406cfc62b1","sha512":"f4155fcb97d0180daa46cb293cd70f01b984c39f9895f76a0acc098b0c5f86f883378620e75f8fb79b0e0b1e5033e4ace16046bc48ca2a9c2127053ae48be305","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9KvKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59t3Zwfi","tlshash":"98323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2026-05-13T09:28:21.606546Z","last_seen":"2026-08-18T14:35:51.431288Z","times_seen":11848,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/css/branding-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:59.661Z","timestamp":1787054699661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/css/branding-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"fe979c92a5ad992510e5629b84a23526\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 313650\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8c0df24783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19329,"size_decoded":4800,"mime_type":"text/css","magic":"ASCII text, with very long lines (19281)","md5":"fe979c92a5ad992510e5629b84a23526","sha1":"4fee6cd9de53fa82feef4042aa83202f4cd194a5","sha256":"de84306c96c98314e1a796f26df99a70f20590c535a678215d89560007b4dacf","sha512":"633913cef35247da29e85dde7c279353761606e6c508690d4d5924aa89f563354e44c51b053f785800fd3b599feb8fd2d69a2fe55162b4ccab95c84f8ed8739d","ssdeep":"192:XeI2u2acuBLZNgxYe4fbfYLFFDw25lYVRgtUramxi71NZcFRKV7:uTTacuVZNgxYe4fbgL3w23U3xi7vD1","tlshash":"af92dca3b9e310dcd557c632c0d1f67ca82f9a24c357c6e3a9037bb986827d7264198c","first_seen":"2025-05-21T12:18:34.239407Z","last_seen":"2026-08-18T13:42:34.180905Z","times_seen":39351,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6a146e6a4442d91c3266d294/1jpfsukbd","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.566Z","timestamp":1787054697566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /6a146e6a4442d91c3266d294/1jpfsukbd HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://shieldex.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-6a7f7fd8722\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Tue, 18 Aug 2026 12:04:57 GMT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1199\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8b3ef6e5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2123,"size_decoded":1226,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"cfd988bf8a930c06f6e2d3d48fd3d9a2","sha1":"a0bf0572b58f85c3817b56807eefd5ed588a14c5","sha256":"e2fec4acb23266a70e2ffea5debc28514da37088304a40bab9c20e1f57e361d8","sha512":"b768787095bbdb3f020b001f2b542599107d0c97831d96d7e1e8e6cd3b1e5b16626409eaaf4756045ded689d2a51ab18c96d5a67b8b69f539679675d2ec2e0fc","ssdeep":"","tlshash":"2541d0e39f9f1857e32410d90daffa0e747b21da4de85cd2470c0411b2557ad6acee28","first_seen":"2026-08-18T11:45:48.314926Z","last_seen":"2026-08-18T12:05:44.022237Z","times_seen":2,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":5,"connect":14,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/img/icon_twitter.667925f3.667925f3.svg","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.588Z","timestamp":1787054697588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /img/icon_twitter.667925f3.667925f3.svg HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1018\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\netag: \"6a14773f-3fa\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1018,"size_decoded":1291,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eed98fe4092ec614ba3dbff4caefa3f9","sha1":"8fceb8268d7fed24485b4673d76de4a1abb83c65","sha256":"c365d5ca9a9359bf0468075e17bcf3f8e64faee94223f6437605f0410d97d747","sha512":"1f522bf446b5108e8a5c11454052b025a4b8e8823e92fe9fbd913bc9d1fbc37b822971d988ebea803c94b2b12527abf6ef04d74121855f9551dfa00b44e55aba","ssdeep":"","tlshash":"bd1132f5818890e0964bcb40dd715437d51b64ff4f98178a0454abb5e3811d0e9d9cd4","first_seen":"2025-08-16T11:30:34.811645Z","last_seen":"2026-08-18T12:05:44.024104Z","times_seen":23,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/img/icon_telegram.83daadb6.83daadb6.svg","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.589Z","timestamp":1787054697589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /img/icon_telegram.83daadb6.83daadb6.svg HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:57 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a14773f-415\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1045,"size_decoded":882,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e57698fc4d52bb52d046c5e02deff69","sha1":"1eb52398654c717fdb35dc95390a04ebc36a31bc","sha256":"2eeeb11deb25289eeafb9587ad0155224228d84d196d7bc8762264e7396dfb49","sha512":"13c561c8f0fe216e70331aabb11929d0851abd2c259d90968d2e58f5ce782bb2d81e6eeb6b7d0d7166ac5a546a056759598a9883b91400d170f97bc7dd0a9fdb","ssdeep":"","tlshash":"fc1132fe7248b3e0c607d768dc36e890329f74f6bf95c7e8025299e563425c58884cb0","first_seen":"2025-08-16T11:30:34.8167Z","last_seen":"2026-08-18T12:05:44.025795Z","times_seen":27,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:58.471Z","timestamp":1787054698471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://shieldex.ltd/\r\nOrigin: https://shieldex.ltd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-w5q6\r\naccess-control-allow-origin: https://shieldex.ltd\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Tue, 18 Aug 2026 12:04:58 GMT\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8b96fce5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":710,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T14:37:28.899243Z","times_seen":17956565,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:59.589Z","timestamp":1787054699589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0d2b7c.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"8c2091a992e4303600967e53388cb5c8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 313651\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8c06f0a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10918,"size_decoded":3755,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10918), with no line terminators","md5":"8c2091a992e4303600967e53388cb5c8","sha1":"70cb06404a117829d3c53f5890077f5ff82957c9","sha256":"52edf640b5358d2e388d34d85bae2bf9973c26383165c4187da4e98b7703233a","sha512":"4d379fa96658dead5908f119d36ff91db8ec34d145fad5888370bd681ec575615351eaa0336fba48e4ad102b84e07881286bb1a958ec15ac36f86677de149d15","ssdeep":"192:0CFny7CpmYbZTxcwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mCTZTJr40v0GF/LvV4hwsR","tlshash":"9332a6b7e0a1107ea316871c106fa610f61f6c8ab2561da5ba7ab46f900ddcfc065f7c","first_seen":"2026-04-21T04:02:24.334927Z","last_seen":"2026-08-18T14:35:51.37156Z","times_seen":14593,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:59.591Z","timestamp":1787054699591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-2d224aff.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"563a805630dd08a9393defdbf2df2bb4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 313652\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8c06f0b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18392,"size_decoded":5826,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18392), with no line terminators","md5":"563a805630dd08a9393defdbf2df2bb4","sha1":"ac843996f7ecf9a3e81089a0c95aa437ee73416f","sha256":"df87d66b9d25ff5731a825fd2a0c4759f6f6147a64f5c100bb92a95da4528ff2","sha512":"f7ba303a56e5b2bc3df4bad10b034366d2e85f5f3cc7cdd8d6840f9538ac5c3eb798227152a0f2d1f64fb04b8cdeb8d4bff908763c021d644356bca1e6c276fa","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kC7GN//h6LiJq:SzP2DxSLi8","tlshash":"77822ba6f149311bc925c751605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","first_seen":"2026-08-14T21:10:07.006778Z","last_seen":"2026-08-18T13:54:03.671263Z","times_seen":200,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://vsb10.tawk.to/s/?k=6a844a6bf420fb43b1090a3f\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2YTE0NmU2YTQ0NDJkOTFjMzI2NmQyOTQiLCJ2aWQiOiI2YTE0NmU2YTQ0NDJkOTFjMzI2NmQyOTQtUUdtUzZTY3BQSWpORHQ2X0t4dTdaIiwic2lkIjoiNmE4NDRhNmJmNDIwZmI0M2IxMDkwYTNmIiwiaWF0IjoxNzg3MDU0Njk5LCJleHAiOjE3ODcwNTY0OTksImp0aSI6Ilg3ZlEzbFJRY0VCQTliSWVNQkpGOCJ9.BF09WWzVgRH1FmXEJtW40FAHDBgfD9uAVTf-BG1XWYYObkw4_ksHr0xKHU2w_qhQR4eSX3FwMNGkwUs2kHCVKg\u0026EIO=3\u0026transport=websocket\u0026__t=Q0KmhHA","fqdn":"vsb10.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:59.617Z","timestamp":1787054699617,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /s/?k=6a844a6bf420fb43b1090a3f\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2YTE0NmU2YTQ0NDJkOTFjMzI2NmQyOTQiLCJ2aWQiOiI2YTE0NmU2YTQ0NDJkOTFjMzI2NmQyOTQtUUdtUzZTY3BQSWpORHQ2X0t4dTdaIiwic2lkIjoiNmE4NDRhNmJmNDIwZmI0M2IxMDkwYTNmIiwiaWF0IjoxNzg3MDU0Njk5LCJleHAiOjE3ODcwNTY0OTksImp0aSI6Ilg3ZlEzbFJRY0VCQTliSWVNQkpGOCJ9.BF09WWzVgRH1FmXEJtW40FAHDBgfD9uAVTf-BG1XWYYObkw4_ksHr0xKHU2w_qhQR4eSX3FwMNGkwUs2kHCVKg\u0026EIO=3\u0026transport=websocket\u0026__t=Q0KmhHA HTTP/1.1\r\nHost: vsb10.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://shieldex.ltd\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: yhxZnDZSC4NNGhAW6WTFiw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 18 Aug 2026 12:05:00 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: XmC2BXKmONtZDPBTLczhNUIo5cQ=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nStrict-Transport-Security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: a2d0c8c0bf1623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":417,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T14:37:28.899243Z","times_seen":17956565,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":15,"connect":13,"send":0,"wait":626,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:59.719Z","timestamp":1787054699719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://shieldex.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6a7f7fd8722/css/bubble-widget.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:59 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1198\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8c1382f5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 93868\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93868,"size_decoded":94439,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-08-18T14:35:51.307646Z","times_seen":36177,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/img/icon_loans.dd791035.d8963feb.svg","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.582Z","timestamp":1787054697582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /img/icon_loans.dd791035.d8963feb.svg HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 866\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\netag: \"6a14773f-362\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":866,"size_decoded":1138,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2deae2c409a9f32586255b55cf56dd4c","sha1":"f3f94a36744b9c5fdc7336fed23d954cbf034b87","sha256":"e0cf89271c32ff766516e4aa38c6b7f81e3130b914d51cc3eeff417270d07a1a","sha512":"545522416eb371f05c5e33859bc3695a82ea2d393e52041f7b9b3e4662d7efd8a042cf9df36f9e329cfd7874b7f8a1ce3f2e6700468573da7d30be16d365bcdb","ssdeep":"","tlshash":"7411cc706f114838f62063bcdb243c759539a4d37c876100cab73033a15ad6dbcb6aab","first_seen":"2025-08-16T11:30:34.827113Z","last_seen":"2026-08-18T12:05:44.029626Z","times_seen":18,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:58.347Z","timestamp":1787054698347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://shieldex.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"ca30657f0402cac8339147c951d92e0d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1199\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8b8afc65696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":244281,"size_decoded":69568,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"ca30657f0402cac8339147c951d92e0d","sha1":"91f3ab87c99148c4ef2d7af45207de86c660032a","sha256":"b307b937a93ef6602be9220479c091f96c45d8a07958ec34d204b3123218ce9a","sha512":"a84d1b34bc1f791beed7fad274bd8555a424aa837f1b947134874ff4b10332b8d26d847bfd6811d97d23c486faddd6d082e7c185ea1b38e98d533ca04ab00fcd","ssdeep":"3072:A8gYgcvYqhJrTodCWFW1Wx08fMOAUTqCpQio/rtxLMz9gZ1a:5OCWFW1WxVfMOA/uKbLMz9S1a","tlshash":"4134c69df186b47606a37131501f320af23a685ab45ac0d4f636d8e1bd789cea133f79","first_seen":"2026-08-14T21:10:06.988881Z","last_seen":"2026-08-18T13:54:03.644948Z","times_seen":253,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=6a146e6a4442d91c3266d294\u0026widgetId=1jpfsukbd\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:58.464Z","timestamp":1787054698464,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=6a146e6a4442d91c3266d294\u0026widgetId=1jpfsukbd\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://shieldex.ltd/\r\nOrigin: https://shieldex.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-zdxg\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-2-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Tue, 18 Aug 2026 12:04:58 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1198\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a2d0c8b96fcb5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3197,"size_decoded":1975,"mime_type":"application/json","magic":"JSON text data","md5":"710f5579b75fe2f6384725d673fa5451","sha1":"54ecc38ab5e73303a4985f6f574763e4f89affca","sha256":"8a8fbc12965dfdf33e2d774975697234ad3a15426c3f310d20570b73c14240ef","sha512":"496f587c25a4113c2338b8222b12be68b26eae6a49c49d8531bfe36466094c62951a71c28a68b0cb16130d5ffaa3d2fe2e80a787565fa40188078cdb2c9075ac","ssdeep":"","tlshash":"8061452a8d16dd7553c9d24360df7627b93dd023e384591de198ad3883ef9cd221274b","first_seen":"2026-08-18T11:45:48.390379Z","last_seen":"2026-08-18T12:05:44.032487Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":4,"dns":3,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:59.594Z","timestamp":1787054699594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-3ea2c7ce.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"52698c6dc96b5f2bd13e8f921334e398\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 313651\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8c07f0e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5504,"size_decoded":2976,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5496), with no line terminators","md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-18T14:35:51.330543Z","times_seen":42711,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/img/icon_bell1.98a9a1d5.4b8546c7.svg","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.555Z","timestamp":1787054697555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /img/icon_bell1.98a9a1d5.4b8546c7.svg HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/css/app.0609bd09.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 912\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\netag: \"6a14773f-390\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":912,"size_decoded":1184,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50a9c3052132d3ea4a54b4a744608e3e","sha1":"593019d37b3e2b007ddcabbe6f4219157a079c77","sha256":"bbbd891fffc346841388273d729cf9d57e9a3b73a173b82dee432827d810c04a","sha512":"d8c44849b7d96bfccb5da5f8f61c58b10245590bdfe9e005d658f31ead83e4342a515c50e4b60adf585ad9912c23485dff968ea106660d8bf93528ed604bfc84","ssdeep":"","tlshash":"ed11d07a5765292cf08083f0fb783c78f5a71b226205b4d095603b35913d02f987f8d9","first_seen":"2025-08-16T11:30:34.798475Z","last_seen":"2026-08-18T12:05:44.036118Z","times_seen":18,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/img/icon_place.201127c8.ca968028.svg","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.581Z","timestamp":1787054697581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /img/icon_place.201127c8.ca968028.svg HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 532\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\netag: \"6a14773f-214\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":532,"size_decoded":804,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c5f3e628912ed48018f271723c30e3c4","sha1":"2e496a2c6990457c9041dcdcf7bc6d7ec7aced0d","sha256":"d9d4e52a7b636c33c701075f870cb639a0790a1eec98dfb508f12b803dd72567","sha512":"515da9544358e33ab1578343dafad80077b8ec4ce3630f2c8864178185b8d286aa35d107895a86da7965f4c8e3efc11f2c0aa391454ba4f15dde74765d1eda71","ssdeep":"","tlshash":"78f02b6cdf464d35b2129368f6603824963b34a5538be484cd9130336266a1d697fab9","first_seen":"2025-08-16T11:30:34.823282Z","last_seen":"2026-08-18T12:05:44.037179Z","times_seen":18,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/img/img_board.0944cf42.bb380746.svg","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.590Z","timestamp":1787054697590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /img/img_board.0944cf42.bb380746.svg HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:57 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a14773f-14d8\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5336,"size_decoded":1621,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e2354c5d727224195b029154bdffd595","sha1":"a748d3fd051b5a0ab5397be4ca3ff5890976f1e6","sha256":"f85f71e2d371874e2e201010e1d4a31b25237ce6e01bddde81deb6cc64af1326","sha512":"80fd4c8baa6fd7239625892e2debc9c8569d122b7a4654629e1e7956b46e605c38b0944c7c2ae0dfd0d717a813b6bc3f462f933b0be2e87d9f1f4502ecee9138","ssdeep":"96:+65jvLkGvFI3+l88FB47MpJhKzAK1YIPOd4gHxDzEgI9F1CZy/ze8/zeq:+kjvLkGdI3+VBsMpJhKzAKqyOd4gHxf2","tlshash":"73b1ef6846596c0c62909378e76b7861d3aed2b0e3631344ad5d3237a81f48efcbb1dd","first_seen":"2025-08-27T11:07:37.108152Z","last_seen":"2026-08-18T12:05:44.038222Z","times_seen":18,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:58.350Z","timestamp":1787054698350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://shieldex.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:58 GMT\r\ncontent-type: application/javascript\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1199\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a2d0c8b8afc85696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":681,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-18T14:35:51.432006Z","times_seen":93779,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recharge-override.pages.dev/vendor.Z6835.js","fqdn":"recharge-override.pages.dev","domain":"recharge-override.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:55.762Z","timestamp":1787054695762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recharge-override.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 06:46:15 GMT","end":"Sun, 15 Nov 2026 07:45:00 GMT"},"fingerprint":{"sha1":"31:FD:F0:1A:FC:08:A4:E4:F5:76:F4:5C:C7:1B:4C:C7:F3:24:EC:57","sha256":"B2:09:71:70:0D:F8:13:51:A0:E9:29:C4:6A:34:F8:F8:77:FB:0A:5C:00:C4:F6:85:EE:94:96:1E:AD:75:A1:C0"}}},"request":{"raw":"GET /vendor.Z6835.js HTTP/1.1\r\nHost: recharge-override.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 18 Aug 2026 12:04:55 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CTpElDjGgdFcS7FFW%2B%2Fl0JSSLJF21bh4oIrF0B%2Fxzc%2BZ25FlAuPNGxc8OLUgem79XnqzOt02pA%2Bp4PMu5mHOlkzTcfzyFyH7JFzn1xkfKE4RsKjfcLONYxFxYkTUURKhMWd3YiATtZyXYuAv96U%3D\"}]}\r\netag: W/\"c792a8d3d1a1a37b202f921a9d896c2d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a2d0c8a8afb04e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2761,"size_decoded":1953,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2760)","md5":"2a28b0a80e5d6aac8c7c343fd2025ffe","sha1":"47d99a9a5a0a86d10cffea91b6218d299f98571d","sha256":"e237183641e7ab0959923ad0b1405fad86bdd15705b31b654adebd8dcd96eedb","sha512":"06b29342733075eb366e0883c26a13720dfd932b39ea8056ed0e16fc42bda76352082f64c622e3445608e4fd91b7db69385ea0ac63c0fcb39c92ebd93a3060fd","ssdeep":"","tlshash":"da51a7a94a54c27749d20feea0b3c3cc7e623449b507e86a5b0c0c1d5547fa74ea6ddc","first_seen":"2026-07-17T15:25:32.014748Z","last_seen":"2026-08-18T13:59:33.405518Z","times_seen":9,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":86,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fghgfhg235.icu/swx/customer/index/listContents/2","fqdn":"fghgfhg235.icu","domain":"fghgfhg235.icu","tld":"icu"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.593Z","timestamp":1787054697593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fghgfhg235.icu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 07:16:41 GMT","end":"Tue, 13 Oct 2026 07:16:40 GMT"},"fingerprint":{"sha1":"75:CD:39:34:66:E6:F8:CD:1F:00:51:EE:9D:1D:33:80:44:19:41:39","sha256":"B2:07:3E:DE:8C:A0:A6:47:BD:E5:42:67:56:B8:F1:D1:2D:90:47:17:2D:70:2E:22:77:25:65:AC:63:AD:36:15"}}},"request":{"raw":"OPTIONS /swx/customer/index/listContents/2 HTTP/1.1\r\nHost: fghgfhg235.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: virtually\r\nReferer: https://shieldex.ltd/\r\nOrigin: https://shieldex.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:58 GMT\r\ncontent-type: text/html\r\ncontent-length: 150\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":133,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T14:37:28.899243Z","times_seen":17956565,"resource_available":true,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":91,"connect":243,"send":0,"wait":237,"receive":0,"ssl":247},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/css/bubble-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:59.646Z","timestamp":1787054699646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/css/bubble-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"ce7c2f1d3256f84d0760bd9f400963fc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 313650\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8c0cf1d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23063,"size_decoded":5842,"mime_type":"text/css","magic":"ASCII text, with very long lines (23017)","md5":"ce7c2f1d3256f84d0760bd9f400963fc","sha1":"1375bb0f0223b374f9805cb441970de2cb004591","sha256":"ff92cac16c5ea67e7df480d38f6fd806385a85e69d13da5317ceb3acc469af62","sha512":"3f33f2cf811797404a3bdd12ab6af60b5356bdd577c82e8a97ad7d4cf81dcd1b24bf87c1256e175a6ae6f44d0d2f9c9daf8c29316bc60b370288f98e78e5716e","ssdeep":"384:Wgfco+ziLwH0Lg26/tFTiBB6TXngxYe4fbFU3xi7Ur3K:B+ziLwH0Lg261F2BBCXrsr3K","tlshash":"efa2dbf5e47b10d87363c02293d4f2685499f370ca8adea1f52b661c49e52763682efc","first_seen":"2025-04-29T09:54:46.086393Z","last_seen":"2026-08-18T14:35:51.499012Z","times_seen":39171,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/img/home_iphone2.da1b154c.cbc1fabe.svg","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.580Z","timestamp":1787054697580,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /img/home_iphone2.da1b154c.cbc1fabe.svg HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:57 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a14773f-39aef\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":236271,"size_decoded":167043,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"79255d3e99e0e8fb72c77b5882072c2c","sha1":"9cb4f086235617e053e4fc33fa97a9b5de3b19bc","sha256":"4778755bb24eaa376fd07abdcc03b2f8c1b7b57b268ad86f9b76c13991916c56","sha512":"e81cc79825e90fb46275d3c5e24314ae0ab5ad8c9057299e6c3d2dcd8bc944147de7b384d1e5996ef826bf083bfd45efa0080b5c12174030677310a5aa10dc41","ssdeep":"6144:KmThFysy+gcoypfjdg3EofJXXVU2og5FDz:KAXa+xBg3EgVx","tlshash":"3134e0aa35ed547a840d18f1ff4af76346a9a822ddce3eb4527e2c540e8caf15c41ac4","first_seen":"2025-08-16T11:30:34.803874Z","last_seen":"2026-08-18T12:05:44.043561Z","times_seen":18,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/favicon.ico","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:58.239Z","timestamp":1787054698239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:58 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 208830\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\netag: \"6a14773f-32fbe\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208830,"size_decoded":209106,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -31x-32, 32 bits/pixel","md5":"132a2b1a9cf2f93f43524b4c594d28d9","sha1":"b4c44b952b774bda4e36c91417b48119f907f055","sha256":"3b009d42e87bae19e7d15aa5e8e0117d950e2e3ce21fe6261894e65afdaea1be","sha512":"b2b6a35c96ef33daa8c3ba1cbcf4e5073f7ec3510705c865b99a3986662685ca1bc7868d1c022927f85ce37326f0e36acd86bbc0e4d79da66e53f1268d10a721","ssdeep":"96:Uf7aj585585JJ585585JJ55QIZ5xpu45EQulHCLK9ya34MeQFMmI7z5icQRYWW8B:ULQSZpIH5Zeiumb44RhAqT9Z94VN","tlshash":"8b1415a3a6454c45d87063fa8133cebe56276fe83c71861a40fabc3bfbb75820c55592","first_seen":"2025-10-20T01:02:47.243735Z","last_seen":"2026-08-18T12:05:44.044636Z","times_seen":6,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:58.470Z","timestamp":1787054698470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://shieldex.ltd/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 174\r\nOrigin: https://shieldex.ltd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":174,"data":"{\"p\":\"6a146e6a4442d91c3266d294\",\"w\":\"1jpfsukbd\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://shieldex.ltd/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"m9EIeG0jrEydjBNKiUYZm\"}"}},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-7l70\r\naccess-control-allow-origin: https://shieldex.ltd\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Tue, 18 Aug 2026 12:04:59 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a2d0c8ba7fd75696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1038,"size_decoded":1410,"mime_type":"application/json","magic":"JSON text data","md5":"986d120364551ea8b3563557dbcf9668","sha1":"ecb204bf39ae7f7d8f98451365ec5106da11cbb2","sha256":"4185c9a4564f4f68d8745bdc30ee6ae351ca7c68903e08701061247cfeb62d04","sha512":"8b38ee31ddc95ffe79d246602129115d90628efc8ffbc51eae9fac0a88f5312fbe2ef37d2ecac5616f767ca532a2c5fca049da674bce1110f295d552cabb09d9","ssdeep":"","tlshash":"9f117206af1a3e5563b3ab474ba43ca009cc97a0a59d10e5d2d58c8a3ee423214428a8","first_seen":"2026-08-18T12:05:44.046615Z","last_seen":"2026-08-18T12:05:44.046615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":939,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:59.631Z","timestamp":1787054699631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"39f38fff97bceb6dd38d255228384ab9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 313651\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8c0af1b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54016,"size_decoded":12896,"mime_type":"text/css","magic":"ASCII text, with very long lines (53968)","md5":"39f38fff97bceb6dd38d255228384ab9","sha1":"4f9d5ac34f834ec7f160fe555097691b45d47d39","sha256":"d9b57cfbaea5a38c3d279ba0a64a2fa0ccb499f94dfac8dc8845ac1c0f22f829","sha512":"cf1a36ed2530d962ee9a8013cfa3585dad4e85857e225c6a5670c92a574769d771b6a0f1ff2ae31c176ca078e7f747b704746996fe7dcbf826d906754e5545ed","ssdeep":"1536:fGUifm7kUdwddCriQiLc0Lg261F2BBCsEZf:J1V","tlshash":"cc3322b2f56710ccb363c22292d1f6bc202ae770d746ce96f427766c4ad12a63551fac","first_seen":"2026-01-16T00:46:03.995467Z","last_seen":"2026-08-18T13:42:34.069016Z","times_seen":34380,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:59.677Z","timestamp":1787054699677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"af9830eef563b4df395870a483ce549c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 313651\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8c0ff26783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36092,"size_decoded":8711,"mime_type":"text/css","magic":"ASCII text, with very long lines (36049)","md5":"af9830eef563b4df395870a483ce549c","sha1":"2c678a245c7b8984569447c9bbfe182583ef7e56","sha256":"5d919993a3fe6ec4c27ec6696b643900c02b95584a4a21a518eb8809edf12531","sha512":"16416617f0c79b40d196c1a7df699f1e01a130e3df75a4f437b4adfc04fa666ac7987d080bbfe759b849bd81860e6bab5b2af02356a8814f0dd1fa9a64b726d4","ssdeep":"384:uTTacuVZNgxYe4fbgL3w23U3xi7vxEbXR+ziLwH0Lg26/tFTiBB6TX3DYC8:yeyna+ziLwH0Lg261F2BBCX3DZ8","tlshash":"47f2bef1f4b700c8b363c122c3d5f67c6459b770ca86ce92f427666c49e16a63581abc","first_seen":"2025-05-21T12:18:34.219676Z","last_seen":"2026-08-18T14:35:51.455232Z","times_seen":50115,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/css/max-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:59.749Z","timestamp":1787054699749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/css/max-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"cbdd0e0be2613c6b640df2946da570be\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 313651\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8c16f38783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":114106,"size_decoded":24593,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cbdd0e0be2613c6b640df2946da570be","sha1":"df3804c44e57c518eb007548536902ca46a7e8ef","sha256":"4e7d47ffbb92bc9205c6113755b8199880c4aa332dfc3e34218e4e2a0b4bb130","sha512":"c10ddf8aa735ee142197fcfdcc16999215efee2dc0264fb11679a2244fa9ef9eacd770f39b39ea08be251c953d64492533132a4c8f70cd7b12c9763fa0442342","ssdeep":"1536:f/Uifm7kUdwddCri1iLc0Lg261F2BBC4GDJ7GjsVGdkauV3cGiH27PNWE98MGfU9:xVDJ7GjsVGbuVLmi0V0Z+tKaK","tlshash":"37b3a8b1b5a710cc73a3c23652d4faac1029e370c756cab9f427766d4ac21933262f9d","first_seen":"2026-08-14T21:10:06.914152Z","last_seen":"2026-08-18T13:54:03.672432Z","times_seen":194,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/img/home_iphone1.b28f3fe0.9c7bc8e9.svg","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.579Z","timestamp":1787054697579,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /img/home_iphone1.b28f3fe0.9c7bc8e9.svg HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:57 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a14773f-2b343\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":176963,"size_decoded":124384,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0859299633e1ad09cad29f156f3addd6","sha1":"00007009da33b73d0db40258655a2876f6c0c06e","sha256":"47ce3145ea5f0be15765fdf556132727f3ea8bb6ca7d7294e41b9c8653b846b7","sha512":"183dd120fb5034255bb89621414a3adedfe83f1c913f58c21a284a8a25a0fb1999ea288175f0f49316a3174b47a6d0e34ae3e7ea2dd137a9d1e0b73fca0ec6d9","ssdeep":"3072:YumPupwHLb6oXLUtAaQx3nzP2DOYyKwI/EHVF6Io8cURy4MPo5Da:gP4OLb6oX4Wa2zP2D0YE1Fh1fRyag","tlshash":"9d04e16670ee823e981e45f6fd4df73596e42c39ec8d2eb4907e3a621cdd8e508499c0","first_seen":"2025-08-16T11:30:34.822231Z","last_seen":"2026-08-18T12:05:44.056251Z","times_seen":18,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/img/icon_charity.ce0fa0ca.4c8ca485.svg","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.586Z","timestamp":1787054697586,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /img/icon_charity.ce0fa0ca.4c8ca485.svg HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:57 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a14773f-582\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1410,"size_decoded":911,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba6222511f090f1d7c15972bc334c51f","sha1":"6eef2b302ecb1007b251d8e851c8ee6b14028719","sha256":"2de037ab06f6ea2f66702525e5371db5b65d170ba9dbff53535c4e058487cede","sha512":"01e7873e36fa3128918b42fc5acd4343d3ac0e4d7033fb1344223e8e9eb1ff19016179b03d6792f363ee30e39a943663da4d6fe782e00bb0769993ccc7d4ca60","ssdeep":"","tlshash":"f221cd7997348cecb14653bce7243ae0e62768623a4091489ee03d33261142c9c7a6db","first_seen":"2025-08-27T11:07:37.129139Z","last_seen":"2026-08-18T12:05:44.057655Z","times_seen":12,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:59.598Z","timestamp":1787054699598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-7941cc06.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"0b7571445a752df762894d31268e7c12\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 313652\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8c07f12783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54211,"size_decoded":14821,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (54092)","md5":"0b7571445a752df762894d31268e7c12","sha1":"54b956960bd4376f15523f25f586fc5478a626fc","sha256":"2a768547370a8933454d03757e1981e616d448234e06e5b9dcf1608f35bec644","sha512":"12e90c52c5cce1f2767060de43c8627fb789a49f5a1b1a681048e732f08ae67194f4ee0c7a80f305778c67e31a756555c54d463bbdab66f19b03f8f050aa4e71","ssdeep":"768:Vlxfu8+HYUmI+rT1Wf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK4/:xfuro0f20UJWfO+Et7GZrCi20k","tlshash":"8133d9cdb2d6f4258763632130af3006f27a4964a81dd155f334d8f6b9ece49a226f2d","first_seen":"2026-07-08T23:24:03.874474Z","last_seen":"2026-08-18T13:54:03.645447Z","times_seen":3571,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:05:01.072Z","timestamp":1787054701072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 18 Aug 2026 12:05:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 39460\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230183-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 4794327\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UpHiLeNah2ng1Srya1OPD2JkKQxjEohmlPvwwuLR2Yiihy%2BXN%2FzviAD8pt%2FreKbUSPKrBVkHl%2FpkBzULnHowcXInBH4WYt5e6czjIit%2BaBDSJjitNA4%2Fmsa4RSSpV%2F0t1A0%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a2d0c8f1bdc856cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":302554,"size_decoded":40533,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32014)","md5":"7bb7aac0cac89a90304af1c72eb4f50d","sha1":"729f6f8ca5787d89743b0ed7eb27fd76406bf985","sha256":"f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b","sha512":"ed26bf873a3c5b2e48d8b3c955240a46d8f7d7f3c635ab138179b999dbadc77802285879cb1a833f703059762c346066090a9a740bfe881f56d6d95f2dca7f30","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSob5/ove:Q/drlyogMVc6FIKV+ZLBSob5l","tlshash":"59546c7a87606deeea94d02d86db374af58c3c0453ed1266b66482cb27f543a33487dc","first_seen":"2023-04-05T07:49:38Z","last_seen":"2026-08-18T14:35:51.428662Z","times_seen":51776,"resource_available":true,"data":null}},"time_used":6423,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":17,"receive":1,"ssl":6401},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/css/app.0609bd09.css","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:55.757Z","timestamp":1787054695757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /css/app.0609bd09.css HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a14773f-ad5a\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44378,"size_decoded":6638,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (43414), with CRLF line terminators","md5":"f6452a5c3a847452cdd67d263eafe804","sha1":"e8b298e9fef2e8cd315136fb5a19e9448820f327","sha256":"20b65af578b34abbe66e31d05c3d9053fb764a02fc2ac63d1fd4c880b049f849","sha512":"eb8ed2be08284df76af0a7ee605fcba70a8a3a7be8120a75967a065c144170daa90aa6186e9c2b8a37102c7dfe5beb72bfce5397cfc3232ef2ad5e4634912484","ssdeep":"768:715WtI4E7VQO2/r9UIRk2thS9oZmQv347tmd45E:714E7arqIW2thS9edmE","tlshash":"261377316714101ef377c993bec4f6c82909e273c716b6859193ad698dc73532af272a","first_seen":"2026-08-18T11:45:48.345276Z","last_seen":"2026-08-18T12:05:44.064104Z","times_seen":2,"resource_available":false,"data":null}},"time_used":985,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":985,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/img/sax_logo.7fa522ca.png","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.569Z","timestamp":1787054697569,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /img/sax_logo.7fa522ca.png HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a14773f-4979\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18809,"size_decoded":18388,"mime_type":"image/png","magic":"PNG image data, 408 x 408, 8-bit/color RGBA, non-interlaced","md5":"ba79659623c9ee2a71b2beaf5113217f","sha1":"c5b14b86c0a40be788e16e34d597d28f2d289f87","sha256":"da34f98847da2259398134d98e6fab9949a109ca660bd0f870efbb78b5d027a2","sha512":"a536f89bf9b2fb5a156a86deea4739fbd992bf3fdeb1ac9da08fb5aa6fe7fbc7587a1a1527bb154a3ac843ac5bd7442b0733a9643312b1a6d95ba341f7e1a461","ssdeep":"384:mIpptzr2u1CrsN8gqKhmvfBq8Ibmzq1yuoqGaTjSzjF8NtgD+/Qc3lpp3:mw2uorsN8FfBqlbWqB2zp8kD+Yc3l","tlshash":"e482c0b69f388d11ab649a9f067cd02fc57945e48fac99f8045171d04cfa1fbe43b184","first_seen":"2025-08-27T11:07:37.106408Z","last_seen":"2026-08-18T12:05:44.0661Z","times_seen":9,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-br.svg","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:59.695Z","timestamp":1787054699695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/assets/images/attention-grabbers/168-r-br.svg HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 22 May 2021 07:25:19 GMT\r\netag: W/\"f66e029841759471d2ec78b86760dca7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1512481\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8c11f2a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22356,"size_decoded":7331,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f66e029841759471d2ec78b86760dca7","sha1":"d9db67738984efee3dd63cb144759ac0521c7dda","sha256":"5108ef00c54e1f6ce859852834135447457cf19ee19aa7b0fb55b64b425cb526","sha512":"56ec42c707f42339dc21f9bbba6465e75fbfb92c42b4ea180c7f18120e522284b1fa792c63a214fd472ea47f93203af98ce67cc06ac317d945e619e3ba4e87eb","ssdeep":"384:yNDpPg81DH4/8j2CDFmKIk+pv4osVQ37MTNDsPa2vFqrXdCImKkkppDX0skQ3sdv:gDY/mxmKSpv4HQ3YcvEAImKJpDXGQ3sR","tlshash":"83a2243d46a0c3fd9ac5d2fdaf619068904da0ced1f7c74283e6869046e39d9f20d4ea","first_seen":"2023-04-11T22:59:01Z","last_seen":"2026-08-18T14:35:51.313734Z","times_seen":39817,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/css/chunk-vendors.10dd4e95.css","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:55.756Z","timestamp":1787054695756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /css/chunk-vendors.10dd4e95.css HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a14773f-338cd\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":211149,"size_decoded":35302,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2142ef8e12eea3ed38edbf3d659ab4fe","sha1":"5ba2ac62ce51f8fda665660c85c404b775be1e75","sha256":"fa6f1d96e529b170226115b7eb039ed98b1c74687495207ff4bf95a8a2ced3bc","sha512":"682d0221cba59c3184a328a96add399a2e9906596b86f7622d4f49c032ab207eac2a6399c2b936afa4d683ddc8f1c315cd9579c9ba997de1fe48d4a6ed0bb6a9","ssdeep":"1536:O28Y7SrW3YeWXA1u9w4HCe/l4JrgW9cMERw4B78O6iZkJgYu8e2B0kSDnvIcNeh5:TtKwT29eDLL6cf","tlshash":"d924a710db17247b622bd6ad74c0ba896f28c363d8725b3bfd95741cc6e64891223e1f","first_seen":"2023-10-18T01:18:29Z","last_seen":"2026-08-18T12:05:44.068674Z","times_seen":192,"resource_available":false,"data":null}},"time_used":990,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":990,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:59.597Z","timestamp":1787054699597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-4fe9d5dd.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"8249fafc9a9fbe0f75d4bef0aae2305a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 313652\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8c07f11783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1000,"size_decoded":1081,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1000), with no line terminators","md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-18T14:35:51.329709Z","times_seen":50305,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/js/chunk-vendors.c669cb70.js","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:55.754Z","timestamp":1787054695754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /js/chunk-vendors.c669cb70.js HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a14773f-1c262b\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1844779,"size_decoded":549099,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36815)","md5":"ce2c664cd5597b1d26a51b16cb43e087","sha1":"77b9f436987a597d6857fec414c9505f9f4d0315","sha256":"bce28dfc1095329401285e93420bd7d5c6002e396f658721d2262887aee01b99","sha512":"17e7edee06c3a805166bb5ef99de77315a8fc9782b2065861395150a618bdbe2ce9a138a1d1fef29af82cdba1d8d980700b73119b11237d8bac89934247cc26b","ssdeep":"12288:WzCmkFj2nmmeA2vWBPX2WZXAPYOusWocmazGWA4lvxNpsGe:W+mkFMlFXGYO4ocmazvA4Zx8","tlshash":"4825f989b2c2b47547e760b0402f110bf33b69a8a40ac0d8f675e8e96db894d516ff7d","first_seen":"2026-08-18T11:45:48.376636Z","last_seen":"2026-08-18T12:05:44.072133Z","times_seen":2,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/img/icon_vetor.e4607d5d.611d3749.svg","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.553Z","timestamp":1787054697553,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /img/icon_vetor.e4607d5d.611d3749.svg HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/css/app.0609bd09.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 516\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\netag: \"6a14773f-204\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":516,"size_decoded":788,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"28ff090ea047513c8d693c45a8d7b997","sha1":"45047a8c9383cb0bf177a305e29e8e73f1ec62c6","sha256":"1fbf51a6f9317074901acdb867855e356e4dadf4e9128824860f67b0f06a2dfb","sha512":"15a36db5908314611a0e91a218e9dd86a2603ecd63458f434386064952a141b7c2d860ca5c00714a269eb860e6a3c47004b3a5dfc82dad15898d5820af2e9f5d","ssdeep":"","tlshash":"8ef0c068c02ede144b95d234c78e29e0c06f936181984281773131a7b4948da74da2fd","first_seen":"2025-08-16T11:30:34.824242Z","last_seen":"2026-08-18T12:05:44.075089Z","times_seen":18,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/img/icon_arrow.dc4b9070.c42b469d.svg","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.574Z","timestamp":1787054697574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /img/icon_arrow.dc4b9070.c42b469d.svg HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 162\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\netag: \"6a14773f-a2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162,"size_decoded":433,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e83de18fae140215998e2b029f219c8f","sha1":"d85e50bd24c1157a3290c9036a35b9551aa5acd5","sha256":"e8b4851520f11a8dacf725b952a41bfbd0184ad7cfd7b5ab846b3bac06ccbe6f","sha512":"ea8dbfc87b78e5bdd189426d62973b0e5e619f9895ea623189c303b8991c2aaa97e2685795b634d5c5ef4c9d81c02f385d5ff4538b0fae5598e496eb23cf695c","ssdeep":"","tlshash":"f2c08cbc41895d28d1a4c224eb3834a98dafe0a2428d02d8cd803137a15a59b3c736bc","first_seen":"2025-08-16T11:30:34.813636Z","last_seen":"2026-08-18T12:05:44.076416Z","times_seen":20,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/img/icon_discord.08727466.2e6dfee9.svg","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.587Z","timestamp":1787054697587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /img/icon_discord.08727466.2e6dfee9.svg HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:57 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a14773f-557\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1367,"size_decoded":957,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ceafaca5f98b194944c26ddd87e9589","sha1":"f80f75a76662a3b8ad31b5f14d01924927b41254","sha256":"44d487023634778368e6aaba3905e9280eebeb88575cbe5ddc0f014beac095a1","sha512":"fdbc5e54cf74620c9303a0e5f8008c028caf657873e335333bc3b26b54e6993a045ddfacbb4eb90b4175714021e69a020021c1eb1806cdba4da0e0f86a3220c9","ssdeep":"","tlshash":"802101f8c98cb4c489568379cc381ca8fbbf74b7274d9295468136d1f70b2f14687480","first_seen":"2025-08-16T11:30:34.810598Z","last_seen":"2026-08-18T12:05:44.077395Z","times_seen":18,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:58.336Z","timestamp":1787054698336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://shieldex.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:58 GMT\r\ncontent-type: application/javascript\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1199\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a2d0c8b89fbf5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121,"size_decoded":657,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-18T14:35:51.442565Z","times_seen":93751,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shieldex.ltd/img/icon_quadrangle.b1234c66.5d7a1589.svg","fqdn":"shieldex.ltd","domain":"shieldex.ltd","tld":"ltd"},"ip":{"addr":"202.61.137.188","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:57.578Z","timestamp":1787054697578,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shieldex.ltd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 12:03:55 GMT","end":"Sun, 23 Aug 2026 12:03:54 GMT"},"fingerprint":{"sha1":"10:53:B8:41:6E:E9:BB:0A:57:4F:2B:BD:2E:B0:1A:24:98:00:8C:8A","sha256":"E1:AA:AD:1B:E2:AA:85:9C:7E:9D:4A:45:3A:58:9D:AA:05:5D:6C:CC:40:7C:19:7C:07:95:75:19:5E:02:EF:D1"}}},"request":{"raw":"GET /img/icon_quadrangle.b1234c66.5d7a1589.svg HTTP/1.1\r\nHost: shieldex.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 12:04:57 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 25 May 2026 16:22:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a14773f-72f\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1839,"size_decoded":1259,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad2a598cbc4867354819ced1de0a2543","sha1":"3d2699951a1e22b088b089599ca5765d5bf8d61f","sha256":"007baf9375973bbf3be8b3cdefec37ca211f02320153439d40acf9c8c1fb09e1","sha512":"f70861e4a5d9cfec1df56de6afded0c7b0b12133cbbf963b7566871dd0a883a17a2979335a43b56b063c3bf2797499e28dd5f706b8d1808307791b9d6642100a","ssdeep":"","tlshash":"703173f967d5f2c0248fd7f0ec2429a6f65e347b6be9868882489dc4d34706c948ce44","first_seen":"2025-08-16T11:30:34.802919Z","last_seen":"2026-08-18T12:05:44.080652Z","times_seen":18,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:58.337Z","timestamp":1787054698337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://shieldex.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1199\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8b89fc35696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82913,"size_decoded":32879,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-18T14:35:51.460222Z","times_seen":67249,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:04:58.349Z","timestamp":1787054698349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://shieldex.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://shieldex.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:04:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"1c30dacb5eab82fcc774efa5e9a7648e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1199\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8b8afc75696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2306,"size_decoded":1762,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"1c30dacb5eab82fcc774efa5e9a7648e","sha1":"17ad955811f541c8d6dfeb63ec76e72911f0e989","sha256":"f1e317e731329be9c1206376e79cab783fa14bef6a1089951206a42d38517baa","sha512":"cb5d5ab3cd2a329f503d05e6602c618a3afec17e752d0aeb35a92e5f78f9cb3eb1615ee18756677649ef23a3b1c1256af3d31d8306b9a9eec94a60a34bed290c","ssdeep":"","tlshash":"494183d937e8f9b6434318e1043f9016f6352976097be8c0531dd4f5bc78849815afb6","first_seen":"2026-08-14T21:10:07.022852Z","last_seen":"2026-08-18T13:54:03.694055Z","times_seen":253,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shieldex.ltd/","date":"2026-08-18T12:05:01.083Z","timestamp":1787054701083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://shieldex.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6a7f7fd8722/css/message-preview.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 12:05:01 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1200\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a2d0c8c9c87a5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 93868\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93868,"size_decoded":94439,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-08-18T14:35:51.307646Z","times_seen":36177,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}