{"report_id":"06d31145-ff56-4559-ba15-605c4ed287f1","version":6,"status":"done","tags":[],"date":"2026-01-18T09:02:58Z","url":{"schema":"http","addr":"6471.karponews.com/","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"172.67.174.254","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"title":"Duck.ai","dom":{"size":144,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"9f0707e89c0308c688301203ffe9df68","sha1":"a7c7af72c502018d73a79d9937510e46a73ee4fa","sha256":"4d6e8dabe6d28880c543dc7891fac7abd38c1fbdbecb13d527abdd426a7679c7","sha512":"208da1d87caf32081523a9981479ac4d368cd355b90ea7da55e94a20b5b0e70a11da8d29391081e250e3632855b6faa574bc5b123c7ef9862c3aa0f1fc338a13","ssdeep":"","tlshash":"8cc02b922ca6c0051c20b73004f1a38000137f491802a954c6c050dc8ad0f9dc8437f0","dom_hash":"domhash5e6292264e4e9b437727682de9d4390f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"6471.karponews.com/","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"172.67.174.254","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-22T09:02:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"6471.karponews.com","ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-11-03","domain_rank":0,"first_seen":"2026-01-18T09:03:02.382143Z","last_seen":"2026-01-18T09:03:02.382143Z","alert_count":180,"request_count":90,"received_data":7277937,"sent_data":57552,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc6f4b858633141f333a3c843465185a","sha1":"bae6f6bffcd674cc239c35bcda3bff01661d01e3","sha256":"d9827235747948f97d00af7afc51d6516b5e468f8fae608d13c133f10bd253f8","sha512":"37e374f96f749602fdd68cbaede5728ec039c450de89f2c3eadfe1e83bc712adb35ebdaeccf0b1431868867b9048fa651d9a11773e80ff872c6e6928bab9896b","ssdeep":"","tlshash":"17015e3cb840a8b77a0490c798ba3d3c631e67062128ab77d8acf92221c0d0f54c2bd8","size":840,"data":"","first_seen":"2026-01-18T09:03:09.003854Z","last_seen":"2026-01-18T09:03:09.003854Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2987f551a88b868172a7fba91fc3eed0","sha1":"14bbb1c52343ebe3f9fbba16417646071c43ad76","sha256":"b3fb22d56e813898488f730ba1d76c91e9d91bb846ebc693a098d8a89164b515","sha512":"3a84015462ed83dc3c3317621eddfacb84fca1eaf83afd5e7e858129ab2cf7c46faca00a4a0cd836636a3c420751ed033febab42787910d41e0c95b4093ddb00","ssdeep":"","tlshash":"4241bb88c0113ffd412e0518c97439e597dd62a262ab77b9b259cf2c13e9dd816384d3","size":1906,"data":"","first_seen":"2026-01-18T09:03:09.005766Z","last_seen":"2026-01-18T09:03:09.005766Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/d.1d9055b5508ac5647903.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdda7cc319c53dec6d3d08436e8293df","sha1":"c70a7ed0273c669c62105b86da2694ed717aa998","sha256":"98f7d5d766585a07a21fe635eb860ec3faf096ed5ef1ee9c562facdd65971522","sha512":"400bac6726868638ac44800b5532f44d3b17f61c4bda1c6cdac356b9c6839e19e58d0e01df3a379c9e328d2cf4b4bde28d0710448677d565b02507bf78a1e136","ssdeep":"6144:Vw/FxNXxvjyNii9ZhBdRaKvYMqFa2GWgrWDn:OPyNioqGWgrWDn","tlshash":"3ca45cd5b098b41a022b5194ec1f2505937bb694d44e0214bd7c8bfdba6ce8f3227f7a","size":451489,"data":"","first_seen":"2026-01-18T09:03:08.982224Z","last_seen":"2026-01-18T09:03:08.982224Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/g.68e5fc794c4b3ddbef0d.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c996a4c8eecfa664033685606f3601cf","sha1":"d081533017eb5a85a858f1142190e25c4a87be92","sha256":"e8b44448211542c86cf242d1d05274e4bc7d83e8b7bbf1913d5fd34a4b6bd1b2","sha512":"e968203a64ea5f6f96f1706298be363e7e1e8892733d70b281458f0d088d44a9becb753c9e2db6b65c0a1aa82fcc057054be4420656bfe32dafa71b0db599d31","ssdeep":"6144:91Eybc1IcRu1NStz2j/M5+YHqqeivUXHXqf6r+EGQsTFeiVwNseAi+CKvI1:l1NSzOMLHJvUXaIiVmseAi+CKvI1","tlshash":"e8e44ccab174b96a42ab20e4f41f2506a27ad35de44d01087c7c89ed75b8d0f723bb79","size":690348,"data":"","first_seen":"2026-01-18T09:03:08.915337Z","last_seen":"2026-01-18T09:03:08.915337Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/analytics.js?pageID=ddg","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"790ffa815ce1963a15c3d421f8169f37","sha1":"ed609cbd81020dbc4ce84fe5cffb07b4ad87d0b1","sha256":"aa936cb59e16ab1d7e03f908481a9a1aec0182ca33ad12136c6a281cabababf2","sha512":"07a05a512a9bd9479e390ff30f2e86c9938b5dc8c837c7ac5118d8c7ba58cb9dcb406c6b04a72eacae2317d37667bdc0e9c10fd75373dff7f1b4ee80ef2d3335","ssdeep":"96:K/SKKKk34TGtU7LgAu4L4CI7XC5JKCUjlrnCUjnH9o1IDXTN5kaX+9oBZsRBOxY:KKl54TGS7SYi7XktUjluUjH9RDXTFvZk","tlshash":"0bb1545d32e558b10167722a7b5be269323680833906e812bdac8f503f50d2e91e7fce","size":5207,"data":"","first_seen":"2025-09-30T09:00:40.052549Z","last_seen":"2026-02-09T06:36:25.732847Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/lib/l.32113981e35aa54fc221.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99b60b3c9347df9cbdf931eaf8766ba6","sha1":"51abff53da175defe379f3ad7644884b9b944696","sha256":"4a3de808aa27a2de5388f9b3e336f69f1bd181c3f0dab5774f895e6df6457905","sha512":"3dced4da60059762efe0031d35560ca8bd8eac554f64d6b9fdb2d1f5a535ba324c543dc922182729ec2f387826714217e9bb2d856c8a5915383223062bb7463a","ssdeep":"1536:VEPZ6+hzDE8i8oTpaB1jTmY6/hgeO4utLIDvcxxD8QF/yPUXI+hii2iev8RN7VkT:+Yd6K+k2hiSGQNay+e8IEWU","tlshash":"45d31ccd72c6f06243ab30b9107f540bf23a6959680d8854f169d8e5bc74a4ea27bf7c","size":136192,"data":"","first_seen":"2024-10-16T08:16:52.681055Z","last_seen":"2026-03-11T12:58:20.319289Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/locale/en_US.492695971b23bb283578ba9c25998d89.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95cc419f674df59e703c736a6bc1e171","sha1":"582817d29ccb6e4c28a5f747ebe763217714957f","sha256":"4b5d4d61fb0c41e8974b6aff49332aed6e23ce21485f967c835aa9642b3e790e","sha512":"78cb99920dba3e9d958a2883e337c90716d215bf587296914fc94e93710aae48449f4164c389fe6a105e7540698e4ba9b7cbebca073ec0fb2ea703a8f97960f2","ssdeep":"1536:nL0zgXNZvnW/O5WdmjFrp3CyhihvaUQ45QmrnvNM+wDp4mYzYh:LCgXNZvnZ8dmjFr/MJQ4rW+w14mQ2","tlshash":"8a0450d6d5842d270d82026dae31ff83edad70e73328427358fe8d68d3f5895122a59d","size":189414,"data":"","first_seen":"2026-01-18T09:03:08.999235Z","last_seen":"2026-01-18T09:03:08.999235Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3704b4a41d3d11d08dbd2b16be3af38","sha1":"287398352831d1e37cba4187a6fb29e438067723","sha256":"fa18f83da44942a92035779c431570f2d0343993c69bf7413dde32f7b358aabd","sha512":"c787d98eb73a1e99734d9035d3b2e5e3a92dce898f425d5c9d0f9b8899cf56bf4e5e8082272c41f2ff68e0662e51954b79675cc3db669488cbfce55075b7704e","ssdeep":"","tlshash":"8ed0c92d460c74ad94968779d268aa48969d0d3a2585a601cccf694669ba1a1132140b","size":207,"data":"","first_seen":"2025-11-01T09:03:02.791514Z","last_seen":"2026-03-09T11:29:24.659973Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpmv.5e3f5606b2b9df63a9af.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d2005f7aa64df543a761b36886c8df2","sha1":"59ed2b8487dfd05a084139ee667f815c433793fe","sha256":"486852aba4d5236fe0ae2364c12450fccc0e01c0be3d7e8a8032295a0da935fa","sha512":"0dddb7cb059c83468cf18c96fad9fc7db499d85dbb36f1fac1bff624624dd74d9b592606ad8343b25bf6fd1ef829a434edb9eee250f6792416a3c5150b224585","ssdeep":"12288:b/6JlRm4glZCC7TqxjOcfa9RzIfhk3uUy70VMw9SdZZohH4:b6Jlw4glZCC7TyjOcSRzIybuwCwY","tlshash":"59252be47338b5dda6b7805f81bb9805b33e7129302e4560aa5fdda870275c9f327e60","size":990404,"data":"","first_seen":"2026-01-18T09:03:08.964736Z","last_seen":"2026-01-18T09:03:08.964736Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.duckai-arrow-animation.08ed30a22b5e157c9b4c.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83d6eaa91b2853e218e32dccc14ab173","sha1":"b53a58902689979bcebbe7a40023bdabd535400b","sha256":"539f749989ecfebffdfbd2906763125f9a8e3841604c26936716098f65748e07","sha512":"aa0372d6fc6dbe9f8f955e6dc121a5e060671d08571b21372831b98f97e000fa6c10327567ce2d036ac53ffde923658364a6d5d7f46eb0813c4b7be99769715a","ssdeep":"48:itgDX87F2E6NqZdfuYYyvUYVpQ0jDlceb+xJmZ9fuYYhUYVBY0jD8sgypdFp3AKl:9DX87F8Ivlj1ck+Jnl/M2FflK/s","tlshash":"16810cc60a6147ecfb462584c74730d9dfe94958bfc841eaeebb1c185ba4a9d2302f43","size":4137,"data":"","first_seen":"2025-09-09T17:58:21.945128Z","last_seen":"2026-01-27T01:29:54.62413Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d4e514982ea84975e9f2e1e5956c69b","sha1":"b725e97b0578f54c25ba854e8eca51ddb9cebe7d","sha256":"31d71384b16ef401e3d26f4e4a6d8574a058f83ec5475b7af21e3dbc50b1786e","sha512":"d562ad00cdd0008d6fd67633cf87bc5f857ba484454ef1dda819677145f8aed223fddc144e9515cad07481673d4061907912cfad8d25019bb72ef0aa80ca3877","ssdeep":"96:YMQtp7a3ZMofG0IDB//MIjUKwRYUoGqM/X:YMQy3e0Ypk","tlshash":"dbc1323f50626770beb83de1a82fb51e85e7e402882c81c0c9672a594fce427f65b7d5","size":5684,"data":"","first_seen":"2026-01-18T09:03:09.009585Z","last_seen":"2026-01-18T09:03:09.009585Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"be0f90ac2e1e227de0b517dd6225a7d8","sha1":"ea280745cac03c62bc7d6fb8499bf7b03f833105","sha256":"83e8f544feab010c6d323dd75292d557e2146c1d65eb469896701335c11528af","sha512":"3b03c7a9a4bf7405fdeea32b9393ab990179d0b8515a5eef98750843a198681cab581330e27cb59ea9b152012c3b391a381d03a1c8164aa247107c44d2eba53d","ssdeep":"","tlshash":"3da0024104a664f713200e52a2a32f023d91926c41e0ba1c818d269130b0143ca669c4","size":62,"data":"","first_seen":"2023-12-05T21:02:18Z","last_seen":"2026-03-11T12:58:20.394351Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b987dce28acc2c6213635814be74c758","sha1":"c8617d632684d82be5b445199c99d0593f78874a","sha256":"58d15fafa744becb301d35f8fcab57a75019237fd9bac9ffc185fb2cdd686677","sha512":"45db6c602d9d0ffceb27d657ee98ab88e408ef7f102883f053a2fc4fac4763793fde203626d44034bff2710c3108ed8e887054fc56c799f09a78a7266227ed68","ssdeep":"","tlshash":"2e9004444c405cd00c74151007137f11f14514051cf31d15c47c010ddcf3107141d543","size":44,"data":"","first_seen":"2023-12-05T21:02:18Z","last_seen":"2026-03-11T12:58:20.396225Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7c3c7baf59bf8b19cae236ced12043e","sha1":"dc8bca38baa66930ed6ac06caa9a3b07b51c8f41","sha256":"713f2816af603fe7cd67fd90099fe8c81af46c8d9c8301a1c5aa5187834a42e2","sha512":"e354dc9992252958d112f2e0916023e3f9ff47bab881d778617928e65327a7bc4bc2ccbcec51bf657a933e266c32483033bf90976b78022525a48e1412e15ea8","ssdeep":"96:EgG9CAy7syYm5ce0zB9maAiBIQP0wfRoLNpgbygF:lGxyVYqAxlP0wfu8+gF","tlshash":"ea91dc542c89058113613aebfa2b60e5f76a0c2e77995cdcf01dad343b51a22f7d2b36","size":4361,"data":"","first_seen":"2026-01-18T09:03:09.014729Z","last_seen":"2026-01-18T09:03:09.014729Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"439dc4f2ece10ede179b3fd2fa400058","sha1":"8bea50d2ba37495a08eba897b40336bd8a550f37","sha256":"47a94edb5ea56305b98f3792900a4a64401c80026b344fe62b1bfbc9f8393d7d","sha512":"909a494f62d4394e67c8d44752c145fc95f348c35b524c49975083225ea695f9c0096cb8648138639aaa4ac97b97a335179582eb5b626c075a0442b31e1006c0","ssdeep":"","tlshash":"99c08c1000940e2b4437c016e0f87fc2be8ce423f7988c38d300af4f84da02222642d0","size":159,"data":"","first_seen":"2025-09-30T09:00:40.086368Z","last_seen":"2026-01-27T01:29:54.671922Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/util/u.3b830aa9c65ec933337e.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"196591ceaabe091267fae3a21e896d13","sha1":"dfa8b07c12cdc30b3c5af0467731381fea776c42","sha256":"4e381462c9d5d18d601ac4fef2aed864c7075522a4f3618726127af12d2ad498","sha512":"ba219b4012eca8b69bffa3405c185904048c98428e77aa6b5e06bc55107e7ddb367fa23b97f3773e7701ea1fc9f526ad7f757444c86398f2167b89d26c39ca13","ssdeep":"1536:QK/YO9bQHggh7ie1kP7V5QOEZjvP4gj47hFylPiS5+GYu05r2e:zY0x5SNZm7by1hdP0f","tlshash":"89d3199e9596ebad03a211d1784b514bf13e1605f15c882077eae8c43eafd0d632e7bc","size":136024,"data":"","first_seen":"2026-01-18T09:03:08.902699Z","last_seen":"2026-01-18T09:03:08.902699Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a0b1cb601d8fbc6743aa6af1219cbcb","sha1":"a1b3397c63c1ae92c237d60a4054b656b5979861","sha256":"4ba2db5a7957e3dcae79827abb61fafa81199b810f63712d00711ed800065971","sha512":"4db12d4dfe123c2375364eb85c2f5dce236fb662b23bfaaa7cfce210f1176e6bbcfe6bf6666858db5a52fe0eca3205df6aa1035a68c82a718f76f48868014a96","ssdeep":"","tlshash":"42e07d88fe68c7f326ce1571615b770c54d205d2981b5c010cdbccdc6930f9c22d157a","size":302,"data":"","first_seen":"2023-03-07T18:40:25Z","last_seen":"2026-03-11T12:58:20.402024Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.6508.0c99c59c5830a9bf97bd.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54f76d556117ae8d6a75d70cfe8fd515","sha1":"e398deb55d59c5f09536f0028a754859b9b34566","sha256":"ac1f2735779d41fd124c1876046a712c6bda5cb454e6af60ea6bfca50e3a0ddb","sha512":"ef198df5da30b5c605f74d28bd4c1206d37dccf9a9a960bba181b5c026274eba70df597184ba65eb6d41494d3828594b40b6ce339e1e31a39d9ae8dc5cbcfc87","ssdeep":"96:nZurSJd+NZ6vte3dKSH0s+DcMAdupFNovWVOfYUsSedtiGs+mDjWOsdYcX1aF5do:Zmcd+NZ6g3dXH0aMAdGFgnfYUkiGs+mO","tlshash":"97c1c746bbd7bdc6b76809c508bc543eb17bad25705c82f1f13449921d1489b2193fde","size":5664,"data":"","first_seen":"2025-12-25T21:53:49.046788Z","last_seen":"2026-02-07T03:35:35.528652Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/s.c944dd95f816265a132c.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7cd2c4e875703c9acc4d6e9f088ed5e","sha1":"52ccebffcddda652841f76d999e239794325eae2","sha256":"b5a4e623c908f036b699563dfe246374134b3780fa0d6fe4e1883c5ba94108c6","sha512":"0fc3cb90ba956ff7825391d7c0a6c2b6361a630a70e4f7742afae9aad02502a6ec75d3ed48aa498a422663ed1385dbe41d745ca216f0330fc379dc11161d8452","ssdeep":"768:xLLpSv765mus2MZ2azqa8GPLzguv5uK5C36Y80322IAfzRjpifeblquSetekAJuA:pLpm0mnJlLUuvXC36Y803L3b0CAJ1","tlshash":"6753f9d67014fa3a439b547cc05e5b05123af329a42ac03876bcd9e8b76dcc63267b76","size":61234,"data":"","first_seen":"2025-12-06T15:37:50.062394Z","last_seen":"2026-01-18T09:03:08.889604Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.2808.941aec5fd1f1977b2196.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2c861499718a5e233df1fe347b84c48","sha1":"35c64660993d4b4b8f9e2965d8c0af3962558745","sha256":"78255f7db17f69be4c36926466b8f46f8362dea9f3733cd5022d61bf774f1fa6","sha512":"a96c764887b7596dd037e16ced5673f935fc554fb850059baaa764feb96bd8a1278061676c2d9068a5834c3533c9b32ef0a3ffc3d68a4b186650f312aa8638a7","ssdeep":"192:1W7qbRb0+iYqORYzUIO0yuPxRTGXysj3c3TBzcbxMVJLMwZDBvoiFiRk8qvLWvuf:1WWtbuzUIOqPxR6X33c3ashrq+5v+4","tlshash":"bf722b945609f9b1c5e2815a647baa62e32d3739383ca04dbb35fdc638107c2a5a0f37","size":16589,"data":"","first_seen":"2025-12-25T21:53:48.989913Z","last_seen":"2026-02-07T03:35:35.522927Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"23d3ac80f6554fc8e206627ca0149263","sha1":"1d748d053bc123132a9bf6edde38e6d167c3423a","sha256":"b1252eab1dd878157f61236e88d9fa47fbc4f41fe341ba029026e4eeea1a47f2","sha512":"742501e75ae7c509afcdec8b738cb4d60e4f80227d34c53cd2762cbdf4901926ca5033e8b1bb5d5a09e3f9ad678d7fcb4e8277884f2623567427ec155fe30459","ssdeep":"","tlshash":"04f0052dd87d5e330fd839c1514b3e8bd20bf0050f959832968d5c34058c19d452fd81","size":517,"data":"","first_seen":"2025-09-30T09:00:40.089804Z","last_seen":"2026-01-18T09:03:09.020429Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.1619.36c7464fcbf3bdd269a2.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b153164f84dd90bc2639c4c2ecbbc7de","sha1":"67f120a7ec82521e4c0d04f9ddb9b652fd682121","sha256":"58833da4deb87829abfab8031b257281a6d8cdb795fb443381791aff8cffa930","sha512":"73c561fc73a9e68109586031fb9096f08c80f3167565333eaac98c71752d55826bc05a1995142042ed8caef2f22e43e2e82f20f36f077193adce5bea11df5f32","ssdeep":"6144:XSzUGTtqbiHDOTIBMW2InFneMxpgz3uFCKiSiEAMlpYz1:XPGTtsiHSTIBM7InFn/gz3IiSiEDb41","tlshash":"90b43bbb328078a566538a8790bf2307a07d6d5fb109c471f7b4d8a3ac669d71027f6c","size":499378,"data":"","first_seen":"2025-10-23T07:28:12.214963Z","last_seen":"2026-01-18T09:03:08.996079Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/p.f5b58579149e7488209f.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81061861e28008b28cf6b4bbc3265dd2","sha1":"5f167e01c02fb1bb2f15e1762dc294814d14aa6e","sha256":"6c7334db0f46b3c0b430ee760bb0ceedbfdae65522a5f1d30c9fcd447b5066e6","sha512":"21bc0abed844def04aa4909e2923c9fbc32f2d8ee4f9167353127aec35d7585d199fc335edbe41b4787903141a1c125c4014f9eb7f5d2482e5f921ad2301fce1","ssdeep":"","tlshash":"6ee0cd8e3b042a3c5ae2c15166df3546747766fa4911d41408646c906f34ecfb3767c7","size":297,"data":"","first_seen":"2023-03-07T01:27:21Z","last_seen":"2026-03-11T12:58:20.356004Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.duckai-logo-to-dropzone-animation.f5ee869000b3032da740.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a46bbfd3713e8303b6d32de3ffc2267","sha1":"e86922f76c5037db80151333a9eafd1f02e026ac","sha256":"5196769fd257df29deedfcf6f61e5e9d515dce450e7f17fd1c47b0bb91decb46","sha512":"d7954780894b643a4848e188a80b8d12f44fccbd274bbcb2ebaa13ba6ddd6a6e9d506b7384f03beac6e3b089082ac040044844a6b977e9d1f359f3ea95be027d","ssdeep":"768:j9z9qMPFGZvstXwdWpwcjy40kB+qJip95OFoOtB:Z9qMPFGZvstXwdWpwcjy40i+qJip95Od","tlshash":"7df289c5067002ecfb592590db4375d9dfc89866bfc505adefba1c288ba5aad2301f07","size":36828,"data":"","first_seen":"2025-09-09T17:58:21.951139Z","last_seen":"2026-01-27T01:29:54.608689Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ca328d78a04e144d9397cccedc301f5","sha1":"c7ebb3e298d7f68e5a037369cd18b4e6431b318a","sha256":"6cab604e270f60a1049da979044ecd7b713aef33f27d284fb9d01358e215ddf7","sha512":"779a2cdfc6d3200da4de6dabbe795f506c532d06257774da2d74ee4740dfd8d785015cd79d89fa3ecbb2ae964e2e586b50d47b8491321b6190f204a5a63e3985","ssdeep":"","tlshash":"e4b0120d82008474543a75ff9524d3b5057e8f403a052b01913ece112f068094626ac3","size":97,"data":"","first_seen":"2023-03-14T15:26:56Z","last_seen":"2026-02-27T18:50:11.472717Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.chat.27322c5a538163900954.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6319a73524ac9a1aa26649623e9ee31","sha1":"ad82b2f211f6bd2da5ef93a2c534c7628a139ae7","sha256":"5bae6a9b53c763e9328a1471b93c2846c1dbd15123013ed423213681bf8a65e1","sha512":"cba5207613bb255d11e636a560a0efa9d2b23a9b56bac2f3dfa57fb857765b572e4e06e1a1a54d0fc8be6735e0546b330f9241f01543cb733c4e31d24622de55","ssdeep":"6144:whN40c9ZBfjeGELxuwAW2EsmkENTsUiSxDDC:pVhoFNTsODe","tlshash":"a7846ac4b274baecaa9308da853f540d732e3a1c782c8560b57cee9c244a9c4f757f95","size":385086,"data":"","first_seen":"2026-01-18T09:03:08.917512Z","last_seen":"2026-01-18T09:03:08.917512Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.933.48d63d38dcb5bdb943e2.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6d73cf855fe505d6da97fe6078f2a75","sha1":"8f743d6bc27f2ac536666445e2faac50b0c33932","sha256":"9c95c56444a2dc4908939c935ca91bd799658fa4d84a66b8bfa4d2995805a3cc","sha512":"4a0526e2e579189bdc7f01294882651e469055face1f225483366e2a71af9221fa605f0b51c697baeef8076a8d702416ddea498cc73a91caca49eac624714c6c","ssdeep":"768:7Tp/U4imSD5ntFp0nk6FWCzaVVqudbLfhd+A+ua/sF7U86CLrp410qI4Rp6AdTcJ:gd5vanklDeuaglTlIRIuE","tlshash":"1b434ae0b354f59c11a3804feab2ae08d37d386d7069e960faaed6d5b1121c1f167f24","size":55911,"data":"","first_seen":"2026-01-18T09:03:08.966915Z","last_seen":"2026-01-18T09:03:08.966915Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/analytics.js?pageID=ddg","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"790ffa815ce1963a15c3d421f8169f37","sha1":"ed609cbd81020dbc4ce84fe5cffb07b4ad87d0b1","sha256":"aa936cb59e16ab1d7e03f908481a9a1aec0182ca33ad12136c6a281cabababf2","sha512":"07a05a512a9bd9479e390ff30f2e86c9938b5dc8c837c7ac5118d8c7ba58cb9dcb406c6b04a72eacae2317d37667bdc0e9c10fd75373dff7f1b4ee80ef2d3335","ssdeep":"96:K/SKKKk34TGtU7LgAu4L4CI7XC5JKCUjlrnCUjnH9o1IDXTN5kaX+9oBZsRBOxY:KKl54TGS7SYi7XktUjluUjH9RDXTFvZk","tlshash":"0bb1545d32e558b10167722a7b5be269323680833906e812bdac8f503f50d2e91e7fce","size":5207,"data":"","first_seen":"2025-09-30T09:00:40.052549Z","last_seen":"2026-02-09T06:36:25.732847Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0510c92e726f5678ff161f69b48765d7","sha1":"f527c14fe5f61d70f89916097dadea14a90b1067","sha256":"b784abc3341533fe3e782231f764cb4f6a783250b2ece584a927a3a73a668cda","sha512":"4b01421507472890dc5f1ecb88f76156cd9d3058f8bb5b319cdd9031bab9c009ce391b535ec5762d4ff36024f62d556eb2767f94a3783c6423f59bf2991b66b5","ssdeep":"","tlshash":"19c02b8b0eff209030133452163f5e20447bcf623088f500e809c8cc04f2534c2174cc","size":169,"data":"","first_seen":"2023-04-11T21:53:16Z","last_seen":"2026-03-11T12:58:20.387968Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/b.59c47b2dc2c927d92625.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f4e492d29663f8b213a5eb2d73d658b","sha1":"362da5887d58c5a0f41d0132fbd7206e8ba13fe2","sha256":"4b73f9d4f1a8ad7034a5efd01d212c8d0b1b70945469f37a859b8a6ba55fc77d","sha512":"87c70d81fd32fa83333f35585105d618ac58b1d0f4cff72b9d7fd605005ca1c776c84b6de69f60374ba1dbef7d549639de383c254e66982092cc19a8a42c9130","ssdeep":"768:iKP/X7SubSb9huZjQs+gQW0tcnt1LmiFV01jh:v/X7pbSb9GjQsNQW0tOql","tlshash":"f713e8ddb265b0714be772a2283f2217b23e946db08d50587159dad428bdd0fa323b7c","size":43517,"data":"","first_seen":"2026-01-18T09:03:08.913186Z","last_seen":"2026-01-18T09:03:08.913186Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.main.745a2e3777367811474c.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"309f52c49aa35c7b8a49a4dd9afea607","sha1":"bbe81fa70b52abbe87ba8e41d59d4e6ac8aa57fb","sha256":"354a8101e17bdf1a0ef5d53e8b537662cb97f91a37349b85e563e0e228665203","sha512":"54c7d79b66f653f59803655263e9d8558a4165cedf4a9a8f84eba5d25281ff574627984a02ffdc8a5d89dfb9de25c94b005cf8bf9f15c215d4ffc90b09ae26c5","ssdeep":"24576:vpnU9jt6kZsAr9khFOWsZ+y8uxOFCFy/usPFQPTZy27lkSDSyWN4jy:vpU9jt6kZsAr9khEWsg4xOFCFy/usPFt","tlshash":"7b457ec5b265b5ed186308ea803f641df32d7e047429c160f26ddde8648a5dbf223f6a","size":1227878,"data":"","first_seen":"2026-01-18T09:03:09.026904Z","last_seen":"2026-01-18T09:03:09.026904Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.3871.d73463799276f986761d.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49dc5228f4ec0af2894b55d720e043df","sha1":"7e5088a899a57dc7f102f1666cdb0a332f3fb1bd","sha256":"9ac1782050644c6ae6adf9908313917570e3fe7324e8c12de48bfdfe3ec233dc","sha512":"aaa41b3f04e108f76640a5ce9026dfe0a5d3748b30af82a0c33c193892371d7220ed4d148f4f65976d46f12d4cb4fe520dcc6fa34a477ab2a7a180235bb4011e","ssdeep":"3072:TVEoAj4NqAvPSIoPayIYzfq52K2GMey0mbEECmlDs9xMBhOlB6B:Twj4NqAvPSIoPayIYzfq52f7Zl4f04BE","tlshash":"665419597254343805c540a9806f0a4bf736292e246ac49cb76cf4efacbde8d31beb75","size":306260,"data":"","first_seen":"2025-11-22T08:50:28.101096Z","last_seen":"2026-01-27T01:29:54.645566Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/s.c944dd95f816265a132c.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/s.c944dd95f816265a132c.js HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:26 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zs6W22iWpgd84HPeUsk6qOYjtK2blgK2EiWai6Gg0EmIl58nDWXNCGuRMA3RvFA8RGCFS4G9EUJpcJvNdj12xezNSa3BKYeD92EOo0ZhoX6TPg%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:26 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea05399eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61234,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Unicode text, UTF-8 text, with very long lines (61230), with no line terminators","md5":"f7cd2c4e875703c9acc4d6e9f088ed5e","sha1":"52ccebffcddda652841f76d999e239794325eae2","sha256":"b5a4e623c908f036b699563dfe246374134b3780fa0d6fe4e1883c5ba94108c6","sha512":"0fc3cb90ba956ff7825391d7c0a6c2b6361a630a70e4f7742afae9aad02502a6ec75d3ed48aa498a422663ed1385dbe41d745ca216f0330fc379dc11161d8452","ssdeep":"768:xLLpSv765mus2MZ2azqa8GPLzguv5uK5C36Y80322IAfzRjpifeblquSetekAJuA:pLpm0mnJlLUuvXC36Y803L3b0CAJ1","tlshash":"6753f9d67014fa3a439b547cc05e5b05123af329a42ac03876bcd9e8b76dcc63267b76","first_seen":"2025-12-06T15:37:50.062394Z","last_seen":"2026-01-18T09:03:08.889604Z","times_seen":5,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/analytics","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://6471.karponews.com/duckduckgo/post3.html","date":"2026-01-18T09:02:34.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"POST /analytics HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 375\r\nOrigin: https://6471.karponews.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":375,"data":"{\"userID\":\"_ovb2wzdxl\",\"sessionID\":\"_trlnk1ozs\",\"eventType\":\"pageview\",\"pagePath\":\"/duckduckgo/post3.html\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"userLanguages\":\"en-US,en\",\"screenWidth\":1280,\"screenHeight\":1024,\"viewportWidth\":null,\"viewportHeight\":null,\"pageID\":\"ddg\",\"documentReferrer\":\"https://6471.karponews.com/\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JNhxVit89ttpC9Hilz2TMKPZ3iQUkkfsHl3R%2Ff05tRjpLuEogm7PPk0%2BC7kcj0tK9fDsLyDFgc8mENoD1A9NyvxhYBgslywsiBWPd3pWEGrsDw%3D%3D\"}]}\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1c-2gq8bMpcs7T90a2h9UYjOYPsm/E\"\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea07a9ccb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"34b35447983c97cbc98ac7e9a7da857d","sha1":"da0abc6cca5cb3b4fdd1ada1f546233983ec9bf1","sha256":"873d91294e05e6cc3cf8094db8f4533245a6bcdca3e4d5844835b9a534078ac2","sha512":"7168e3750242ca8e9a50bf409fd0589e3b80e83c1c8883e500106ccf7b77e22e44a6bc1c9612a7d163b4a4ac726279ba2acfa5fd1e94ee24a751450f8ed94d0b","ssdeep":"","tlshash":"84800000a00b2c88a38b820332002000020020e32a8a302280aa2aac82008ca0022300","first_seen":"2024-09-19T21:55:20.397127Z","last_seen":"2026-04-04T00:48:58.701923Z","times_seen":122,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/font/DuckSansProduct-Regular.ttf","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /font/DuckSansProduct-Regular.ttf HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: text/html\r\nlocation: https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ukTWMWRg21dzEYh1ozktBxLa%2B8YZmLFB%2BxSdPzU0IBvWNoOgI3bfAW%2FJsc59c4I%2FRRkjGL%2FefyDcHxl1Nn6hXBkIDVE%2FfGyK0mzV6Es9RW4aWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0879e2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18663,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.duckai-logo-to-dropzone-animation.4bf45884d7894d83bb81.css","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/wpm.duckai-logo-to-dropzone-animation.4bf45884d7894d83bb81.css HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:27 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZoJrxOUzOGMWBy%2FPu39NxJgVRr99XwErnacJ1I2qW5%2BzbYXOTcVYjGJQDYZQy5WIlVMQlx1dfA3T2P6KoZXOjlKDmoK8PxZ19eEpTadBtau9KA%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:27 GMT\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0bba7cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"ba03e624d01f833441ba8e81c9bf9398","sha1":"a4ad55ded3ce53a6cf7212d6832b15cdd259fb8d","sha256":"06046e8b1ef256d1f1a2a478049f7cd455ec5522af483daa42b7d4ad0cf0702a","sha512":"f88c03e7b4a17c32774a61e4b3622adc51c59c58d3a8c2c7b3d360e1251166feccb50bc28f2083971c963ccc1476435ce9419b6296f035fa34493d92e5b65725","ssdeep":"","tlshash":"fda0122919390990902d01226a6155565135404521161189c490cc1509498062da1542","first_seen":"2025-11-01T09:03:02.755464Z","last_seen":"2026-01-27T01:29:54.626057Z","times_seen":12,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nserver-timing: total;dur=40;desc=\"Backend Total [n]\", cfExtPri\r\nx-detected-query-lang: en\r\nx-duckduckgo-results: 1\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 18 Jan 2026 09:02:36 GMT\r\ncache-control: max-age=1\r\nx-duckduckgo-locale: en_US\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hOFnTGGYYWXiK7lh0ZTx%2FlsKnonoNw9PuK9m%2Bd9pUdMIV6dkFBl6heLJLs2V25AzYhlBWffqC%2BAKme%2FYTvzYbCu6LKPdvB0Ap4nNdb%2BIrJ1s6g%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0d7aacb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18669,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13450)","md5":"e202ec4318badacb77520fec405209e6","sha1":"82b69c2240ffd53fe254b500164c0877a398dc29","sha256":"84558db0dbea8d73773ad0ff563f636ea29f42166168df66d8fd4a2e639eaef1","sha512":"7a817dc8ae4be9c9ca356577cfc0e0326e7ddc26836d25f9c30f23ef32577bca1d7c74213459ea5facdec25045b9d89c000db77491012f361599ca8df332a820","ssdeep":"384:8ZjXJtVowYAlHqZTgoDqs0SWx87P6NYYcmDxxxK7agpE7kjPV0D1M2i3X3:6jXJtVowYAlHqZTgoDqs0SWx87P6NvsL","tlshash":"8982a52e48216ab55e293ce1e83eb95dc18fe103841c98d0f5ae5f180bddcdbaa176d1","first_seen":"2026-01-18T09:03:08.896589Z","last_seen":"2026-01-18T09:03:08.896589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 18 Jan 2026 09:02:36 GMT\r\ncache-control: max-age=1\r\nx-duckduckgo-locale: en_US\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dj3ep81Fgrdu7IcAR%2BGqu4udq2Vsr0bPQgVA3UtcrMljqpdMZVgxFMfnKBJIGTqQcsLm7UYIDUKTErFtEQCQKx3Gzk2bGO7L0zOZ2G1Rdf%2F63g%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0efac9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18663,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13444)","md5":"4a3bbcf9fd4585b199706c0b98294ffc","sha1":"ac04c23753b5304234220644cadc8f1e41a0476d","sha256":"eadc8108b58eb9d5fce207ea0ad47278450260b9a6f5eb2c323d2f000bafd62e","sha512":"f1951205b6ee40338c517a97677cfc00f8a020115f37a50be600a0f76464257d7827c8d90f66133805d1d8f9f200fa6e1da970b2bc218d1e5674aa34bf88eaf0","ssdeep":"384:8ZtXJtKwYAlHqZTgoDqs0SWx87LMYcmDxxxK7agpE7kjvV0D1M2i3X3:6tXJtKwYAlHqZTgoDqs0SWx87LzsvV06","tlshash":"f382b52e48216ab55f393ce1e83eb95dc1dfe102841c98d0f4ae5e1c0bdd89baa172d1","first_seen":"2026-01-18T09:03:08.899269Z","last_seen":"2026-01-18T09:03:08.899269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/improving.duckduckgo/t/l_d_wt?1801572\u0026iao=1\u0026nr=1\u0026rl=us-en\u0026dl=en\u0026ck=1\u0026atbi=false\u0026i=false\u0026q=DuckDuckGo%20AI%20Chat\u0026ct=NO\u0026kl=wt-wt\u0026kp=-1\u0026serp_return=0\u0026djsd=1\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"POST /improving.duckduckgo/t/l_d_wt?1801572\u0026iao=1\u0026nr=1\u0026rl=us-en\u0026dl=en\u0026ck=1\u0026atbi=false\u0026i=false\u0026q=DuckDuckGo%20AI%20Chat\u0026ct=NO\u0026kl=wt-wt\u0026kp=-1\u0026serp_return=0\u0026djsd=1\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nOrigin: https://6471.karponews.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: image/gif\r\nserver-timing: total;dur=1;desc=\"Backend Total [n]\", cfExtPri\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 18 Jan 2026 09:02:34 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OMH%2BaF%2BWiE7okenZ6oXCcR7OdTQvlWNPW17MrUptzV3ehXRzoEHetQI9sVqJzMAoluKDTq89ZAOHsvaiBMinpRvA3UJYmYYiEnqRC4M5FDVccg%3D%3D\"}]}\r\ncf-ray: 9bfcea110afab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/improving.duckduckgo/t/temp_settings_on_query?4105339\u0026backgroundColorSetting=ffffff\u0026snippetColorSetting=494949\u0026titleColor=1A0DAB\u0026visitedCheckmarkColorSetting=-1\u0026secondaryBackgroundColorSetting=ffffff\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"POST /improving.duckduckgo/t/temp_settings_on_query?4105339\u0026backgroundColorSetting=ffffff\u0026snippetColorSetting=494949\u0026titleColor=1A0DAB\u0026visitedCheckmarkColorSetting=-1\u0026secondaryBackgroundColorSetting=ffffff\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nOrigin: https://6471.karponews.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sun, 18 Jan 2026 09:02:34 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8fq1U3auzDh80h3IYFIZF%2FUGsFMFBuNOWT2FoyyO7wFse6fPAXJbeD2Au%2BXLMg2ZvDarDEcAODafBhlhlxojQhJEvqqw483L1cYsMZr8CgSFxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea112b04b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/util/u.3b830aa9c65ec933337e.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:32.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/util/u.3b830aa9c65ec933337e.js HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:25 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zEK5oXcZVKsdOQNbgcJkkG98HpevjVSHiAuCR0EmSbggqPDadm0cy8ORfhnBPX8hjlr3VNjFlMGEV5323YzAqnuSQsl%2FGWMuGl5g9G1%2Bm%2Flhzg%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:25 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfce9fff918b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":136024,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"196591ceaabe091267fae3a21e896d13","sha1":"dfa8b07c12cdc30b3c5af0467731381fea776c42","sha256":"4e381462c9d5d18d601ac4fef2aed864c7075522a4f3618726127af12d2ad498","sha512":"ba219b4012eca8b69bffa3405c185904048c98428e77aa6b5e06bc55107e7ddb367fa23b97f3773e7701ea1fc9f526ad7f757444c86398f2167b89d26c39ca13","ssdeep":"1536:QK/YO9bQHggh7ie1kP7V5QOEZjvP4gj47hFylPiS5+GYu05r2e:zY0x5SNZm7by1hdP0f","tlshash":"89d3199e9596ebad03a211d1784b514bf13e1605f15c882077eae8c43eafd0d632e7bc","first_seen":"2026-01-18T09:03:08.902699Z","last_seen":"2026-01-18T09:03:08.902699Z","times_seen":1,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/analytics","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"POST /analytics HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 376\r\nOrigin: https://6471.karponews.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":376,"data":"{\"userID\":\"_ovb2wzdxl\",\"sessionID\":\"_trlnk1ozs\",\"eventType\":\"pageview\",\"pagePath\":\"/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"userLanguages\":\"en-US,en\",\"screenWidth\":1280,\"screenHeight\":1024,\"viewportWidth\":1280,\"viewportHeight\":1024,\"pageID\":\"ddg\",\"documentReferrer\":\"\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IBXG5S1ZZcs9R2sIkOMDkpDkuUALojkLPSWPfOjz82xCOmWFhA3YUlbJ3EY33RzVQyL0nDNEuAeQfzc1G%2BQG7B3jwD5efUhafghJeSXAxxRFGQ%3D%3D\"}]}\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1c-2gq8bMpcs7T90a2h9UYjOYPsm/E\"\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea019941b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"34b35447983c97cbc98ac7e9a7da857d","sha1":"da0abc6cca5cb3b4fdd1ada1f546233983ec9bf1","sha256":"873d91294e05e6cc3cf8094db8f4533245a6bcdca3e4d5844835b9a534078ac2","sha512":"7168e3750242ca8e9a50bf409fd0589e3b80e83c1c8883e500106ccf7b77e22e44a6bc1c9612a7d163b4a4ac726279ba2acfa5fd1e94ee24a751450f8ed94d0b","ssdeep":"","tlshash":"84800000a00b2c88a38b820332002000020020e32a8a302280aa2aac82008ca0022300","first_seen":"2024-09-19T21:55:20.397127Z","last_seen":"2026-04-04T00:48:58.701923Z","times_seen":122,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nserver-timing: total;dur=45;desc=\"Backend Total [n]\", cfExtPri\r\nx-detected-query-lang: en\r\nx-duckduckgo-results: 1\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 18 Jan 2026 09:02:35 GMT\r\ncache-control: max-age=1\r\nx-duckduckgo-locale: en_US\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tJI6Fz4QHF8CRyZrxTLTsGcMsVyJmijFAoVIPSMQ2Al5fMbCXNdZ0UwZsCUnWhyUV5vDEzWlF4EcuZ1duZkYzuPzkw3E7EeZVLXOz0Msh78JyA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0789c2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18669,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13450)","md5":"3d43c6792fc6f38f2e71564d5c06e65f","sha1":"c880088d196c1047154eb7f1b52d3c6a74b0d405","sha256":"ac8c3d41623805b6a22f505a08048f25b3b0744a4c7b44c1d59ccc1a13f2df1f","sha512":"e54e94f80409dc8bcb274f61361be7cc7da91bd05deb320070dcd5231d2c4216a0cf1859b34f19ad4d38b24fb61b274934d67a8411002731bc91d8bcf3d78b75","ssdeep":"384:8ZoXJtVowYAlHqZTgoDqs0SWx87P6NYYcmDxxxK7agpE7kjRV0D1M2i3X3:6oXJtVowYAlHqZTgoDqs0SWx87P6Nvsp","tlshash":"7582b62e4821aa755f393de1e83eb95dc1dfe102841c98d0f4ae5e180bddcdbaa172d1","first_seen":"2026-01-18T09:03:08.904922Z","last_seen":"2026-01-18T09:03:08.904922Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/duckchat/v1/status","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/duckchat/v1/status HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nCache-Control: no-store, no-cache\r\nx-vqd-accept: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nx-vqd-hash-1: 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\r\ncache-control: no-cache, no-store\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 18 Jan 2026 09:02:34 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xDQZ8zJ1aWuwovMOx1qiv2PqoHUuI2JXP8nyHF%2FdH%2B3CmwVZg9BKXO54X6hWdOZUA2qW728NP8Yx1dJzkYEGIq9a%2BE%2FiIs3S699Md5RdKb7GFw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0c5a92b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9fd29c99246bb1e56133e745e58b35d5","sha1":"fdfc8050bde1049187428bcc90aa0104192812f9","sha256":"c496da93c758ce1c42f5ea241517969880e424a4f6c16e1866457e30f3d4d7d9","sha512":"310bd9f74abb60ee638425392dbd6f4fb0c88c573ce0f723d9c54bf9b00ffe248e88c086caebc43251778fcb919e6d970d4d67c997bc6c4b3a008cc5bc63d529","ssdeep":"","tlshash":"14900210500200519d971401009d03256fa14fa1a02f49d1498c0e7048040c2d02cc02","first_seen":"2026-01-18T09:03:08.907135Z","last_seen":"2026-01-27T01:29:54.627953Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/font/DuckSansDisplay-Bold.woff","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /font/DuckSansDisplay-Bold.woff HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: text/html\r\nlocation: https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bdCpfImOXq9Oe3pIojAIpeEOsvFARXFx0Je6KaxEOoGe7SA1QAGPFvS45fr95sHbyo1k87iuPqU%2FJiARfWRZZvGHqgklEApxYWoX3BCS5nFUcw%3D%3D\"}]}\r\ncf-ray: 9bfcea0e8abbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18669,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/improving.duckduckgo/t/perf?7151202\u0026redirects_count=0\u0026redirect_time_ms=0\u0026connect_time_ms=0\u0026dns_time_ms=0\u0026tls_handshake_time_ms=0\u0026ttfb_ms=154\u0026transfer_time_ms=0\u0026net_rtt_ms=116\u0026cohort=n\u0026protocol=h2\u0026transfer_size_bytes=6599\u0026encoded_size_bytes=5696\u0026decoded_size_bytes=18670\u0026dom_interactive_time_ms=588\u0026dom_content_loaded_time_ms=797\u0026dom_complete_time_ms=2937\u0026first_contentful_paint_ms=2458\u0026type=navigate\u0026page=serp\u0026d=d\u0026pre_va=_\u0026pre_atbva=_\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"POST /improving.duckduckgo/t/perf?7151202\u0026redirects_count=0\u0026redirect_time_ms=0\u0026connect_time_ms=0\u0026dns_time_ms=0\u0026tls_handshake_time_ms=0\u0026ttfb_ms=154\u0026transfer_time_ms=0\u0026net_rtt_ms=116\u0026cohort=n\u0026protocol=h2\u0026transfer_size_bytes=6599\u0026encoded_size_bytes=5696\u0026decoded_size_bytes=18670\u0026dom_interactive_time_ms=588\u0026dom_content_loaded_time_ms=797\u0026dom_complete_time_ms=2937\u0026first_contentful_paint_ms=2458\u0026type=navigate\u0026page=serp\u0026d=d\u0026pre_va=_\u0026pre_atbva=_\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nOrigin: https://6471.karponews.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sun, 18 Jan 2026 09:02:34 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J9I%2BwOcrTCeLWeIhxgWkNqeb%2BXBU54Xb6pDteDKYHCdPHxOWBEBQy5HcdfvGWKef9deIKCX50mvthc8ZPcKdDA5BF6sKgFD3J7GdGBCqLtS63w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea114b0db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/improving.duckduckgo/t/dc_recentChatsListUpdate?5713660\u0026duckai=1\u0026tier=free\u0026total=0","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"POST /improving.duckduckgo/t/dc_recentChatsListUpdate?5713660\u0026duckai=1\u0026tier=free\u0026total=0 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nOrigin: https://6471.karponews.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sun, 18 Jan 2026 09:02:34 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pcINaXT5UclKwMd54oTMwuIdypXiy13DNSCdtqVnDGDBC5tXqALYs%2B%2FCGgfW%2BlU1BJ4AzuVThaVAWjLvjA%2BEA9JDUoXpXC5b9I31ytqY46403Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea113b0cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.duckai-logo-to-dropzone-animation.f5ee869000b3032da740.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/wpm.duckai-logo-to-dropzone-animation.f5ee869000b3032da740.js HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:27 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iq6VJvnkCDvzPcurqtPv5x1HMM%2BUnIl4UBfDrPtaMKGxcYK67RbtfY%2BEd0z2mEisCmVQk80jmP0195GzkCJNekFJHpLqnfGW9d%2BChXI1Fir3vA%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:27 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0bba7db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36828,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (36828), with no line terminators","md5":"2a46bbfd3713e8303b6d32de3ffc2267","sha1":"e86922f76c5037db80151333a9eafd1f02e026ac","sha256":"5196769fd257df29deedfcf6f61e5e9d515dce450e7f17fd1c47b0bb91decb46","sha512":"d7954780894b643a4848e188a80b8d12f44fccbd274bbcb2ebaa13ba6ddd6a6e9d506b7384f03beac6e3b089082ac040044844a6b977e9d1f359f3ea95be027d","ssdeep":"768:j9z9qMPFGZvstXwdWpwcjy40kB+qJip95OFoOtB:Z9qMPFGZvstXwdWpwcjy40i+qJip95Od","tlshash":"7df289c5067002ecfb592590db4375d9dfc89866bfc505adefba1c288ba5aad2301f07","first_seen":"2025-09-09T17:58:21.951139Z","last_seen":"2026-01-27T01:29:54.608689Z","times_seen":17,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/favicon.ico","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/favicon.ico HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: image/x-icon\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 19 Jan 2026 09:02:29 GMT\r\ncache-control: max-age=86400\r\nx-duckduckgo-locale: en_US\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8DIDAQtCXRivtXXIzIwxIWFJutolQQy3gfKutELOElxvM5rrSH3ASL8FQFF2kLFVY7vc%2FB5gL4o4lwsCTdyZB922YDj6Q6GMsXxOzS0TLE3WeQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:29 GMT\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea047988b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2799,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"0a362a1a0cf4cc6bc56d65db8049dd6f","sha1":"ebfd1b824377525e1588719e935bf4b06349cddf","sha256":"d994f806b1e4225b50be5ab681b2cecf845cc216a19a432d878cea3cb815bafd","sha512":"9bc3349815f97884a92965f5936a7abc4ee937232f305148bd6d791de0d0199c51c5a314e6f4f5efbcac925a860c8da4da6e94472471f36db7725caf4b49ac8b","ssdeep":"","tlshash":"5c515e6372d0083ae64fa6f1d7f77fc1e5a4c4285ae36e5943a825742d07780a897382","first_seen":"2023-05-08T19:59:54Z","last_seen":"2026-04-04T01:38:41.296391Z","times_seen":1822,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/b.59c47b2dc2c927d92625.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:32.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/b.59c47b2dc2c927d92625.js HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:25 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kd%2FMUJgXruSIqa81WOw7hINtPXt4XRj3SimKlQA9MrBvNcUNPBp1vIFiB4plsGjBedmgJnP5%2BwcNK%2FNpkID0XdJQi6lxgyIQHBuCDvA2YBIo3Q%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:25 GMT\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfce9fff914b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43517,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (30897)","md5":"2f4e492d29663f8b213a5eb2d73d658b","sha1":"362da5887d58c5a0f41d0132fbd7206e8ba13fe2","sha256":"4b73f9d4f1a8ad7034a5efd01d212c8d0b1b70945469f37a859b8a6ba55fc77d","sha512":"87c70d81fd32fa83333f35585105d618ac58b1d0f4cff72b9d7fd605005ca1c776c84b6de69f60374ba1dbef7d549639de383c254e66982092cc19a8a42c9130","ssdeep":"768:iKP/X7SubSb9huZjQs+gQW0tcnt1LmiFV01jh:v/X7pbSb9GjQsNQW0tOql","tlshash":"f713e8ddb265b0714be772a2283f2217b23e946db08d50587159dad428bdd0fa323b7c","first_seen":"2026-01-18T09:03:08.913186Z","last_seen":"2026-01-18T09:03:08.913186Z","times_seen":1,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/g.68e5fc794c4b3ddbef0d.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:32.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/g.68e5fc794c4b3ddbef0d.js HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:25 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R7l8ZH4yK8tgfFbdpe0fQSl05aJQJ1pjWVWPSmpdBmHvaaqFe253FOjp5AdnCDb9C4PT7qhwwRiukvjio2lGh0BOv%2FS%2BOL5GOxcdV%2BBaAW8hVg%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:25 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea00091cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":690356,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Unicode text, UTF-8 text, with very long lines (65486), with no line terminators","md5":"c996a4c8eecfa664033685606f3601cf","sha1":"d081533017eb5a85a858f1142190e25c4a87be92","sha256":"e8b44448211542c86cf242d1d05274e4bc7d83e8b7bbf1913d5fd34a4b6bd1b2","sha512":"e968203a64ea5f6f96f1706298be363e7e1e8892733d70b281458f0d088d44a9becb753c9e2db6b65c0a1aa82fcc057054be4420656bfe32dafa71b0db599d31","ssdeep":"6144:91Eybc1IcRu1NStz2j/M5+YHqqeivUXHXqf6r+EGQsTFeiVwNseAi+CKvI1:l1NSzOMLHJvUXaIiVmseAi+CKvI1","tlshash":"e8e44ccab174b96a42ab20e4f41f2506a27ad35de44d01087c7c89ed75b8d0f723bb79","first_seen":"2026-01-18T09:03:08.915337Z","last_seen":"2026-01-18T09:03:08.915337Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.chat.27322c5a538163900954.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/wpm.chat.27322c5a538163900954.js HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:26 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ir%2FvE3aR5uHKHm2TDzrhumCjwTaWR42jMpMMM9mjHulCSb0X16E4l3XJdRw2zj7DyGaYrIKnGP2SlKLUJnK1rHDr7il6k%2BFyQZsDR48XZVwVDQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:26 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea05399db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":385086,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f6319a73524ac9a1aa26649623e9ee31","sha1":"ad82b2f211f6bd2da5ef93a2c534c7628a139ae7","sha256":"5bae6a9b53c763e9328a1471b93c2846c1dbd15123013ed423213681bf8a65e1","sha512":"cba5207613bb255d11e636a560a0efa9d2b23a9b56bac2f3dfa57fb857765b572e4e06e1a1a54d0fc8be6735e0546b330f9241f01543cb733c4e31d24622de55","ssdeep":"6144:whN40c9ZBfjeGELxuwAW2EsmkENTsUiSxDDC:pVhoFNTsODe","tlshash":"a7846ac4b274baecaa9308da853f540d732e3a1c782c8560b57cee9c244a9c4f757f95","first_seen":"2026-01-18T09:03:08.917512Z","last_seen":"2026-01-18T09:03:08.917512Z","times_seen":1,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nserver-timing: total;dur=51;desc=\"Backend Total [n]\", cfExtPri\r\nx-detected-query-lang: en\r\nx-duckduckgo-results: 1\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 18 Jan 2026 09:02:35 GMT\r\ncache-control: max-age=1\r\nx-duckduckgo-locale: en_US\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fImnl%2FqAVxUaG18Zu79B4yyah75OKZETGb3UK19A872YNRlJI04%2BrdzlhBOt9WslOejjGfIcO%2FESbgPv8a8jC0nX0MnVQxi%2Bx4hxDqM1Txmw1Q%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0789c4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18670,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13451)","md5":"e8802b98fa6d59d72a5fdc59999c4265","sha1":"2edd9c0016d7ff97b642444822d7fe4ae476d702","sha256":"75bb104fe4f41a933a35cb2b5a4141901eea33bba49a8c5e7a21f5f1dc284e11","sha512":"6e6e092fdc836cba2df1fe98b2692d13423855130a11a71f676143e392853a0346ac1f6034f2606f29d7c218af70acc412fb0ca0e23296538ed24c68b5b05931","ssdeep":"384:8ZyXJtVowYAlHqZTgoDqs0SWx87P6Ng2YcmDxxxK7agpE7kjjV0D1M2i3X3:6yXJtVowYAlHqZTgoDqs0SWx87P6NgJG","tlshash":"2a82b62e48216ab55f393ce1e83eb95dc1dfe102841c98d0f4ae5e180bdccdbaa176d1","first_seen":"2026-01-18T09:03:08.919678Z","last_seen":"2026-01-18T09:03:08.919678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nserver-timing: total;dur=54;desc=\"Backend Total [n]\", cfExtPri\r\nx-detected-query-lang: en\r\nx-duckduckgo-results: 1\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 18 Jan 2026 09:02:36 GMT\r\ncache-control: max-age=1\r\nx-duckduckgo-locale: en_US\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5ph%2FHOy7G65fDqvxqMRHz9I%2FcZEmT4eblClJzO2mirmgW5Q85Euds%2B%2B1L9XZ3gU9nDlLxUzJO0ZNyGIU59bXXsKiBl7jCPHy9%2Bcg9E4helB0w%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0d7aadb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18669,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13450)","md5":"067db0490fbfdd86293e0cf8439fa19e","sha1":"319783b3f2e2ddfdb5fa2a08bf5d6972c7e637c3","sha256":"aa0ea5c01ad1a35d589fcdd17b8e805e25bd310b21656d8af217e02b680dfc8a","sha512":"be71f5b93f713285789c90ad8ab154cad96f6f68830ddb39d993985372c2b2798c1c99209f4f9db5b79a45608947df3efa2f9e6c353b8aef4a7beb845934fee9","ssdeep":"384:8ZaXJtVxwYAlHqZTgoDqs0SWx87P6NSYcmDxxxK7agpE7kjBV0D1M2i3X3:6aXJtVxwYAlHqZTgoDqs0SWx87P6NFsZ","tlshash":"d782b62e4821aab55f293de1e83eb95dc18fe103841d98d0f4ae5e180bdccdba6172d1","first_seen":"2026-01-18T09:03:08.921976Z","last_seen":"2026-01-18T09:03:08.921976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-18T09:02:32.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 09:02:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nserver-timing: total;dur=38;desc=\"Backend Total [n]\"\r\nx-detected-query-lang: en\r\nx-duckduckgo-results: 1\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 18 Jan 2026 09:02:33 GMT\r\ncache-control: max-age=1\r\nx-duckduckgo-locale: en_US\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e1%2FTk2HmltlwhbTREma7NiR6cU%2B%2FaIfFse7PNJbMdgbWswI%2F3fyvk2h40F6Dq1zACbeFUWe5Ftwwr%2B6VP3RlFkZ3OYmWNFLYT3F8GzDlZu1jmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9bfce9fdaf5adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18670,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13451)","md5":"8f9ebb9e6c0e04dd16d0f6151f92f320","sha1":"0d8e2c104eca664e54b77c26cfab0968c9e8a603","sha256":"2c99282334377d457bf33f2dbcea3a95771759c5a79c28ef1b7e0f4804280c97","sha512":"0f6654d759c2678abe02caf919f8f17f8306bb3a3e04b5c4a2ead518fc83043e7365d62ea71809dbe76bde054050ff4a4d0121b8e539c6281f60bf5372956765","ssdeep":"384:8Z9XJtVewYAlHqZTgoDqs0SWx87P6NLYcmDxxxK7agpE7kjL9kP9klV0D1M2i3X3:69XJtVewYAlHqZTgoDqs0SWx87P6NKsP","tlshash":"1582b52e4821aa755f393ce1e83eb95dc18ff102841c98d0f4ae5e180bd9cdbaa172d1","first_seen":"2026-01-18T09:03:08.924605Z","last_seen":"2026-01-18T09:03:08.924605Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/font/DuckSansProduct-Regular.woff2","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /font/DuckSansProduct-Regular.woff2 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: text/html\r\nlocation: https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L7jSz9VDzdphUb0pwcjfV7kX%2FZ5RxqxbbclWUn6oBmilOlkpLhGP82cQ21UruPJvG4Vj2CDRQgnHQQwSwoBc4zmwJzIGEmdmQQzs4VzHH5looQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea01a942b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18669,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.6508.0c99c59c5830a9bf97bd.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/wpm.6508.0c99c59c5830a9bf97bd.js HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:26 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=igV3mCQMfh0RF0okJHWiuSUp1RNNa5UKm9gBhrYHeQw9vAiqmjAZS7J0jnHtckeARyZjj26SM1Tty4cJUutGcNHQrXBo3elT27CWG9rYVkNaFA%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:26 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea05299bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5664,"size_decoded":0,"mime_type":"application/x-javascript","magic":"data","md5":"54f76d556117ae8d6a75d70cfe8fd515","sha1":"e398deb55d59c5f09536f0028a754859b9b34566","sha256":"ac1f2735779d41fd124c1876046a712c6bda5cb454e6af60ea6bfca50e3a0ddb","sha512":"ef198df5da30b5c605f74d28bd4c1206d37dccf9a9a960bba181b5c026274eba70df597184ba65eb6d41494d3828594b40b6ce339e1e31a39d9ae8dc5cbcfc87","ssdeep":"96:nZurSJd+NZ6vte3dKSH0s+DcMAdupFNovWVOfYUsSedtiGs+mDjWOsdYcX1aF5do:Zmcd+NZ6g3dXH0aMAdGFgnfYUkiGs+mO","tlshash":"97c1c746bbd7bdc6b76809c508bc543eb17bad25705c82f1f13449921d1489b2193fde","first_seen":"2025-12-25T21:53:49.046788Z","last_seen":"2026-02-07T03:35:35.528652Z","times_seen":9,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/improving.duckduckgo/t/dc_onboarding_impression?1601625\u0026duckai=1\u0026tier=free","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"POST /improving.duckduckgo/t/dc_onboarding_impression?1601625\u0026duckai=1\u0026tier=free HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nOrigin: https://6471.karponews.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sun, 18 Jan 2026 09:02:34 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QNWNSP5Vep9X%2FTNFMgGmQb3PLe8cK9DIrG84ZjoemLXgQ2C7GQ7HqcYWpOmfsE4oDJbKs9s0C7AeCmtHQbH3ptD9uZpGSUW%2Bfq3dSXh9t089Nw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea113b0ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/lib/l.32113981e35aa54fc221.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:32.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/lib/l.32113981e35aa54fc221.js HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:25 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=63bFbYpM0Df18ugMr4kmEtTReLCVdWpodbfon57xjCcv4mIIngp%2FB5a2jzXTTI7Hag%2BMgbh2z5f4BJt99NLLTRhW4sDVIcSrxHAh%2Bs9LzpX8Fw%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:25 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfce9fff916b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":136192,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49027)","md5":"99b60b3c9347df9cbdf931eaf8766ba6","sha1":"51abff53da175defe379f3ad7644884b9b944696","sha256":"4a3de808aa27a2de5388f9b3e336f69f1bd181c3f0dab5774f895e6df6457905","sha512":"3dced4da60059762efe0031d35560ca8bd8eac554f64d6b9fdb2d1f5a535ba324c543dc922182729ec2f387826714217e9bb2d856c8a5915383223062bb7463a","ssdeep":"1536:VEPZ6+hzDE8i8oTpaB1jTmY6/hgeO4utLIDvcxxD8QF/yPUXI+hii2iev8RN7VkT:+Yd6K+k2hiSGQNay+e8IEWU","tlshash":"45d31ccd72c6f06243ab30b9107f540bf23a6959680d8854f169d8e5bc74a4ea27bf7c","first_seen":"2024-10-16T08:16:52.681055Z","last_seen":"2026-03-11T12:58:20.319289Z","times_seen":81,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/post3.html","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/post3.html HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 18 Jan 2026 09:02:32 GMT\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=96fRf1gKtp%2Bh4t46vk6SXhk3%2FmGg4ZvfBPocakHi52ppIJ3GV0MCV9AqUcPrcNsBlZOLyEuQjfeYZU12vHeX6ANLX6jV8mJrpVAD8haQ43QGyw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea03b96bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"98dd8a26df3af01cb305a3c15b0f8a0d","sha1":"08a71367a5e9dc8dcf6ca551790e5ddbaa1b7b1e","sha256":"42b314cd63bbd69f17f1cb9db3e91d75c8eda47e2b2f9f625dcb8957d80a1f51","sha512":"1280980fd6e1c9fe1a147081f39ca59428957d44af933ec394bad369bfd387fb73f19338110ea7b58318f50ebd1b777e8132886903dec4755440310c3162ef62","ssdeep":"","tlshash":"20d0a9df1c0a881410a068a168b5f10c506ae608c055cca892e490e286e4f8acc43298","first_seen":"2025-09-30T09:00:40.048898Z","last_seen":"2026-01-18T09:03:08.932928Z","times_seen":14,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/assets/logo_header.v109.svg","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/assets/logo_header.v109.svg HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:26 GMT\r\ncache-control: public, max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ClVE77IAGmBDLSeCbc3bLbOLTjrBTyiIPGgeXHfWcshI6Lml8Yl0tihnTSa%2Fj1HA0hiBjlNgPD%2FMB4maQaN0Zau%2FBVjIyi5nDN9edFw40klTQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:26 GMT\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea03c972b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4468,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a7029059e2e6eedc2f1b565c75f0185","sha1":"592f069e281afee8699ddb4ab1e8be7d0a454f3d","sha256":"a552810b288ab1511f5ad547957de90d44b4245c364b60a2a90a437532e16f21","sha512":"52d51358613eecc1a166ff55bc0fa69a38088ec48ed98d8aa56c1791211ad803d107a54be8ff4b4626840376d713ca75abae3a181da5a7d00f0d03d17afffee0","ssdeep":"96:Hnm6qbDNGqN/Xb1Bt1Xo5YtePRqUieKn1GGPTiopWncgMK1:HfKVN1BnXo5YteAUG1NTnI+o","tlshash":"bd9196e417f492dc988a8b3cef3d49d0260f64fe391081c5d5ae8f996992e88df498c0","first_seen":"2023-12-05T21:02:19Z","last_seen":"2026-03-11T12:58:20.370231Z","times_seen":68,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.duckduckgo-help-ia.595b6e12ad35193c6416.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/wpm.duckduckgo-help-ia.595b6e12ad35193c6416.js HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:26 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5S8w8%2BtCNyZ4zpyEsPwRpGORe9C%2BEkXVwdGglQvlolMa%2BspeTy7axTtbVVy0RpryFHzx7GZAGpN7HGH2fmuDw7FRBBvlRe2OQAxn%2BoU%2BrpnN1Q%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:26 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea03f97fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1898,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1897), with no line terminators","md5":"dfcbd71d370a027d2988874d4d4ca8cf","sha1":"99f4d370376cc7b9c6df0761c2816b5f49f7f222","sha256":"462d77b05813e80c30783028907caa7f0333bcf30ab4ae9730393a73bf042f66","sha512":"2c881dd5b95cdbb4dcc0dd8775212d440817ad8dbe7a89df185762d2fd7739961317a4dbf52671eeb3e0d98c5fea325454366b4433817bfa8029c87d809339a5","ssdeep":"","tlshash":"9b410f1b941695d81f5379c4c6f68118821db3d9e71ce2d44da9cc9192e20ce5e33fa5","first_seen":"2025-11-22T08:50:28.143568Z","last_seen":"2026-01-18T09:03:08.938314Z","times_seen":11,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/assets/icons/meta/DDG-iOS-icon_152x152.png?v=2","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/assets/icons/meta/DDG-iOS-icon_152x152.png?v=2 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:33 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nlast-modified: Sun, 18 Jan 2026 09:02:33 GMT\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2FuJyf91nOsoymUH2%2Bp7fEEhR32RqfEzGiZ6HJ4%2BP%2FoEklF5s13DAyaJ1QSgJzs3bshmSFPHUV%2BPuRn4OSWfoIhj%2FH6YOIZ0nrWDtQVHjqgEMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea047987b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3576,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 152 x 152, 8-bit colormap, non-interlaced","md5":"25c443fd913d8172af12119396c494e3","sha1":"543937df02caa63dc86aa31ee5743052d803268a","sha256":"f6e52a35e8854ebf14c9b8442302f6f7d5d0063f0215b7210edf4676d7fd7369","sha512":"910dc04b6422aae52a4d5294fbf9ae87e65bf678ba36c2ddfcab60cc21f0e37f25a6a01e78a2c0edf9356ec1035166c4f5ec47a5e2ed5a7263a917ece1b6b1d9","ssdeep":"","tlshash":"04714dfd8390593dc0b7a8ff985e8645d49d612089b4fdf1b741bafd84ae5db006150c","first_seen":"2023-05-08T19:59:54Z","last_seen":"2026-04-04T01:38:41.337856Z","times_seen":1836,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/analytics.js?pageID=ddg","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/post3.html","date":"2026-01-18T09:02:34.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /analytics.js?pageID=ddg HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 24 Sep 2025 09:32:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nage: 8\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"68d3ba9e-1457\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WuOgWdQdMs%2F2l1y7Qcq%2FZY1XXzCfa4Vt%2FDDikZm3HX7KimVos0L4af9nLvvHAg%2Ffq%2F8qD3y9PJiJx%2FI8XJW%2BKkTdbIQKs4XaqbQG6YoS%2BFANrw%3D%3D\"}]}\r\ncf-ray: 9bfcea0769bfb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5207,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"790ffa815ce1963a15c3d421f8169f37","sha1":"ed609cbd81020dbc4ce84fe5cffb07b4ad87d0b1","sha256":"aa936cb59e16ab1d7e03f908481a9a1aec0182ca33ad12136c6a281cabababf2","sha512":"07a05a512a9bd9479e390ff30f2e86c9938b5dc8c837c7ac5118d8c7ba58cb9dcb406c6b04a72eacae2317d37667bdc0e9c10fd75373dff7f1b4ee80ef2d3335","ssdeep":"96:K/SKKKk34TGtU7LgAu4L4CI7XC5JKCUjlrnCUjnH9o1IDXTN5kaX+9oBZsRBOxY:KKl54TGS7SYi7XktUjluUjH9RDXTFvZk","tlshash":"0bb1545d32e558b10167722a7b5be269323680833906e812bdac8f503f50d2e91e7fce","first_seen":"2025-09-30T09:00:40.052549Z","last_seen":"2026-02-09T06:36:25.732847Z","times_seen":43,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/font/ProximaNova-Sbold-webfont.woff2","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/font/ProximaNova-Sbold-webfont.woff2 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: font/woff2\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:34 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 18 Jan 2026 09:02:34 GMT\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CRGnl%2BgYH6BK7kWZ1Pk%2BIWrwui2mVBAQazpLH2UQJq%2FvrNIpLYSfJi2DdiVfX4krZgOEr6GkMlHpqRFjI2OKAFM20x1qCTDj6uY4u32uy%2BBEkw%3D%3D\"}]}\r\ncf-ray: 9bfcea0c1a8bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18156, version 1.0","md5":"8a71415883fd28980f0c81d0cc6dd3b1","sha1":"45446bf1f1c2d17e4a28b00ce81f9963f43dda9a","sha256":"42c30588d9adaeee4cea28af0afda91efc7484528c6eea2ce7d591d927fd1a69","sha512":"70500c02c9955944522686bc4935d6f737802cd27f5351b0efac16b7ca4e704a4ac54277974fad83c93240d74c9de5bc0a49710e20ef2297a2b6f9e64933a78a","ssdeep":"384:lWsLI4pNAV7jA2yrgbB5hOFqMym+B7GPDfnnXLK8oGZNH:fpNA2hc1J7G7XW8o2H","tlshash":"8682d085c687a1274697723cae6b8dc2431c8a330c9ec635fb31305f9e751b09f1ca5a","first_seen":"2023-04-05T23:24:02Z","last_seen":"2026-02-06T22:44:10.243221Z","times_seen":373,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/react-assets/c8817097385bdf86ada0.svg","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/react-assets/c8817097385bdf86ada0.svg HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\ncache-control: s-maxage=600\r\ncf-cache-status: BYPASS\r\nvary: Accept-Encoding\r\nx-cache: cp3070 miss, cp3070 hit/8\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3070\", cfExtPri\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nset-cookie: WMF-Last-Access-Global=18-Jan-2026;Path=/;Domain=.wikipedia.org;HttpOnly;secure;Expires=Thu, 19 Feb 2026 00:00:00 GMT\nGeoIP=FR:IDF:Paris:48.86:2.35:v4; Path=/; secure; Domain=.wikipedia.org\nWMF-Uniq=4F-52flZi9iD3TWbsBwR1ALsAAAAAFvdyLhIprFgCIzcXPI0YUoIE2w0KsQHe5Sj;Domain=.wikipedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Mon, 18 Jan 2027 00:00:00 GMT\r\nx-client-ip: 2a06:c480:3200:0:fadb:88ff:fe00:b802\r\nx-request-id: 210811a8-50c9-4b06-aea3-e36923d3b300\r\nx-analytics: \r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: 9bfcea0cda9bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1820,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"826ff6bf5ec502ce14534426a48d1f10","sha1":"5d081c1ef47cec6ec25faf5a935a53e88c4a81f4","sha256":"ec9e35209641989928af0febfbf199ed74bf9acfdbcf89d8c187a26ff8b11016","sha512":"ad29e100ac8231169747a9317a6fec350d45decce11bf0b8dc2d2e257ef86a51b9f39ce9ce784bf5bce69da3291c34a5239d7e8448d0b8885156f3659e819b6c","ssdeep":"","tlshash":"323185afa307135a1303a2e4b873a52c8223a19d916f5bfafc511425c1cc644a1376a6","first_seen":"2025-10-23T07:28:12.327321Z","last_seen":"2026-01-18T09:03:08.949304Z","times_seen":10,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/improving.duckduckgo/t/si?5488199\u0026b=firefox\u0026atbi=false\u0026i=false\u0026d=d\u0026l=en_US\u0026p=windows\u0026pre_atb=v517-5\u0026ax=false\u0026ak=false\u0026serp_return=0\u0026pre_va=_\u0026pre_atbva=_\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"POST /improving.duckduckgo/t/si?5488199\u0026b=firefox\u0026atbi=false\u0026i=false\u0026d=d\u0026l=en_US\u0026p=windows\u0026pre_atb=v517-5\u0026ax=false\u0026ak=false\u0026serp_return=0\u0026pre_va=_\u0026pre_atbva=_\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nOrigin: https://6471.karponews.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: image/gif\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:35 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xrpHKai5N9XO7BLdxGDMjHuZpNcW9ZO%2FePI24Q%2FbOXVBUYU9FXPQdVMIstW3wqdOuzj7jLIc6zv5L6oU6O3DIOYG9q7YJVcGMsFlf7VEkirhFw%3D%3D\"}]}\r\ncf-ray: 9bfcea110afbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-04-04T03:32:15.873053Z","times_seen":75797,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.main.745a2e3777367811474c.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:32.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/wpm.main.745a2e3777367811474c.js HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:33 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mj1lKCHoU7tJAugEU0Kyr3r9oIJhRoNOTnwUxTrgrTdqlRkB3HhSBuBJ80fp9isDDAWzU%2BwDsRyNlQKv6C0nm8A2IsymKD%2BwLQwRxRiFKck3zQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:33 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfce9fff91ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1227878,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4f792f98ca87555ad409f4d6e771a1e3","sha1":"e5438155af5ddd7b46b1693c7a9c8e105ec7808e","sha256":"f4ce6db71bc068849bde0aa86607f6c6d2ceacd108a72fa03643b7d20d391900","sha512":"71c7bf3c736551b728a7beed901e3ced183bac5945026e5f4c51db6778eba116fac13e4986b9db8a78f906f9dec5d104c08f136e524f932ff57796bf8fe34433","ssdeep":"24576:vpnU9jt6kZsAr9khFOWsZ+y8uxOFCFy/usPFQPTZo:vpU9jt6kZsAr9khEWsg4xOFCFy/usPFN","tlshash":"4d257dc4b265b5ed08670cea803f541df32e7a047429c160f26ddde8648a5dbf623f6a","first_seen":"2026-01-18T09:03:08.952301Z","last_seen":"2026-01-18T09:03:08.952301Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nserver-timing: total;dur=45;desc=\"Backend Total [n]\", cfExtPri\r\nx-detected-query-lang: en\r\nx-duckduckgo-results: 1\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 18 Jan 2026 09:02:35 GMT\r\ncache-control: max-age=1\r\nx-duckduckgo-locale: en_US\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=14tAu%2B6rF8pa0HncWAQPpMe63GSet%2F08GdAHF2%2B6iE92TNZPHn%2BkQw%2FDs1bvN6WieTAHB8PHdWZjD6vwaJnmVHN%2F7tDnKm26mSXmN3nJIJ6HSw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea08e9efb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18663,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13444)","md5":"4a3bbcf9fd4585b199706c0b98294ffc","sha1":"ac04c23753b5304234220644cadc8f1e41a0476d","sha256":"eadc8108b58eb9d5fce207ea0ad47278450260b9a6f5eb2c323d2f000bafd62e","sha512":"f1951205b6ee40338c517a97677cfc00f8a020115f37a50be600a0f76464257d7827c8d90f66133805d1d8f9f200fa6e1da970b2bc218d1e5674aa34bf88eaf0","ssdeep":"384:8ZtXJtKwYAlHqZTgoDqs0SWx87LMYcmDxxxK7agpE7kjvV0D1M2i3X3:6tXJtKwYAlHqZTgoDqs0SWx87LzsvV06","tlshash":"f382b52e48216ab55f393ce1e83eb95dc1dfe102841c98d0f4ae5e1c0bdd89baa172d1","first_seen":"2026-01-18T09:03:08.899269Z","last_seen":"2026-01-18T09:03:08.899269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.3871.d73463799276f986761d.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/wpm.3871.d73463799276f986761d.js HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:27 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZ7%2F2ZBBY9v78bZZ8MEAaDg8VdhQk7WRWKCPNBdnBV4UKY6Aaccq3H9iJmh5zQZ06GFEN9AOWovOeOihJdumsizqgbymjwbThUmq01rJFpkToA%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:27 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0baa7bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":306260,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"49dc5228f4ec0af2894b55d720e043df","sha1":"7e5088a899a57dc7f102f1666cdb0a332f3fb1bd","sha256":"9ac1782050644c6ae6adf9908313917570e3fe7324e8c12de48bfdfe3ec233dc","sha512":"aaa41b3f04e108f76640a5ce9026dfe0a5d3748b30af82a0c33c193892371d7220ed4d148f4f65976d46f12d4cb4fe520dcc6fa34a477ab2a7a180235bb4011e","ssdeep":"3072:TVEoAj4NqAvPSIoPayIYzfq52K2GMey0mbEECmlDs9xMBhOlB6B:Twj4NqAvPSIoPayIYzfq52f7Zl4f04BE","tlshash":"665419597254343805c540a9806f0a4bf736292e246ac49cb76cf4efacbde8d31beb75","first_seen":"2025-11-22T08:50:28.101096Z","last_seen":"2026-01-27T01:29:54.645566Z","times_seen":11,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.duckai-arrow-animation.29ba234edc184e5173e5.css","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/wpm.duckai-arrow-animation.29ba234edc184e5173e5.css HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:27 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4N9ate1lCsM0c4CUSXsXdjL%2B4o0TUJBfT7S0d4YBzPtD6qu1a7hXygBKVBMCbkx%2Ff4M%2BrWWD%2FHK2vKcY77hRqTyx2TVx7kbzm4dREaiU2Bndig%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:27 GMT\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0bba7eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7afbe151112694b919af60600d078b61","sha1":"0d5becdc4f7c5ec1b019d50a927d13d2f0391c65","sha256":"060ebb88e1ac897889a16f2e0920ef8fcc9ff468a3ca1a117b30d55dd7755be0","sha512":"c2baf4274d9db4196aa007c22f5bf6a1d4f86a15a84f85cd26518a309a6117ba14ec22922cf3655859c6f3cc02cbaf4b5138781f130976cdf93a97cf5fb9d91c","ssdeep":"","tlshash":"8fa012510b2015d0a8180005cb61155715226c453121024998c4c82246498046c9e1d5","first_seen":"2025-11-01T09:03:02.769622Z","last_seen":"2026-01-27T01:29:54.638223Z","times_seen":12,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/font/DuckSansProduct-Medium.ttf","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /font/DuckSansProduct-Medium.ttf HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: text/html\r\nlocation: https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LbGSdikbsUgzAbO7mFDLEcu9yaU3iO6OqbdXQk3zYr4vgrzk5r%2BKs8ZpdWcCvuk8skd6bZ0QJIO8Vr%2Bn8u092AMk6FjtBa6Ez9YVLw9%2B2px19g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0f9ad5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18669,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/improving.duckduckgo/t/ias_maps_expanded?9243139\u0026fromWebTab=0\u0026initialState=inactive\u0026timeSincePageLoad=176\u0026timeSinceDeepStarted=0\u0026timeSinceDeepFinished=0\u0026tabPosition=4\u0026isBack=false\u0026recommendedTabOrder=videos,news,maps_expanded,products\u0026maxVisibleTabs=5\u0026displayedTabOrder=web,images,videos,news,maps_expanded,products\u0026q=DuckDuckGo%20AI%20Chat\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"POST /improving.duckduckgo/t/ias_maps_expanded?9243139\u0026fromWebTab=0\u0026initialState=inactive\u0026timeSincePageLoad=176\u0026timeSinceDeepStarted=0\u0026timeSinceDeepFinished=0\u0026tabPosition=4\u0026isBack=false\u0026recommendedTabOrder=videos,news,maps_expanded,products\u0026maxVisibleTabs=5\u0026displayedTabOrder=web,images,videos,news,maps_expanded,products\u0026q=DuckDuckGo%20AI%20Chat\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nOrigin: https://6471.karponews.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sun, 18 Jan 2026 09:02:34 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X4z5ydO7raQlNBbL0vsGro6AF%2FpKO7On67drhv4C005QZI18ODLiMZF5Gq3lUqurvowFcbL7FIQUyerOkOhMtec%2FNUjLTm9SLM9%2BXJ%2B2c4QbSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea111b00b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/improving.duckduckgo/t/iaoq_chat?2167150\u0026id=chat\u0026vertical=chat\u0026in-vertical=chat\u0026fot=q\u0026lot=q\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026kp=-1\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"POST /improving.duckduckgo/t/iaoq_chat?2167150\u0026id=chat\u0026vertical=chat\u0026in-vertical=chat\u0026fot=q\u0026lot=q\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026kp=-1\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nOrigin: https://6471.karponews.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sun, 18 Jan 2026 09:02:34 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3UfSfz9gqEqjCvgL138aZNU76Z8NJli4UApIufoeFgQbJRCHrDp86JDx16TJdfss6tMLACK%2Ff1KWGOuU%2Bgc9OIyGwkESzdGiBpfpyIbESbUURw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea113b07b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/font/DuckSansProduct-Bold.woff2","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:32.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/font/DuckSansProduct-Bold.woff2 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: font/woff2\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:33 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 18 Jan 2026 09:02:33 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIK%2FJvLdSocx8ke6NZ1OZr68U4YuWEtZ7FF%2Fn2ax1e2F5lLFI8lo%2Ba%2BfjxnPK5oLf7MebHAZYXC3%2F7WvfzVVS%2FMGvMCRuMCksaEhAZBBNOhVmA%3D%3D\"}]}\r\ncf-ray: 9bfce9fff912b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 109704, version 3.655","md5":"5754e2bcf8f6736d32df97b4855db6e0","sha1":"3808235f7900223ff845888411c081911e0c4746","sha256":"c8c3066a555e451564e9eda9c1806fc41ac953d9e72ba7bb12adef3e4fe2f509","sha512":"30e377168802f17ce89e3d7107abbb01cf34514245b8f137c99b6a2a8f9ca0f38f5f2e3409e51944ec49f56901b4165e805a4f6037f9251dbb4aaf11bce4f135","ssdeep":"1536:G9V7g68EwI9Ffy7FlSp4pPhz8nwDkUPtBl8n3ha8DBz2PX8VOCAQairIz5+Ae/jt:8Vc68EwIhyywDZBr8jsQRUz5+ZMWGm","tlshash":"63b312fbcd31d5e8b700c0b069a2c35286a8756b7494b7d6e13a5168d0fd2417dace8d","first_seen":"2025-11-06T17:12:03.036698Z","last_seen":"2026-03-11T12:58:20.304384Z","times_seen":25,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.6508.4a14583f371da9ab6d16.css","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/wpm.6508.4a14583f371da9ab6d16.css HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:26 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DnUl%2BGruIfSI5AOSIIvitt%2BXZVbdzOdNFqtpn8VXwtptFoR%2FNqYpEtd1UTVRfyyxKpGXzcgI0ysw9qGQuqM2YXOzXFQRaDZmBeAx7Ocqr%2FZC3A%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:26 GMT\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea052999b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15020,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15020), with no line terminators","md5":"acf5c6ff9493220f1e9fa7857657c658","sha1":"b804ce1e1c1742f784b2595f18ca6019a5ea2c14","sha256":"dd4ef63d7c81f8e9e71275caa8c8f029a1c1c59c88f640cbad3e63f9712e8e5d","sha512":"547b4c06e1bcfbb7e841cbde5bccf5fa022c7353c79eea3e6295d83b110dd6276550a323081985820de21fdda93a36672cea7d05419fc07a00c513079a224adb","ssdeep":"96:KTcfcjzEIAiefbqUfFg84QHRb1BpweyGE1DvBrc9KeTyeY7:h4zEhiEZNHRx385hZveTyeY7","tlshash":"0362e28ddef4d7ae6c75cb102eae62ec1425e68ec829dacbd40966958fd5ffe001110c","first_seen":"2025-12-25T21:53:49.082109Z","last_seen":"2026-02-07T03:35:35.50371Z","times_seen":9,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 18 Jan 2026 09:02:36 GMT\r\ncache-control: max-age=1\r\nx-duckduckgo-locale: en_US\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BDNPnwCMjzvYNMmkoBCxsc4ypRK4NppSt6K2l6paqBS2T%2Bzu05MpKu%2B5Z5mvPM47uvLFXOBJVpDD99f5oYVtxGKbM8AvIRSYVN4L9o5JMduDoQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea101ae0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18669,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13450)","md5":"067db0490fbfdd86293e0cf8439fa19e","sha1":"319783b3f2e2ddfdb5fa2a08bf5d6972c7e637c3","sha256":"aa0ea5c01ad1a35d589fcdd17b8e805e25bd310b21656d8af217e02b680dfc8a","sha512":"be71f5b93f713285789c90ad8ab154cad96f6f68830ddb39d993985372c2b2798c1c99209f4f9db5b79a45608947df3efa2f9e6c353b8aef4a7beb845934fee9","ssdeep":"384:8ZaXJtVxwYAlHqZTgoDqs0SWx87P6NSYcmDxxxK7agpE7kjBV0D1M2i3X3:6aXJtVxwYAlHqZTgoDqs0SWx87P6NFsZ","tlshash":"d782b62e4821aab55f293de1e83eb95dc18fe103841d98d0f4ae5e180bdccdba6172d1","first_seen":"2026-01-18T09:03:08.921976Z","last_seen":"2026-01-18T09:03:08.921976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/improving.duckduckgo/t/ias_chat?3462377\u0026fromWebTab=0\u0026initialState=active\u0026timeSincePageLoad=177\u0026timeSinceDeepStarted=0\u0026timeSinceDeepFinished=0\u0026tabPosition=-1\u0026isBack=false\u0026recommendedTabOrder=videos,news,maps_expanded,products\u0026maxVisibleTabs=5\u0026displayedTabOrder=web,images,videos,news,maps_expanded,products\u0026q=DuckDuckGo%20AI%20Chat\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"POST /improving.duckduckgo/t/ias_chat?3462377\u0026fromWebTab=0\u0026initialState=active\u0026timeSincePageLoad=177\u0026timeSinceDeepStarted=0\u0026timeSinceDeepFinished=0\u0026tabPosition=-1\u0026isBack=false\u0026recommendedTabOrder=videos,news,maps_expanded,products\u0026maxVisibleTabs=5\u0026displayedTabOrder=web,images,videos,news,maps_expanded,products\u0026q=DuckDuckGo%20AI%20Chat\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nOrigin: https://6471.karponews.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sun, 18 Jan 2026 09:02:34 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9bX28JqA2%2FZzw%2F%2FuoYgWK8QVl0x0caYYVauzrRJdPJ3%2FeLWGTGN9YdCDv7kMzUEF9kg9smWGY3vOhG6Mzrx%2B4GQwKIBU34OyxD32rIqmE%2FCu8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea112b03b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpmv.5e3f5606b2b9df63a9af.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:32.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/wpmv.5e3f5606b2b9df63a9af.js HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:33 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TVkGrsYoi8OCkAQ1itY8UYY1RISyXq4pxxEcXCx%2FuNC2%2FtSWAEUbVqTRtcEIJBUtD0k8E2Xd53FMzbI0a7W927ivOZsGPYT8Nf2evATXBiQpDw%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:33 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfce9fff919b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":990404,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65453)","md5":"7d2005f7aa64df543a761b36886c8df2","sha1":"59ed2b8487dfd05a084139ee667f815c433793fe","sha256":"486852aba4d5236fe0ae2364c12450fccc0e01c0be3d7e8a8032295a0da935fa","sha512":"0dddb7cb059c83468cf18c96fad9fc7db499d85dbb36f1fac1bff624624dd74d9b592606ad8343b25bf6fd1ef829a434edb9eee250f6792416a3c5150b224585","ssdeep":"12288:b/6JlRm4glZCC7TqxjOcfa9RzIfhk3uUy70VMw9SdZZohH4:b6Jlw4glZCC7TyjOcSRzIybuwCwY","tlshash":"59252be47338b5dda6b7805f81bb9805b33e7129302e4560aa5fdda870275c9f327e60","first_seen":"2026-01-18T09:03:08.964736Z","last_seen":"2026-01-18T09:03:08.964736Z","times_seen":1,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/t.js?q=DuckDuckGo%20AI%20Chat\u0026t=E\u0026l=us-en\u0026s=0\u0026dl=en\u0026ct=NO\u0026bing_market=en-US\u0026gjs=duck_duck_go\u0026p_ent=\u0026ex=-1\u0026dp=RktZ4kgBEvX3c7Gj554Hv5piSLY_csKBXmqRSZ1xDtT1zwxzGX52FotzrOfsGPX09p98Nznp3MuPpTAL2A306jNQXAWv082L4h9qiHyU9sy-We9AtFu3V_QGyhh-74mD-76S8mt-GtEtjaeL-kiJ2g.sKuY0eQSMeV5GV_FnS8cfg\u0026perf_id=a9467947e217ff46\u0026parent_perf_id=8f3bc8715b932711\u0026perf_sampled=0\u0026host_region=euw\u0026dfrsp=1\u0026aps=0","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/t.js?q=DuckDuckGo%20AI%20Chat\u0026t=E\u0026l=us-en\u0026s=0\u0026dl=en\u0026ct=NO\u0026bing_market=en-US\u0026gjs=duck_duck_go\u0026p_ent=\u0026ex=-1\u0026dp=RktZ4kgBEvX3c7Gj554Hv5piSLY_csKBXmqRSZ1xDtT1zwxzGX52FotzrOfsGPX09p98Nznp3MuPpTAL2A306jNQXAWv082L4h9qiHyU9sy-We9AtFu3V_QGyhh-74mD-76S8mt-GtEtjaeL-kiJ2g.sKuY0eQSMeV5GV_FnS8cfg\u0026perf_id=a9467947e217ff46\u0026parent_perf_id=8f3bc8715b932711\u0026perf_sampled=0\u0026host_region=euw\u0026dfrsp=1\u0026aps=0 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: application/x-javascript\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 18 Jan 2026 09:02:32 GMT\r\ncache-control: max-age=14400\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:33 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oThn%2FLgGApf%2B5R%2Fz0%2B1QVyoFmxzpEhWFAz8if4FQNuWh08O5Qb9VXs4gCPp09f3xwt8af2rv3ZpjU%2BhZepzuXaQaxSS9KC8YzBKIBrJezpWYoA%3D%3D\"}]}\r\ncf-ray: 9bfcea03a96ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.933.48d63d38dcb5bdb943e2.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/wpm.933.48d63d38dcb5bdb943e2.js HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:26 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B1TL15hAYkaCwBydbTIUQ8L2gDCIcXLSjxTFoRnGqD5F2TqxT%2BjkvN0%2BzT%2BchfwcS1PvaDdWiFn8gOqZhsGv6mOAPcprn0k5GM2weB9Bck68lQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:26 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea052998b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55911,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55172), with no line terminators","md5":"a6d73cf855fe505d6da97fe6078f2a75","sha1":"8f743d6bc27f2ac536666445e2faac50b0c33932","sha256":"9c95c56444a2dc4908939c935ca91bd799658fa4d84a66b8bfa4d2995805a3cc","sha512":"4a0526e2e579189bdc7f01294882651e469055face1f225483366e2a71af9221fa605f0b51c697baeef8076a8d702416ddea498cc73a91caca49eac624714c6c","ssdeep":"768:7Tp/U4imSD5ntFp0nk6FWCzaVVqudbLfhd+A+ua/sF7U86CLrp410qI4Rp6AdTcJ:gd5vanklDeuaglTlIRIuE","tlshash":"1b434ae0b354f59c11a3804feab2ae08d37d386d7069e960faaed6d5b1121c1f167f24","first_seen":"2026-01-18T09:03:08.966915Z","last_seen":"2026-01-18T09:03:08.966915Z","times_seen":1,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/font/DuckSansProduct-Bold.woff","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /font/DuckSansProduct-Bold.woff HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: text/html\r\nlocation: https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bWhFsCsjKrvn%2FU0BAdswxmm72zmg%2BXLERlpMbcIxZxsAos8VKnpFiO8aJBlfrBbCjfei6e9ta1cldm0jMIevw9WgioOAhHKu5cJfrAtGVeYZMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0899e7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18667,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/font/DuckSansDisplay-Bold.woff2","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /font/DuckSansDisplay-Bold.woff2 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: text/html\r\nlocation: https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vk%2FVIMGj0BtG%2FlgnfGMiOoa5qCBm4mQTWH08cB8kSbgbHtY%2B5n92bqWssxIpw5%2Fd15FTnIrQ6WVfkedda7gTgl8WslzqCSTyrI7yBrPTuvDEHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0c2a8eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18669,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/react-assets/2949a1b0a03bd3374593.svg","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/react-assets/2949a1b0a03bd3374593.svg HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\ncache-control: s-maxage=600\r\ncf-cache-status: BYPASS\r\nvary: Accept-Encoding\r\nx-cache: cp3070 miss, cp3070 hit/8\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3070\", cfExtPri\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nset-cookie: WMF-Last-Access-Global=18-Jan-2026;Path=/;Domain=.wikipedia.org;HttpOnly;secure;Expires=Thu, 19 Feb 2026 00:00:00 GMT\nGeoIP=FR:IDF:Paris:48.86:2.35:v4; Path=/; secure; Domain=.wikipedia.org\nWMF-Uniq=WYxGw7Hiq8lM-Ui-7q7HTgLsAAAAAFvdaSe5b3ipr-IbyWQ0eIw5SjIR-fZ0z8N7;Domain=.wikipedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Mon, 18 Jan 2027 00:00:00 GMT\r\nx-client-ip: 2a06:c480:3200:0:fadb:88ff:fe00:b802\r\nx-request-id: ed0fb048-8047-49a0-853d-8fce2ffaa606\r\nx-analytics: \r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: 9bfcea0cda99b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1820,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"dad5ead6e0904a7fabbfe98c1d72abfb","sha1":"3cad64ef21be4327aadb21b2c3e293dcc960efbf","sha256":"1d0e02b7ad5654a32dd1c2c3bcf895efde19d3da0e5d45ae8b9689f9bd83c2ef","sha512":"8752d83dcaf8efed369ba5f0cb99628c439c9ccd19f3e743f5f97a8569a7e7cc608a079fa4c28761a664febfd779d59ab3a13ffb3bfd5a44f224786668711e09","ssdeep":"","tlshash":"2d31c96f6342128b2303a2e4b873552cc223a5d9e16f9afb7c511462c1cc709f5776d5","first_seen":"2025-10-23T07:28:12.298702Z","last_seen":"2026-01-18T09:03:08.96894Z","times_seen":11,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/font/DuckSansDisplay-Bold.ttf","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /font/DuckSansDisplay-Bold.ttf HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: text/html\r\nlocation: https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C9vjWYffhbBJ8lEwocGv5VJ4tafhowQpavcKaYx33okyRvucgFhssCwUwINi3tBPlaCwQjfd2N7Jmu9KpJSk%2F6vjiBoyi46nydEw8S4uCNEVPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0feadeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18669,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 18 Jan 2026 09:02:36 GMT\r\ncache-control: max-age=1\r\nx-duckduckgo-locale: en_US\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xS7M%2BjY8vrhq35auV4cQGxO9aNB5Ze72yQIzPc8aknBUNW3Qh%2F1POinMeJHZgMOMGP680YQQBKrcwBy2OgAbt3Zgl102p%2BiBmP43X7HyRWP78Q%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea105ae4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18669,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13450)","md5":"3d43c6792fc6f38f2e71564d5c06e65f","sha1":"c880088d196c1047154eb7f1b52d3c6a74b0d405","sha256":"ac8c3d41623805b6a22f505a08048f25b3b0744a4c7b44c1d59ccc1a13f2df1f","sha512":"e54e94f80409dc8bcb274f61361be7cc7da91bd05deb320070dcd5231d2c4216a0cf1859b34f19ad4d38b24fb61b274934d67a8411002731bc91d8bcf3d78b75","ssdeep":"384:8ZoXJtVowYAlHqZTgoDqs0SWx87P6NYYcmDxxxK7agpE7kjRV0D1M2i3X3:6oXJtVowYAlHqZTgoDqs0SWx87P6Nvsp","tlshash":"7582b62e4821aa755f393de1e83eb95dc1dfe102841c98d0f4ae5e180bddcdbaa172d1","first_seen":"2026-01-18T09:03:08.904922Z","last_seen":"2026-01-18T09:03:08.904922Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-18T09:02:32.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 18 Jan 2026 09:02:32 GMT\r\ncontent-type: text/html\r\nlocation: https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZKj5Tgou346iREQrM%2FoXgN0vR9SiuJjXHfVmQWp5ipsq1DKHnBatYYzrE0tDu8AkYwBST8%2BGzoVU2u07ElMXoC5LAnHtP3pwnaWkhBBYVUH30w%3D%3D\"}]}\r\ncf-ray: 9bfce9fd3e48dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18670,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":26,"dns":3,"connect":1,"send":0,"wait":64,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/font/DuckSansProduct-Medium.woff2","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:32.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/font/DuckSansProduct-Medium.woff2 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: font/woff2\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:33 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 18 Jan 2026 09:02:33 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8s23U%2BStMDdv%2FZR58p7XHCNyaOZemqfFFUZi%2BemkAUSc3zA85Qb5QJi7A1olOqovJNJKwwiWPaQ1N2bVdsoBWoEC1SXQtT98QAffFpDz44dIHw%3D%3D\"}]}\r\ncf-ray: 9bfce9fff913b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109728,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 109728, version 3.655","md5":"ea16485e4243cfb281b644961be39d2e","sha1":"0d3ac3d587d3c72d2662c8d269f115c28777bef8","sha256":"df30591a5af970ad92a76b3425ccb84264aab39b2e68bc7441913cf66e1048b8","sha512":"69c9a81a169a3698be52ec916620306713267e54c35a3dc6d93bdc68311aa761687fa6e5ce37fe4734c59d5260f04e8715066b457e06cf9e5362a59a6a4e7711","ssdeep":"3072:vp4MNpHBpMXE2VpKt1cyPQVbKJK1MXVzpg:vKkP6RKj2bKJgMXVlg","tlshash":"83b3126e9ae1fcb4eea6dd26dd50637ae872c94d6f0a80943a90c3d1715c8402c9edcd","first_seen":"2025-11-06T17:12:02.99841Z","last_seen":"2026-03-11T12:58:20.302691Z","times_seen":25,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/font/DuckSansProduct-Regular.woff","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /font/DuckSansProduct-Regular.woff HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: text/html\r\nlocation: https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d6Slt2Qfp69MHL3PkeTUYwxRGM25C8uHFlYNVlvh%2FumrE61xuOfd2uockcA4C41tcbYC3sPMToQgrc3j%2FJf8xMHWV0hyV4BkZhbXmFz%2F9V1H%2Bw%3D%3D\"}]}\r\ncf-ray: 9bfcea0559a0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18669,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/improving.duckduckgo/t/iaoi_vertical_chat?618052\u0026id=chat\u0026vertical=chat\u0026in-vertical=chat\u0026fot=q\u0026lot=q\u0026timeSincePageLoad=643\u0026q=DuckDuckGo%20AI%20Chat\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026kp=-1\u0026serp_return=0\u0026bing_market=en-US\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"POST /improving.duckduckgo/t/iaoi_vertical_chat?618052\u0026id=chat\u0026vertical=chat\u0026in-vertical=chat\u0026fot=q\u0026lot=q\u0026timeSincePageLoad=643\u0026q=DuckDuckGo%20AI%20Chat\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026kp=-1\u0026serp_return=0\u0026bing_market=en-US\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nOrigin: https://6471.karponews.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sun, 18 Jan 2026 09:02:34 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4nh4fkoQBCMGTKbtsraXSWet7lW2%2BuFeSO1XFvgAhGYyeOC%2BMloKwv7FS8lpAoDio1%2F02nDfY6rzPgtctbC2v2J1P7xqJzwqKeYeCMsJA%2BFR3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea113b06b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/react-assets/9fe44c00e8ec82ac348d.png","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/react-assets/9fe44c00e8ec82ac348d.png HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\ncache-control: s-maxage=600\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-cache: cp3070 miss, cp3070 hit/8\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3070\", cfExtPri\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nset-cookie: WMF-Last-Access-Global=18-Jan-2026;Path=/;Domain=.wikipedia.org;HttpOnly;secure;Expires=Thu, 19 Feb 2026 00:00:00 GMT\nGeoIP=FR:IDF:Paris:48.86:2.35:v4; Path=/; secure; Domain=.wikipedia.org\nWMF-Uniq=vj16aXzImL3yhDByNV7GCgLsAAAAAFvdzlK8nQ-8BdPZX4xs8zqRhJp-ev0AsoAI;Domain=.wikipedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Mon, 18 Jan 2027 00:00:00 GMT\r\nx-client-ip: 2a06:c480:3200:0:fadb:88ff:fe00:b802\r\nx-request-id: 8b6ec911-6944-4c40-b32b-fb123a6ec612\r\nx-analytics: \r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\ncf-ray: 9bfcea0c0a89b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1820,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1b91f149d4e0b1baaa521b5fe73223cd","sha1":"f768ae40f470a3abd9985f1eaafcc514c20eda62","sha256":"8a660ba9bbfa443374fe236aae43072696c8fe7fd77c05530f80986d20592a13","sha512":"26e17ee4aa2ac84a8d1d5d0d1ecdd720d4fe3c9e8d9b209bcc6b87cf44a4880e51286813d1b33bf498bdf9dc3a474053b8e52402fc6bfadb523177e4ac13bb74","ssdeep":"","tlshash":"1a31a72f6342225b2303b2d4b873512c9223a59ad3af57fabc511422c1d8609b1372e5","first_seen":"2025-10-02T10:03:03.95332Z","last_seen":"2026-01-18T09:03:08.97239Z","times_seen":9,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/s.323e057b0497b1a5a089.css","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:32.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/s.323e057b0497b1a5a089.css HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:25 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlY1FE091SXbDUZJFaN2%2ByW%2FLu82P7S7lHOu345eAYKI%2Bm%2FoidsrqtsOXYNWNvi8MAfoBhtu%2FtTwGB35Sx7EitCPoTH1LoV6KIp857MjP3qf0w%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:25 GMT\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfce9ffe90cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172455,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7827601ee0d8a256d4d97af9ffe457fb","sha1":"33627ac23abe3603142f7a3ac2e774e81038c253","sha256":"40c5c733d0adc81de2d644d5e3aeb0ad903183f750407d9d38c649117ef1c8b0","sha512":"0fbfaa41cfd67f05e1685b6d30cc713574d774712dc18384e443aed40241838709aae7788310caf2ff39f9a45922ec8a5c078b6d80f32573d21c9af2856d310b","ssdeep":"1536:hyl3l2xgruceV8ff/OrGAYKQw9/MsdPrQp3/eZ6SwQbyZtM6faoqeIdGvFNVZHt5:8l3l2x6A8X/ft2OOS","tlshash":"a2f3fb61d9592008513bca17f5c17fe83138f123ea2357abf963a53ecac79dd1262b48","first_seen":"2025-12-25T21:53:49.021457Z","last_seen":"2026-01-18T09:03:08.974464Z","times_seen":3,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpl.main.1badaeeb24a19f645147.css","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:32.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/wpl.main.1badaeeb24a19f645147.css HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:25 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2FRSTdHj6r7vrUXvkvKZeUrD2WcFZI1sQnR9FoSTukmTxfgYiVnGt%2FhMDfSxxk%2BYHiTmhEQ4QvpvcOC%2BfWNDrkOWgD6AAd1SZ%2BGOtBbtimxaSg%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:25 GMT\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfce9fff910b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383653,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"57c08d2dde343ee18cc20dc6930248ad","sha1":"6a7a8970ba69370d7d0f0739280abdf8bf951f1e","sha256":"530f9eab65f7811d72650e1b8e6a4421236017789ee2830dc05fff031812dd6e","sha512":"2972500a8072a7ace72fe1451b5da47fd94835ada31201cec51b170d71189fea850b9dccfdcbb6f3d69f5e0599338ce09652fd60d54d65b6cedb0375048e20d0","ssdeep":"6144:7YcJKoBSKF1I353BbmZH0dNEIlP34xQVc13eRVwwe:7YcJKoBSI1I353BbmZH0dNEIlP34xEcH","tlshash":"c68409b78270522df827dc251b9ca62c4514f093ed1267eab912ab74cbc7bf7057221b","first_seen":"2026-01-18T09:03:08.975435Z","last_seen":"2026-01-18T09:03:08.975435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/analytics.js?pageID=ddg","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:32.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /analytics.js?pageID=ddg HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 24 Sep 2025 09:32:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"68d3ba9e-1457\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B28n5jWg8ARzCd9XWBZUaKhWiXpfK9Z1o%2B13hnHMOj0GUP%2F75pmDcLDLZHTjOxRZUPohrxL7DYOyHPiIHANgIGv8F2Q16aRg4IpnYEW7ZdHaLA%3D%3D\"}]}\r\ncf-ray: 9bfce9fff915b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5207,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"790ffa815ce1963a15c3d421f8169f37","sha1":"ed609cbd81020dbc4ce84fe5cffb07b4ad87d0b1","sha256":"aa936cb59e16ab1d7e03f908481a9a1aec0182ca33ad12136c6a281cabababf2","sha512":"07a05a512a9bd9479e390ff30f2e86c9938b5dc8c837c7ac5118d8c7ba58cb9dcb406c6b04a72eacae2317d37667bdc0e9c10fd75373dff7f1b4ee80ef2d3335","ssdeep":"96:K/SKKKk34TGtU7LgAu4L4CI7XC5JKCUjlrnCUjnH9o1IDXTN5kaX+9oBZsRBOxY:KKl54TGS7SYi7XktUjluUjH9RDXTFvZk","tlshash":"0bb1545d32e558b10167722a7b5be269323680833906e812bdac8f503f50d2e91e7fce","first_seen":"2025-09-30T09:00:40.052549Z","last_seen":"2026-02-09T06:36:25.732847Z","times_seen":43,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/font/DuckSansProduct-Medium.woff","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /font/DuckSansProduct-Medium.woff HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: text/html\r\nlocation: https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uI1dPqw6XW1VRLmFc3s4BS2mCWqqahAt%2F%2FOuxxLFGEv2Y6seDhcfP64WFdavYypD5KTkaPK3sO3QFaE5oKrzoZWfU61AeNuUBHt967cXjHPlfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0e7ab9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18663,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/improving.duckduckgo/t/ias_web?2213417\u0026fromWebTab=0\u0026initialState=inactive\u0026timeSincePageLoad=175\u0026timeSinceDeepStarted=0\u0026timeSinceDeepFinished=0\u0026tabPosition=0\u0026isBack=false\u0026recommendedTabOrder=videos,news,maps_expanded,products\u0026maxVisibleTabs=5\u0026displayedTabOrder=web,images,videos,news,maps_expanded,products\u0026q=DuckDuckGo%20AI%20Chat\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"POST /improving.duckduckgo/t/ias_web?2213417\u0026fromWebTab=0\u0026initialState=inactive\u0026timeSincePageLoad=175\u0026timeSinceDeepStarted=0\u0026timeSinceDeepFinished=0\u0026tabPosition=0\u0026isBack=false\u0026recommendedTabOrder=videos,news,maps_expanded,products\u0026maxVisibleTabs=5\u0026displayedTabOrder=web,images,videos,news,maps_expanded,products\u0026q=DuckDuckGo%20AI%20Chat\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nOrigin: https://6471.karponews.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sun, 18 Jan 2026 09:02:34 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LQHisv%2BRuamUFG6DhRzSt67T72RIBba8FpCw%2FfUcTwKAr%2FTp96%2F6kF4bFbyprfjoHQujqsBcdxh%2F7Y%2B99XVZuIu9WH672RFRKGhkMyRxyiYNXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea110afcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/r.7d617ca0e0ee80baf3c9.css","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:32.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/r.7d617ca0e0ee80baf3c9.css HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:25 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p1fYLDrltesozSF36Vh6jfRk%2FIL2Tf9oCVzwZRd21Ffj3EibXkRgUe6Q%2FZfRC1KH2F0O85oIraO7v2o6kxA6kt2B8A%2F3RbJLXtAu6zKEEe6hGQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:25 GMT\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfce9ffe90eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":326737,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"7bc25f9601b03be90599016713e34845","sha1":"df8f4c0edb01151db7d1cd810d22db0c57e78270","sha256":"709b748fbf269ac1ba44dbd97ba35cc85c0b44009fc6ea35b7097e6b5342326a","sha512":"497d5f3d72e86c5cfce11a34223cf6b935d10afa06430cb9ba71b21db7ec81b25c89dc0266884f9355252942a6851f598e629cefec4a09f58a102f66b78332a0","ssdeep":"1536:EE8UAk0A6nqp5tIKOTHHaAsd178Gm3T6OlJnfrQpN+CfcVt2S02OI2dmceFmmNa/:BH2OIeT62Qj0IbgaQWUiEe1zRg/","tlshash":"68640a31d571241fa03fc616f5c07be5ad78e052a23357abf527ba648a8b4c913a3b4c","first_seen":"2026-01-18T09:03:08.977853Z","last_seen":"2026-01-18T09:03:08.977853Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/font/DuckSansProduct-Bold.woff2","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /font/DuckSansProduct-Bold.woff2 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: text/html\r\nlocation: https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OT2JtJlXtNCwlSm%2FuyVl6u7JVkU%2BpTurSM817NJq1j1Nfq9pHXdaGidUYdnHoWkhwnFqRft6Yr1kL0j1uxklzsTGvZt%2Fv0FE1%2BFrWfqsp83sZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0609a3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18670,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/quack.duckduckgo/api/auth/v2/token?grant_type=refresh_token\u0026client_id=fb417741-decf-4b1d-a614-32898aa8ecca","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /quack.duckduckgo/api/auth/v2/token?grant_type=refresh_token\u0026client_id=fb417741-decf-4b1d-a614-32898aa8ecca HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 400 Bad Request\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: application/json\r\nserver-timing: total;dur=4;desc=\"Backend Total [d]\", cfExtPri\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TbT%2BkTCQnEWw12vUWzH7Ir82kyo2OKA22VAOl4xkMJdM3TlOGwViMiucT2Hnbo1iAIFmUNrSCy5I5OcidSBVZq5Aqm0MlB2xW%2BRZXlFclnLD%2FA%3D%3D\"}]}\r\ncf-ray: 9bfcea07a9cbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3339a9555943bfa962f3c1199c21ca69","sha1":"53f6903dedfc59dffee3f2d0e324cb2ca701cf7e","sha256":"8d0901c7612c3d0b185e3de451ce9aec083282c0cdc97939758133ef85d2c944","sha512":"d3ff31a9883af3f96d04ad65584aee5c66fda4fd96df16aeb8f3daad2fed5fec5a08cdf916dfea4a646c12668d12bc5f9972471f536cbfb2d767f91e19da86cb","ssdeep":"","tlshash":"7e90044510ff0c1f5d4f34441c47551143f7f0d154351c10c44043c404c44ddcd41045","first_seen":"2026-01-18T09:03:08.980081Z","last_seen":"2026-01-27T01:29:54.642183Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/d.1d9055b5508ac5647903.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:32.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/d.1d9055b5508ac5647903.js HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:25 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9SMdEEejIFyVdozaaikXW7tKpa74SGcuT%2BXg8CSRtx2zxvU4rXfH%2BCyQQbvecWYlrguN%2FP4oUtIKLIPxdk60%2BdO9j0kLKPy%2FEjFQCs%2FX2qsVgA%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:25 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfce9fff91bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":451489,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bdda7cc319c53dec6d3d08436e8293df","sha1":"c70a7ed0273c669c62105b86da2694ed717aa998","sha256":"98f7d5d766585a07a21fe635eb860ec3faf096ed5ef1ee9c562facdd65971522","sha512":"400bac6726868638ac44800b5532f44d3b17f61c4bda1c6cdac356b9c6839e19e58d0e01df3a379c9e328d2cf4b4bde28d0710448677d565b02507bf78a1e136","ssdeep":"6144:Vw/FxNXxvjyNii9ZhBdRaKvYMqFa2GWgrWDn:OPyNioqGWgrWDn","tlshash":"3ca45cd5b098b41a022b5194ec1f2505937bb694d44e0214bd7c8bfdba6ce8f3227f7a","first_seen":"2026-01-18T09:03:08.982224Z","last_seen":"2026-01-18T09:03:08.982224Z","times_seen":1,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.duckduckgo-help-ia.479e0d00c4c2e7096ae8.css","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/wpm.duckduckgo-help-ia.479e0d00c4c2e7096ae8.css HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:26 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YT2DcrtkH7gv0B43vpDeUueTL2LTkhN4HgQQSID2BGvXqLt0d3xrgxGhJ13vBAvwjqMJGJ1AqoKrtx%2FBb1OJdHElmn78xleamp%2FCCdCmOUaDaw%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:26 GMT\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea03f980b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"e345fc9f0f6dc3295a97a225d0ef2cd0","sha1":"5666a7a2e0b03472b1e6389cc100c1cca3e7995a","sha256":"c0a08cfd4771bbbcdbbc141ea1a9140e7341d022ecf2b2f16f92309c2c1ef511","sha512":"3a0e522abc6b52769970ce76db8d198cb171abe05aa589e13464d4250000cd092b40cbd83712e7be90b58e9918428cdd7a5900c88c140f900778b370397625db","ssdeep":"","tlshash":"bcb0222000bbf288ee282803a80c800c820e28803822cfb0cf230cc0c2c202b22a2f0c","first_seen":"2025-11-01T09:03:02.788344Z","last_seen":"2026-01-27T01:29:54.655403Z","times_seen":12,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.chat.0a2f8a35a1d7882fdc5e.css","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/wpm.chat.0a2f8a35a1d7882fdc5e.css HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:26 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zvfoc%2B7973s7asFXsoEpihni8ejJro1SnzqNEZFhJxtS0fh4JUbQI7bbCuvwb9asmDUPNYmbRfLmsQrydnnFrAlOQ369AO1IL7JG2Li4UY%2BxoA%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:26 GMT\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea05299cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":191359,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f55f9abae78c941a562ca1bdeebb8f34","sha1":"c966c7c8dfa5b8ecdbfa00db5735d215a2170406","sha256":"3213463148d351a728dc8b3a8c5248ca41c5c937b3231166f0caffb3551980c7","sha512":"f9d8863789b0d0b2a54f17722f52e5c4f2478bfbfbcbc75c961f59c39bcd4acc023d04f4e635fc9f61817dddd39500038d4b991ca8de788acb3644fe7ad874f4","ssdeep":"3072:SBaSHU5sH9miC4Vb80N+SDbyqoZi2Zw4YDj/iziG/B:SBTHU5sH9miC4Vb80NFEi224YypB","tlshash":"b11486a75230a33dac27dd240bdcea3c4629e492af0266dd6c056a35cbc7bf70573646","first_seen":"2026-01-18T09:03:08.985522Z","last_seen":"2026-01-18T09:03:08.985522Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/font/DuckSansProduct-Bold.ttf","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /font/DuckSansProduct-Bold.ttf HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: text/html\r\nlocation: https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QM1c9bnLEUe8V0q2sunATmUUTUk%2FEhC4OmPP7V%2B%2F7Ed2ZcJe2eU5ukfRKRC0E%2FARvgH9Nrtbv0BtePQyFIcspO5V5p4nVIM6GUqorY1c8%2FHIqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0aca6cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18663,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/react-assets/cf9ddd330d11e70bad45.svg","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/react-assets/cf9ddd330d11e70bad45.svg HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\ncache-control: s-maxage=600\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-cache: cp3070 miss, cp3070 hit/7\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3070\", cfExtPri\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nset-cookie: WMF-Last-Access-Global=18-Jan-2026;Path=/;Domain=.wikipedia.org;HttpOnly;secure;Expires=Thu, 19 Feb 2026 00:00:00 GMT\nGeoIP=FR:IDF:Paris:48.86:2.35:v4; Path=/; secure; Domain=.wikipedia.org\nWMF-Uniq=5HNv57Box0uIQapFhMLyQQLsAAAAAFvdXFt34ucCT5EFSu9F6wUtRzN1r_sjdHKW;Domain=.wikipedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Mon, 18 Jan 2027 00:00:00 GMT\r\nx-client-ip: 2a06:c480:3200:0:fadb:88ff:fe00:b802\r\nx-request-id: 899efd18-11ee-4a45-939d-bbf452367f78\r\nx-analytics: \r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\ncf-ray: 9bfcea0cda9ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1820,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"3f5a1b3f3bfea4f6289366fa723485f1","sha1":"dd7a7806bcb7213cbb570bde0ec10acf9323b746","sha256":"cf799255d21f486716e302fb914e9fd1ebb7fc21840932adb6f308a87d0c61c5","sha512":"95aefa30df37766d97b19a9bcc3f2019fa7ac7caa710f2a41e1e0835a53e550ca05ab8b29da83fe6061680ef77e6a0fb9a757e4bbda400a7817bd0dc200e4817","ssdeep":"","tlshash":"5f31656fa303234e5303a2e4fc73512c8323b5a9916b56ff7c511461c5c8a55a1376a5","first_seen":"2025-10-02T10:03:03.967356Z","last_seen":"2026-01-18T09:03:08.987429Z","times_seen":11,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 18 Jan 2026 09:02:36 GMT\r\ncache-control: max-age=1\r\nx-duckduckgo-locale: en_US\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DJuKfhT21NODtb1hl23kiIfZueESPNi%2BS71UOJhudK1fe%2FzLPuto2cmjr6DKmaGW0DIqlLP4dlkeg0%2FI6QKxdEsWtqTeBZVnnUY%2FVsExWDi5%2Bg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0f3acdb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18669,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13450)","md5":"96eb525c378ad970fb89fcf680148842","sha1":"d15695d5b0039a16ef584a26f2c2fecb28bfaa40","sha256":"374ca9b547554785b4a33d207ffc7f0aab4c3cf28b77414381b984f5dab10597","sha512":"9ae59be8b87efe3c8a0cf896ecd088f50844c2c55164b72c8112f899ab36f02718f6a0d296cbd71042e356331020e514377923403214f747193da939f4ab5ab1","ssdeep":"384:8ZhXJtVxwYAlHqZTgoDqs0SWx87P6NTYcmDxxxK7agpE7kj/V0D1M2i3X3:6hXJtVxwYAlHqZTgoDqs0SWx87P6Nis7","tlshash":"2382b62e88216a755f393ce1e83eb95dc19fe103841c98d0f4ae5e180bddcdbaa172d1","first_seen":"2026-01-18T09:03:08.988386Z","last_seen":"2026-01-18T09:03:08.988386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/improving.duckduckgo/t/ias_products?6466112\u0026fromWebTab=0\u0026initialState=inactive\u0026timeSincePageLoad=176\u0026timeSinceDeepStarted=0\u0026timeSinceDeepFinished=0\u0026tabPosition=5\u0026isBack=false\u0026recommendedTabOrder=videos,news,maps_expanded,products\u0026maxVisibleTabs=5\u0026displayedTabOrder=web,images,videos,news,maps_expanded,products\u0026q=DuckDuckGo%20AI%20Chat\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"POST /improving.duckduckgo/t/ias_products?6466112\u0026fromWebTab=0\u0026initialState=inactive\u0026timeSincePageLoad=176\u0026timeSinceDeepStarted=0\u0026timeSinceDeepFinished=0\u0026tabPosition=5\u0026isBack=false\u0026recommendedTabOrder=videos,news,maps_expanded,products\u0026maxVisibleTabs=5\u0026displayedTabOrder=web,images,videos,news,maps_expanded,products\u0026q=DuckDuckGo%20AI%20Chat\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nOrigin: https://6471.karponews.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sun, 18 Jan 2026 09:02:34 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vf4b3Xp17yVWLgcuqG%2FxlYf8nY%2FKYFSEJdeykjDUBEuZgB98k%2FytD62UnwmmB5xDXpuVbiv2lae%2B25THX7QNYW%2FURsPoig57sjNN0o9GblCX%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea111b01b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/improving.duckduckgo/t/dc_impression?6026481\u0026duckai=1\u0026placement=default","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"POST /improving.duckduckgo/t/dc_impression?6026481\u0026duckai=1\u0026placement=default HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nOrigin: https://6471.karponews.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sun, 18 Jan 2026 09:02:34 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U59ggMakfT3hd12cUJHmqBwNhWhpsAljRnz%2B3bJd8EtsKB9jjutMbR9on6HG%2FDTYx9KImTxiudWqCHtFfxYo%2BSDjsUItyFmrbpe8KqWtKp19gg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea113b09b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.duckai-arrow-animation.08ed30a22b5e157c9b4c.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/wpm.duckai-arrow-animation.08ed30a22b5e157c9b4c.js HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:27 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gznTR8g6dEVCDEWuev442X8HRbVarfITcY%2BbeMi2bl3mPgjCiptex4Mt3WGj0%2BuVbsuvqVjn2sJZRjTPCQaLGJTI7DdvXiVvmzV5kaANJD7%2FTg%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:27 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0bba7fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4137,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (4137), with no line terminators","md5":"83d6eaa91b2853e218e32dccc14ab173","sha1":"b53a58902689979bcebbe7a40023bdabd535400b","sha256":"539f749989ecfebffdfbd2906763125f9a8e3841604c26936716098f65748e07","sha512":"aa0372d6fc6dbe9f8f955e6dc121a5e060671d08571b21372831b98f97e000fa6c10327567ce2d036ac53ffde923658364a6d5d7f46eb0813c4b7be99769715a","ssdeep":"48:itgDX87F2E6NqZdfuYYyvUYVpQ0jDlceb+xJmZ9fuYYhUYVBY0jD8sgypdFp3AKl:9DX87F8Ivlj1ck+Jnl/M2FflK/s","tlshash":"16810cc60a6147ecfb462584c74730d9dfe94958bfc841eaeebb1c185ba4a9d2302f43","first_seen":"2025-09-09T17:58:21.945128Z","last_seen":"2026-01-27T01:29:54.62413Z","times_seen":17,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.2808.941aec5fd1f1977b2196.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/wpm.2808.941aec5fd1f1977b2196.js HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:26 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PpzrKP1%2BPOt6%2BuH0R0f%2B3c7FZ85J3mXl1CciRmCa4wTBDSOTDvoRYCWqyuhOrXPjI8%2BychduInB7m%2Fg98Zenb0eY4CDdJXRoRhl1bgsZafiunA%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:26 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea052996b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16589,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (16589), with no line terminators","md5":"d2c861499718a5e233df1fe347b84c48","sha1":"35c64660993d4b4b8f9e2965d8c0af3962558745","sha256":"78255f7db17f69be4c36926466b8f46f8362dea9f3733cd5022d61bf774f1fa6","sha512":"a96c764887b7596dd037e16ced5673f935fc554fb850059baaa764feb96bd8a1278061676c2d9068a5834c3533c9b32ef0a3ffc3d68a4b186650f312aa8638a7","ssdeep":"192:1W7qbRb0+iYqORYzUIO0yuPxRTGXysj3c3TBzcbxMVJLMwZDBvoiFiRk8qvLWvuf:1WWtbuzUIOqPxR6X33c3ashrq+5v+4","tlshash":"bf722b945609f9b1c5e2815a647baa62e32d3739383ca04dbb35fdc638107c2a5a0f37","first_seen":"2025-12-25T21:53:48.989913Z","last_seen":"2026-02-07T03:35:35.522927Z","times_seen":9,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/font/DuckSansProduct-Regular.woff2","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:32.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/font/DuckSansProduct-Regular.woff2 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: font/woff2\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:33 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 18 Jan 2026 09:02:33 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pH%2FDCsFkXW%2B03SVD%2FgUyDaOJ7W%2BPrrsYvLWzHNAocA5zglLZzbO4VpB6zJRb%2BI3CARMt0c6GgQEH7t29Xi%2BVOWqnmGDxIvoKvPfK5F8Z1oAn3w%3D%3D\"}]}\r\ncf-ray: 9bfce9fff911b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 109116, version 3.655","md5":"c2306850f269ad091ba4d76ae5c8241b","sha1":"3c81c91ba7d88ac9d818c48dbc83e40cd779533d","sha256":"3642a61fbc63ad01701f7129c9bb2fb2f75736ace5f48372be62d12cfd6a5f80","sha512":"9a1959935d7c8195a642932b8bcd6e0eefc026d8b3a98c983a8f7edbbc570521e7b324b0b442a2849f3ff9e0a4bd0f6ac30e877ee80c672c25c38e93fbdc5873","ssdeep":"3072:tQisdUuOhVeOcIViBzc5VuFV/Bah/XyqUP1sZZl:dEULcBBYjuv/gfByqT","tlshash":"73b302f4b70d00c2de7e3959629359e4dcab02f3b1221baa4a19a15d3159ff3ad88173","first_seen":"2025-11-06T17:12:03.035417Z","last_seen":"2026-03-11T12:58:20.306106Z","times_seen":25,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nserver-timing: total;dur=50;desc=\"Backend Total [n]\", cfExtPri\r\nx-detected-query-lang: en\r\nx-duckduckgo-results: 1\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 18 Jan 2026 09:02:34 GMT\r\ncache-control: max-age=1\r\nx-duckduckgo-locale: en_US\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w48l8R7rKc0Gowthi0EWMM9HUgbB8DTa1DndTALAWbGooN3wkevCZ2%2Fl8VzQsHjsCuhhndsDeKfpudRfQhZAMHSMMPk1pFGEtmqbIxll%2FFmf%2Fg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea02794eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18669,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13450)","md5":"96eb525c378ad970fb89fcf680148842","sha1":"d15695d5b0039a16ef584a26f2c2fecb28bfaa40","sha256":"374ca9b547554785b4a33d207ffc7f0aab4c3cf28b77414381b984f5dab10597","sha512":"9ae59be8b87efe3c8a0cf896ecd088f50844c2c55164b72c8112f899ab36f02718f6a0d296cbd71042e356331020e514377923403214f747193da939f4ab5ab1","ssdeep":"384:8ZhXJtVxwYAlHqZTgoDqs0SWx87P6NTYcmDxxxK7agpE7kj/V0D1M2i3X3:6hXJtVxwYAlHqZTgoDqs0SWx87P6Nis7","tlshash":"2382b62e88216a755f393ce1e83eb95dc19fe103841c98d0f4ae5e180bddcdbaa172d1","first_seen":"2026-01-18T09:03:08.988386Z","last_seen":"2026-01-18T09:03:08.988386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":154,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/wpm.1619.36c7464fcbf3bdd269a2.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:33.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/wpm.1619.36c7464fcbf3bdd269a2.js HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:26 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qu0CphRsINhut0bOWKeCYw02RS%2Fc9eTraeSe%2Fsx8zcDWaN3ruR%2BzYSL%2FT24n0EuSSMatXGIeomLlTbMvlnhxm8jS15W7Zqa%2FLmt1ypih%2FCoL%2FA%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:26 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea052997b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":499378,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65447)","md5":"b153164f84dd90bc2639c4c2ecbbc7de","sha1":"67f120a7ec82521e4c0d04f9ddb9b652fd682121","sha256":"58833da4deb87829abfab8031b257281a6d8cdb795fb443381791aff8cffa930","sha512":"73c561fc73a9e68109586031fb9096f08c80f3167565333eaac98c71752d55826bc05a1995142042ed8caef2f22e43e2e82f20f36f077193adce5bea11df5f32","ssdeep":"6144:XSzUGTtqbiHDOTIBMW2InFneMxpgz3uFCKiSiEAMlpYz1:XPGTtsiHSTIBM7InFn/gz3IiSiEDb41","tlshash":"90b43bbb328078a566538a8790bf2307a07d6d5fb109c471f7b4d8a3ac669d71027f6c","first_seen":"2025-10-23T07:28:12.214963Z","last_seen":"2026-01-18T09:03:08.996079Z","times_seen":12,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/privacy-pro-eligible.json","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/privacy-pro-eligible.json HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\ncache-control: s-maxage=600\r\nage: 0\r\nvary: Accept-Encoding\r\nx-cache: cp3070 miss, cp3070 miss\r\nx-cache-status: miss\r\nserver-timing: cache;desc=\"miss\", host;desc=\"cp3070\", cfExtPri\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nset-cookie: WMF-Last-Access=18-Jan-2026;Path=/;HttpOnly;secure;Expires=Thu, 19 Feb 2026 00:00:00 GMT\nWMF-Last-Access-Global=18-Jan-2026;Path=/;Domain=.wikipedia.org;HttpOnly;secure;Expires=Thu, 19 Feb 2026 00:00:00 GMT\nGeoIP=FR:IDF:Paris:48.86:2.35:v4; Path=/; secure; Domain=.wikipedia.org\nNetworkProbeLimit=0.001;Path=/;Secure;SameSite=None;Max-Age=3600\nWMF-Uniq=l7bzDv1g4E0sSNTWnU_4fgLsAAAAAFvd6vIOHUUog616XIeO5CCTx9ne3QNQOWUd;Domain=.wikipedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Mon, 18 Jan 2027 00:00:00 GMT\r\nx-client-ip: 2a06:c480:3200:0:fadb:88ff:fe00:b802\r\nx-request-id: 8d62d1fd-5f0f-4885-abb5-da5acf952172\r\nx-analytics: \r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: 9bfcea0859dfb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1742,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"09eaa0aff8ab84e1565a303615561658","sha1":"c4df7370904aec95a2863300554c78e7ca13d20c","sha256":"781586ea60c904658c888b4d13b20336b5f9181a3013262048b26de1c653db39","sha512":"7a5aa87f5654f84630c84b8965fecee8f3652535cac3d33cf947aa21f16fb941871fba366ee775332caeb16c8b606a25bee7ebecf0ec22930d4f506700a5f136","ssdeep":"","tlshash":"c13198afb342230b6303e2e8b953911c93375569a17b59f7bc520062c2cd625b17729a","first_seen":"2025-11-01T09:03:02.780984Z","last_seen":"2026-01-18T09:03:08.998227Z","times_seen":9,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 18 Jan 2026 09:02:35 GMT\r\ncache-control: max-age=1\r\nx-duckduckgo-locale: en_US\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6aFD%2BK%2FC%2FRSBIXV98ss5AzGMaCU2UtCp6W2viTjhOWrPuGbUUhSrO%2FlNsGg5jHPpp3mo6jFIu6T13TY3UhYmBAujfpfb2pX%2BsrJy2wb3ZztAQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0b3a72b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18663,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13444)","md5":"4a3bbcf9fd4585b199706c0b98294ffc","sha1":"ac04c23753b5304234220644cadc8f1e41a0476d","sha256":"eadc8108b58eb9d5fce207ea0ad47278450260b9a6f5eb2c323d2f000bafd62e","sha512":"f1951205b6ee40338c517a97677cfc00f8a020115f37a50be600a0f76464257d7827c8d90f66133805d1d8f9f200fa6e1da970b2bc218d1e5674aa34bf88eaf0","ssdeep":"384:8ZtXJtKwYAlHqZTgoDqs0SWx87LMYcmDxxxK7agpE7kjvV0D1M2i3X3:6tXJtKwYAlHqZTgoDqs0SWx87LzsvV06","tlshash":"f382b52e48216ab55f393ce1e83eb95dc1dfe102841c98d0f4ae5e1c0bdd89baa172d1","first_seen":"2026-01-18T09:03:08.899269Z","last_seen":"2026-01-18T09:03:08.899269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/font/DuckSansProduct-Medium.woff2","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /font/DuckSansProduct-Medium.woff2 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: text/html\r\nlocation: https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ous85LiqZxwRzbpuU0tUl0i5p5tnieLrzfk9EbLU%2F8yDz2ROrM5QfYrP0ofwuXES7mu9ZlDI2NmYyhl%2BWB3JebUTChoTqFYCOru383dE%2FqifXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0c0a8ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18669,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/improving.duckduckgo/t/ias_images?3088028\u0026fromWebTab=0\u0026initialState=inactive\u0026timeSincePageLoad=175\u0026timeSinceDeepStarted=0\u0026timeSinceDeepFinished=0\u0026tabPosition=1\u0026isBack=false\u0026recommendedTabOrder=videos,news,maps_expanded,products\u0026maxVisibleTabs=5\u0026displayedTabOrder=web,images,videos,news,maps_expanded,products\u0026q=DuckDuckGo%20AI%20Chat\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"POST /improving.duckduckgo/t/ias_images?3088028\u0026fromWebTab=0\u0026initialState=inactive\u0026timeSincePageLoad=175\u0026timeSinceDeepStarted=0\u0026timeSinceDeepFinished=0\u0026tabPosition=1\u0026isBack=false\u0026recommendedTabOrder=videos,news,maps_expanded,products\u0026maxVisibleTabs=5\u0026displayedTabOrder=web,images,videos,news,maps_expanded,products\u0026q=DuckDuckGo%20AI%20Chat\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nOrigin: https://6471.karponews.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sun, 18 Jan 2026 09:02:34 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=On2Vtqez%2Fjgej9dOtbOtRiuSEBHHPuA5ECI%2FCeuY36YwCBm3ydN9ghn5pZl%2FghILdtTGk2mFA0SePtoCsc4uOlA6N2imK%2BQWJNEHqcys4%2BBbnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea110afdb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/locale/en_US.492695971b23bb283578ba9c25998d89.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:32.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/locale/en_US.492695971b23bb283578ba9c25998d89.js HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:33 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:25 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S8kmXpPS8RsJTM0XnqUAjcSdLhU4Yqpb5dF6pR7mOEuuv%2FJzZDGXaoxd6rPOKGP1VlTjLm79S4LXpbb62%2BMZzASLxxwuuRefCBCrbM%2FQKDwrfg%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:25 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfce9fff917b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":189414,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Unicode text, UTF-8 text, with very long lines (65458), with no line terminators","md5":"95cc419f674df59e703c736a6bc1e171","sha1":"582817d29ccb6e4c28a5f747ebe763217714957f","sha256":"4b5d4d61fb0c41e8974b6aff49332aed6e23ce21485f967c835aa9642b3e790e","sha512":"78cb99920dba3e9d958a2883e337c90716d215bf587296914fc94e93710aae48449f4164c389fe6a105e7540698e4ba9b7cbebca073ec0fb2ea703a8f97960f2","ssdeep":"1536:nL0zgXNZvnW/O5WdmjFrp3CyhihvaUQ45QmrnvNM+wDp4mYzYh:LCgXNZvnZ8dmjFr/MJQ4rW+w14mQ2","tlshash":"8a0450d6d5842d270d82026dae31ff83edad70e73328427358fe8d68d3f5895122a59d","first_seen":"2026-01-18T09:03:08.999235Z","last_seen":"2026-01-18T09:03:08.999235Z","times_seen":1,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/dist/p.f5b58579149e7488209f.js","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6471.karponews.com/duckduckgo/post3.html","date":"2026-01-18T09:02:34.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/dist/p.f5b58579149e7488209f.js HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 18 Jan 2027 09:02:26 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2BJuUOFVr3Mb%2BjXXPxuwBajdUqW4Di4Nx2wo1euO%2BJqGAJleCW8SA9SLSfxmilJd7hWihQOUtrohnAPPm9EAv8TZH1wPcCUKIZQWQimcZgYLag%3D%3D\"}]}\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Jan 2026 09:02:26 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0769c0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":297,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"81061861e28008b28cf6b4bbc3265dd2","sha1":"5f167e01c02fb1bb2f15e1762dc294814d14aa6e","sha256":"6c7334db0f46b3c0b430ee760bb0ceedbfdae65522a5f1d30c9fcd447b5066e6","sha512":"21bc0abed844def04aa4909e2923c9fbc32f2d8ee4f9167353127aec35d7585d199fc335edbe41b4787903141a1c125c4014f9eb7f5d2482e5f921ad2301fce1","ssdeep":"","tlshash":"6ee0cd8e3b042a3c5ae2c15166df3546747766fa4911d41408646c906f34ecfb3767c7","first_seen":"2023-03-07T01:27:21Z","last_seen":"2026-03-11T12:58:20.356004Z","times_seen":82,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:34.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"GET /duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1 HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; userID=_ovb2wzdxl; sessionID=_trlnk1ozs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nserver-timing: total;dur=168;desc=\"Backend Total [n]\", cfExtPri\r\nx-detected-query-lang: en\r\nx-duckduckgo-results: 1\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 18 Jan 2026 09:02:35 GMT\r\ncache-control: max-age=1\r\nx-duckduckgo-locale: en_US\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2F8exwf834oagIlX7OtGZh5lkMJKfoKFJGWpHRYW%2FcvWngxgJ1hI9s6ydtejI%2Fs5aJbo%2F0RkRmE3SKQ4KhyPzrjH%2FSj4SRDCfoThtqZNpXDtSA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea0909f2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18667,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13448)","md5":"25dffe4262b0e7666fad870d95fc684f","sha1":"dd677654f861c03a2a59c75f524f529077788090","sha256":"508b1245da6a13f5b635fcd98ceceb05c87d481e4635fa4d3992f6437ed3dc55","sha512":"9cbeb365b04339a990a6de6b623d1583f3c825e4ad589ee57aff1d801282da6ba0d3720142507578ef47b14c93bdfd5d9f073aba43cfb0a65f3e09336262fe9d","ssdeep":"384:8ZXXJtVowYAlHqZTgoDqs0SWx877NkYcmDxxxK7agpE7kjJV0D1M2i3X3:6XXJtVowYAlHqZTgoDqs0SWx877N7sJj","tlshash":"4682b52e4821aab55e393ce1e83eb95dc19fe102841c98d0f4ae5f1c0bddcd7aa172d1","first_seen":"2026-01-18T09:03:09.002118Z","last_seen":"2026-01-18T09:03:09.002118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/improving.duckduckgo/t/ias_videos?1111913\u0026fromWebTab=0\u0026initialState=inactive\u0026timeSincePageLoad=175\u0026timeSinceDeepStarted=0\u0026timeSinceDeepFinished=0\u0026tabPosition=2\u0026isBack=false\u0026recommendedTabOrder=videos,news,maps_expanded,products\u0026maxVisibleTabs=5\u0026displayedTabOrder=web,images,videos,news,maps_expanded,products\u0026q=DuckDuckGo%20AI%20Chat\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"POST /improving.duckduckgo/t/ias_videos?1111913\u0026fromWebTab=0\u0026initialState=inactive\u0026timeSincePageLoad=175\u0026timeSinceDeepStarted=0\u0026timeSinceDeepFinished=0\u0026tabPosition=2\u0026isBack=false\u0026recommendedTabOrder=videos,news,maps_expanded,products\u0026maxVisibleTabs=5\u0026displayedTabOrder=web,images,videos,news,maps_expanded,products\u0026q=DuckDuckGo%20AI%20Chat\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nOrigin: https://6471.karponews.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sun, 18 Jan 2026 09:02:34 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TN0aPl5S27MhLsxKMk5im7iVhOE3PDApl5EPiyODCSxzx5nHCEnzl8tEWZs9Z5V3lfLS%2BED2BVmb20U1sdsU%2FD5KHA%2B6cPim%2FPdlkgpkRggEmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea110afeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/improving.duckduckgo/t/ias_news?1550033\u0026fromWebTab=0\u0026initialState=inactive\u0026timeSincePageLoad=176\u0026timeSinceDeepStarted=0\u0026timeSinceDeepFinished=0\u0026tabPosition=3\u0026isBack=false\u0026recommendedTabOrder=videos,news,maps_expanded,products\u0026maxVisibleTabs=5\u0026displayedTabOrder=web,images,videos,news,maps_expanded,products\u0026q=DuckDuckGo%20AI%20Chat\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"POST /improving.duckduckgo/t/ias_news?1550033\u0026fromWebTab=0\u0026initialState=inactive\u0026timeSincePageLoad=176\u0026timeSinceDeepStarted=0\u0026timeSinceDeepFinished=0\u0026tabPosition=3\u0026isBack=false\u0026recommendedTabOrder=videos,news,maps_expanded,products\u0026maxVisibleTabs=5\u0026displayedTabOrder=web,images,videos,news,maps_expanded,products\u0026q=DuckDuckGo%20AI%20Chat\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026isig=duck_duck_go:h\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026defaultfontexp=b\u0026defaultfontexpbe=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=c\u0026msvrtexp=b\u0026searchbarexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nOrigin: https://6471.karponews.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sun, 18 Jan 2026 09:02:34 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zXoor32JHNsv5kQwfUY3gUwuwIxvJNG4vytz4BRsEPZV2vXYOMre4xVhrbBf%2BzqERk8HHbKWI3ydLu4cKph45gKvK4zwTpP1Hor1UoFN%2Fc3%2BHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea111affb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6471.karponews.com/improving.duckduckgo/t/dc_error_free?6942689\u0026duckai=1\u0026tier=free\u0026msg=ERR_SAVED_CHATS_DATA_REMOVE\u0026origin=savedChats","fqdn":"6471.karponews.com","domain":"karponews.com","tld":"com"},"ip":{"addr":"104.21.31.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://6471.karponews.com/duckduckgo/?q=DuckDuckGo+AI+Chat\u0026ia=chat\u0026duckai=1","date":"2026-01-18T09:02:35.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karponews.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 03:35:56 GMT","end":"Mon, 13 Apr 2026 04:25:38 GMT"},"fingerprint":{"sha1":"C8:A1:C8:D9:4B:43:8D:43:0E:51:D5:4F:0E:6B:4B:B6:48:19:D1:FA","sha256":"9D:AF:B1:E8:89:AE:81:15:7D:33:83:5E:62:9B:E4:55:1D:83:22:58:92:57:23:4D:17:22:2F:86:F9:BC:26:67"}}},"request":{"raw":"POST /improving.duckduckgo/t/dc_error_free?6942689\u0026duckai=1\u0026tier=free\u0026msg=ERR_SAVED_CHATS_DATA_REMOVE\u0026origin=savedChats HTTP/1.1\r\nHost: 6471.karponews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://6471.karponews.com/\r\nOrigin: https://6471.karponews.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: userID=_ovb2wzdxl; sessionID=_trlnk1ozs; WMF-Last-Access=18-Jan-2026; NetworkProbeLimit=0.001\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 09:02:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sun, 18 Jan 2026 09:02:34 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ks67wPIxCh5Lb3R3uyqpQdn1%2BP5IB%2BGCF2i8coDOjqJa7VFBuA7xefhRpCVm3TMia%2BQUZoP76q0adB%2BBwzysCNEzCOeyJPp6jsrfkFn9KClLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bfcea113b0bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"6471.karponews.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}