{"report_id":"0a736792-2472-44cd-ba3a-c19ba9cabe16","version":0,"status":"done","tags":[],"date":"2026-08-09T10:03:16Z","url":{"schema":"http","addr":"4k7e.com/","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":0,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"4k7e.com/","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"title":"TikTok-shop","dom":{"size":47835,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26943)","md5":"5e5e447a5a2fe37ad7f8bc3208f88693","sha1":"6544d0a66225eb8569c68af10dd9542063c0dee6","sha256":"5c6a449601d001d2d66af54c2f6c60d66bdda516e58ca65a934a3af271b5501f","sha512":"ea733c595fa98ad437851dbaa0364fa3c273f99d29443029aaea2e03c77bc3e832b61d85ba34570e1fc2fedcc7483d5495d2eb3aafab14a80b946e237f1877ed","ssdeep":"768:xnQxUecoo4BER8Zejo8ckpq8jvnwk4MWIS+kYPI9:xnBoo3R8ZGo8ckprjvnLWISxZ","tlshash":"34238e34e26000ff582783ca69fabbdc714172ebe17589f075ac1a948fd1ed11a76c62","dom_hash":"domhash269a8db0c1b9ee89d46a2126175dcd82","first_seen":"2026-08-09T10:03:23.862653Z","last_seen":"2026-08-09T10:03:23.862653Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"4k7e.com/","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":0,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-13T10:03:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ipwho.is","ip":{"addr":"172.66.175.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-29","domain_rank":18239,"first_seen":"2020-06-08T11:52:47Z","last_seen":"2026-08-04T15:09:17.110796Z","alert_count":0,"request_count":1,"received_data":941,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"4k7e.com","ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":428,"request_count":107,"received_data":3528548,"sent_data":52965,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"get.geojs.io","ip":{"addr":"172.67.70.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-18","domain_rank":99948,"first_seen":"2017-03-30T18:44:25Z","last_seen":"2026-08-08T12:19:54.006197Z","alert_count":0,"request_count":1,"received_data":998,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ipapi.co","ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-08-06T02:29:54.037688Z","alert_count":0,"request_count":1,"received_data":2516,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.country.is","ip":{"addr":"104.26.1.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-01-30","domain_rank":253271,"first_seen":"2016-09-23T06:54:06Z","last_seen":"2026-08-05T16:11:51.945522Z","alert_count":0,"request_count":1,"received_data":689,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"4k7e.com/","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"351b6b18982fb822c981cead887eee02","sha1":"c73cdf9d7f0abffc1bb1cd33a3d45d0ee8c4ca46","sha256":"0c59ee6b69387754b8376c1758544ff48e699bdaabcd6906ec29ecfabf135638","sha512":"259d5aeeddd7fc5addd03d44953afa44d73941270a598fe7c2a815facbebd1fd458f566252e5e9b8ff15b58748b4fd810be3fec3c72ed87d1ba715d145cb0c0b","ssdeep":"","tlshash":"af415aa755d012628993723a0c9e14187237d1f75349aea0fc8d6b049fe893903bffc5","size":2079,"data":"","first_seen":"2026-08-09T01:57:14.729391Z","last_seen":"2026-08-09T10:03:38.914494Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9f29d183deb9b65ea2f2fd727c92d7a","sha1":"6ec1d6ce9879e36c8949d1f2acdfac621684a194","sha256":"a22ab944f6e7fb0355310afdef94a6aafc0e109ea4ead6dd849e4e1726fd716c","sha512":"ad0a1441118f3ff8b66d46edc9c26482c9efc843c513796de0ec7202155b06edfc6b1d57664d780f01662344a9b7a5c7c307a46099aa00cb96c0a73f1fd822cf","ssdeep":"","tlshash":"2ad05e1508e82030a06230504a3f6a68f32ac07309890d417f9ec71abf630a36b0a7cc","size":273,"data":"","first_seen":"2026-08-09T01:57:14.731298Z","last_seen":"2026-08-09T10:03:38.916116Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e11842aa1190e104b87cb5e97be7fe05","sha1":"f8587d3e7dcba55ceedbba654fc621e748ef5ceb","sha256":"6cba143733e3c1c5ec9e5cf2d5aa870b34989434957bbd3e0c9ca46e0d576fef","sha512":"523b5bae46481c556378c0cd3dfbc91e7cc075b91e262e7be909395e59b3924a6aa8304537b7b529f70f6e7abc0cea7c67f46666ccfe52d86e41944c4c760580","ssdeep":"","tlshash":"8151cb7a6fd820728a5731b8192fb60a3623c05b048e6d547f8d89407fa167b56f2ed8","size":2649,"data":"","first_seen":"2026-08-09T01:57:14.732541Z","last_seen":"2026-08-09T10:03:38.917148Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-09T13:48:46.144893Z","times_seen":41273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-09T13:48:46.145762Z","times_seen":42745,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/browser-upgrade-gate.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7a776ac10ca6bbae83ab908a5ecd79a","sha1":"d463aa32a659fc5990d02339d81338ece7afcfda","sha256":"9ea6dbf872bb9452eb381303db9199e285268aded904a0d14b7985a872902ccc","sha512":"a25967b2c2f3a443840fc12a457046634e33895ad8c3c95c4c0b1ff177418dbf605c16a4c1964d32e253a0b6882fab50cd6cbabb74cb01047dad95c066fa9ded","ssdeep":"384:quNGgJ6T3ftaYOfbQcfHhDITNCvGXg0AcJy15PyFhln:quNHJ6T3ftaYOze9Xgp5PGZ","tlshash":"e792a4e854977063457273ba9c6f8908fbb68223855f4523b87e41103ff05a883baf6d","size":20756,"data":"","first_seen":"2026-08-09T01:57:14.722502Z","last_seen":"2026-08-09T10:03:38.860565Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/freezeLoginSafeTop-1zVc48iP.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c06f4052c438a2c37b774bd413b444a0","sha1":"046156b5a4ebda644f2c6967086dc3a6ab90efe3","sha256":"0334ac42f1fbed36983db1d1847ebe92171a4ab68d07aceceb0dd120f13a57a7","sha512":"fecc3e6f6bbfcbab69d41d7962d6322e86187d5068b15964fb6a74c8bb0769bbcc74faee2e4d65a97eb12707801fe72f33e7440444a0370be9c591be8c882cbb","ssdeep":"","tlshash":"da01103821101830938d918ebc7dfb483d30056879639495506cce6a192dff99127cdd","size":747,"data":"","first_seen":"2026-08-09T01:57:14.632029Z","last_seen":"2026-08-09T10:03:38.855482Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/RegisterView-tCC31NK9.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b41631f5333dfe4706cc1b0e561fd820","sha1":"7b9eb9511af29e415d6566323dcb0788e228a85a","sha256":"2b61208fcba70d8e3c45dff4a694537d0a78542fb15e88768db99ba9bd11c751","sha512":"b34ae07332c81cec015c088c3c90a3dae6a3c224c33ae924773ea39b73ae11513fb84a521149b581a0ea7254580b553b4510cbfa6f979442a3cb74d80fda20a5","ssdeep":"384:4cbIkg+/kACpTfjE9OB4f1loRnJ+jsoCo3h:4cb9kACpTfY9u4f1loBJWQY","tlshash":"02620a0cf665253ebb73809c966f761530182713a41486f4dbbe0e303fe6d97953b2aa","size":14941,"data":"","first_seen":"2026-08-09T01:57:14.6905Z","last_seen":"2026-08-09T10:03:38.91172Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/vue-vendor-OsbTyNw5.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"84ea1fb2cb98ff93391e1191582baaf4","sha1":"3e488f601a781b03f1cdbffe3854351043446f9e","sha256":"616d26901bfcd6eb8551cbaa7a965f18af37025706dd14c1e47a1e2a4402a46d","sha512":"c5641870b153e648f15ef576e8492d0db404f5c61ea0ff01f240b132012760e293b00fb76baab75eca83f148204023871839a11d3fa8adc24f6247cd382c3d52","ssdeep":"768:mpBZo+keFuKFr8fyVAwsNZ0d/pCx7Cb05lbNLjiRV6+jrStd7BnT1ylCmJ8Rvp+E:Y7oYplvw9BnT1ECX7p","tlshash":"84c2e7a9328670a147b609e8507f2405f2751d94348e94e0b12cade73c77c9dd2bbebd","size":27895,"data":"","first_seen":"2026-08-09T01:57:14.666033Z","last_seen":"2026-08-09T10:03:38.86528Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/GateView-BcgCgiYz.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f903c889a4b1bda2592129f760ce9811","sha1":"0cb0bd1b264ce0ba4706f90b6253262286405a10","sha256":"dbe38cd20042b8bb710a02b42ad6280c4206ab05172ada6c2b1770391c090f2b","sha512":"7f19066d805112c1eb000c15cd40e5cc67f4a3ab78115f946142bf79f3ab8bbe7dc0ad1a73c4c2186ad5b173597fcba537ecc589c93b5d092a17e9d3ebf6d0c6","ssdeep":"","tlshash":"9741113eb461547b06e84498b23fef40b632035049a040f672bd4f4427a2db7bb6d0ea","size":2391,"data":"","first_seen":"2026-08-09T01:57:14.710121Z","last_seen":"2026-08-09T10:03:38.890651Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/verify-badge-Bc01xIP8.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d51479f8fb546a36e41f96d2ff923a20","sha1":"c0799aaee3f8e1af9eeb38e725c0fed32eaaf0d3","sha256":"68f298219a2fdcbd702faef9268f9a64ecbd8543dd196848819976145772c53f","sha512":"c2f77e4166ff84d2260dad1b17c7e21ce4593e1f615608c7ea9857a8c52061ef5e3cf64a593386a42fbdf7e00b09baa7e3b43cd264cbefcb7868a54450994f08","ssdeep":"","tlshash":"71310f8ed539abbc0c1acb2f06f03b60f0b60a5efb75ea6869b606047f4761110e4934","size":1859,"data":"","first_seen":"2026-08-09T01:57:14.680023Z","last_seen":"2026-08-09T10:03:38.88433Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/vendor-DaYEmORY.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0589fa80541267e05fe00b414eeaa978","sha1":"5da62ebd401d5814588e82079bb9f2d2dda3183b","sha256":"c33d947d1e02f5aacf9cb154c07c157565963bac601119034a71925b73de2ce2","sha512":"b65eb73e1266890f164785537243470ba7698a6f2e8bee5ff36dac0c0c5cd3808e51867937db50c6685ef1598dbffa35772c66f5815edcf447ff77ab93569e2f","ssdeep":"3072:LhIsSjAJ7MInbc4Lt8N502BavNILKQ5TqVv:Lm3wO102BavNILKQG1","tlshash":"38c327e43192b06253fa19e640770502f3396816384d88e8b1acaddf3d7654691fbfbd","size":127487,"data":"","first_seen":"2026-08-09T01:57:14.705591Z","last_seen":"2026-08-09T10:03:38.910324Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/login-kefu-chat.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5dce09a7bb37c0d6241914dbab03cb5","sha1":"806ea767f9f6b552bdbd5aab9cc5fa0abbef0ed6","sha256":"97d089e19e3fa8e3c0811706f95791d5b6971e9179361bf0949039332844d23f","sha512":"57547a58f4b2031c11db9433cd4fe330f1936e26536dd3b11a6f6f4424fa7e1d0be62ffe905117ed914f7d1d13727832d103ef44add001805176593becf2cf56","ssdeep":"1536:rfR8ZGo8ckprjvnLWhL/qb0wnyLnzho1LyUJOB4qoxTAFMWbVPM:rfR8YOkNfLsL/O0wnyLnzhsLyUJOB4q8","tlshash":"f4332a26a443743659b3e37ae8af9209f67741275077d021bdac80506ff096a037efe9","size":51698,"data":"","first_seen":"2026-08-09T01:57:14.630955Z","last_seen":"2026-08-09T10:03:38.897317Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/guest-kefu-login.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cfdea9232f6ff4bd7f0a86c38358634","sha1":"2d2ff1ce0fc52b3a670e13e00470aa205047fafd","sha256":"5cd0b01433d7143ff2cf511a5bf270bc98adf365a91f66371671f8403e8f37b1","sha512":"a5059a395f29e7bf442f864c269656efeefba4bc0ef22e8526f0fab8af8f0adb605ac9fbf80554bb1c83f9758edf3ff7df942611c47b23e2c3c05051f733c83d","ssdeep":"192:vsNrqQXiKTgAgfWpyFMQVjho3+9xAkx0y0FMVj6t6GOoTVZa2fcxml7fmW2J7bQB:vsH/T3MzrAkkFEI6mi+7fmWAgmflwdp","tlshash":"d622316b98e560321b43717919af9504b633c023000edd79beac4a647f9573a43ebfe9","size":10736,"data":"","first_seen":"2026-08-09T01:57:14.681117Z","last_seen":"2026-08-09T10:03:38.899702Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/PuzzleGate-CDyD2IMN.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d094f3e15652ca6262dc8a3bbdd008a","sha1":"a4c33a63c4172c5950a7581cecae2ad10eac035b","sha256":"dbb122f20b28a1eabaac5c1134bec3587cecebde0568398b022288f6c391f267","sha512":"175d2bb990b04f500ebfebce645011273671806c2639a79d9ed96ea71f4aec2fb994566385f7525f9c8023f155bad386059030426d2202de267b03e8fd355e84","ssdeep":"384:a22BLsfjoS/HOP2tLO3YSoIr3UVN3VifDO0211x9uatfS3iUMUVlpS:XYkoS/Hw2tUCIr3UVN3VifDO0211xUa5","tlshash":"bc82c9b0e32011fd846b83c449eab7d8221236b5b6b388f0316c5d4917b6dd9776ae71","size":18811,"data":"","first_seen":"2026-08-09T01:57:14.684737Z","last_seen":"2026-08-09T10:03:38.858694Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/LoginView-CTiyAKDy.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"52b41c31e78595f2e79c38392c6ecd5a","sha1":"91fc9df771f0aa3a244652b3fcdc2891921d054d","sha256":"618276033b48c289a95ef0c14b1e45e25b6991808a81fdaeb373972c0d4a43a5","sha512":"5e980fa908e84ee8d5aed704c09dd3f33b4130b82ef9f10982cb9f9a0f7ab439b26901ea63a2355a99464e0261a4a7887e3da714b24453b10e9e63518f3b2cda","ssdeep":"192:scC3iMNgIzf65RXwOACG4vbZlP2OLeflgVgPgv3lVaHvUJaw45LDipJs:s33i6f65OOACG41lPfLeiVYEHad+6","tlshash":"54e1b918f07a853af6a3c058716bbd2131182b655c108ef587f51f101feae17a61a5df","size":7225,"data":"","first_seen":"2026-08-09T01:57:14.719172Z","last_seen":"2026-08-09T10:03:38.883556Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/apiMsg-DVIUynXr.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b358e53947e596035463fdf410f3bc63","sha1":"192efe1a8b20df7d32aef8751d69e65c251780a0","sha256":"d925723a9865bd36648ce7f1cb33c97ed96257743ba2621dc05382e5350c4779","sha512":"7e9b754b6886127cf4abb48338dad7166b5090c49ece79c5133b5d59afcdc4b38f443415fe36cd1823480df57293fa77bebd0af7c36810214df7811ef0cef6ef","ssdeep":"96:TCecEIjlDxOMeM2gd91qmxyAoaMcm23KZ+Ikfu0:TCecEIjlDxOMeWd91Dtm238+vm0","tlshash":"8ba1c864f69eb6c330d66444387f48c470f2e2a3ed2c5f09a47681a793de9cb6a7b045","size":4864,"data":"","first_seen":"2026-08-09T01:57:14.66707Z","last_seen":"2026-08-09T10:03:38.902341Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/datetime-DTdMhzj9.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1228a734c040da8c37d249d5f3781ad0","sha1":"ea66a3b5a0e37c78cc340e5d669116f01363af82","sha256":"8f2158928dfa8025b559196c90372e3920530f1a320f2aa99fc5ffa4eabf50fa","sha512":"bef8c33e8701f40f79ba9da2afb43ef4df7514c5329805c312422ba43ec5d1e8634ffd9c3f51fa1e1876616e2ec619823711dad5080908ffc5ba5ae177e091db","ssdeep":"","tlshash":"956155a26687c154bbb90583927b0b41f72ee5577c068fe0d16f691a7a9bc02c22cf58","size":3333,"data":"","first_seen":"2026-08-09T01:57:14.676441Z","last_seen":"2026-08-09T10:03:38.863318Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/dy-592ODP5h.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aaead408f9b88e4e2e17355e1a58a4dd","sha1":"22aadd5ed90939688d38372635309282e78de4ec","sha256":"da998231064edde28881ea935c29a63cd5ea84c595c8190496e079e170576aef","sha512":"55122bb616be60ebede038153b76f24fdd813a98bbfc9ebe2a6d2675376223cd5dadebe9a639442160d9d271adbb54c46121a7d38a8fff6481cc5ca859b8929d","ssdeep":"","tlshash":"77900211440004a002193884826ac65010c012646525725584185d1abd19840504a825","size":50,"data":"","first_seen":"2026-08-09T01:57:14.700796Z","last_seen":"2026-08-09T10:03:38.905872Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/i18n-vendor-IYk7foiF.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ada196e88f53742422793f942d260872","sha1":"03c9efd22f309e1c0506ca77ed2133772e81089c","sha256":"bbe94b0f305034ae5ee68b1d6837b3f66d5c8340e2e26c56aee9d5e2494ac583","sha512":"570be3f72ac1f6ab8703ee458f003692d91b44faad1525ed9eb4875ecb8355aeb0c4dfe1e6715f006980911e0e55a28913c3881091c78a31069e52e6fa3e4580","ssdeep":"1536:q7V6NNo59QLLd4McxJxchPzASDGgNIveCb0+J:OVSNozQfd4McxJxch7ASDGgNYQ+J","tlshash":"455307d970d77016877a46ea60b30046bb3d2a58740dd894e0adea8b3e33c5983f7f58","size":64184,"data":"","first_seen":"2026-08-09T01:57:14.714841Z","last_seen":"2026-08-09T10:03:38.895771Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/index-C2awDlO6.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"54ff103b14a271de2bb5f61f125f7753","sha1":"b57a2c4a3f552a6854e360b1a16ca33b97f9305c","sha256":"0e3aa40a70677a0852d77cc2a8fbb3bc0bf65a564ef913cc6303448ac30d7411","sha512":"7a55ec99a62794d09c91b217f47f834908f8087af7beead5efcbe659dbfed9e8f363baead2ba9a3a983b1086e9c4b4b4454bd1954f134d180b146e0532a10464","ssdeep":"12288:O0NgRkOMOFwsgyK7CqhEGGXNYfYPVClL954MDXWb/UYNxWRqHnNbbKtjGBQAsKNF:kgE6lWB5VU8+8vCSbd","tlshash":"46b4ae3523db35ba0194db81e2c7b26835241d7bb60ee6e190f1ad6d25e110b8b76f33","size":538692,"data":"","first_seen":"2026-08-09T01:57:14.724146Z","last_seen":"2026-08-09T10:03:38.898852Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/validateImageFile-B9Sg2ojq.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"631767a1e65f3f7aca88ac7245e2b528","sha1":"83f37372cac846b91d04db2d63eda6bc49a21bc9","sha256":"d8ef3362f1f10cfe06628608cfdcc047dcf7988197e6cab1a58f64a13b9bef80","sha512":"3f30e21db8c6fb3cd3347e3d3d8998f2dd43427c6bb74705c66c5e39cf8acb11105164a04442286183010db8c474daf7c9058ec4ac8b76d5798263e77da80ba2","ssdeep":"","tlshash":"c55151c466b3187ad6e522913cd88708631e9e78310faed8f045bd430c1a5ab5afef03","size":2665,"data":"","first_seen":"2026-08-09T01:57:14.726396Z","last_seen":"2026-08-09T10:03:38.908213Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/LoginKefuView-idyi6fKA.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"623913268d48b6fe204942c983e0436e","sha1":"fb2e34525148c9c81499d0f133bdd107f98d448a","sha256":"248042a134e0957f3f8172fa9440d9b5d7e79ad1e20c2feaa02fd4ca9c1f3328","sha512":"1ca289c2ed516cecf37a4028fffa08ca01ecdb8568fb0e630548a520098c4f95ca96fd0d20b20b84015459d4a850bd0d0c3a63a07a485012d4effcfa637dec69","ssdeep":"192:l+LT6Tu/mCm5mtl2VLeyJoroa0tvPUyKcC8ZzFJOl0g78K7a57Ry60Mo/Mff+338:lcT6ymCm5mtEVLeyJo0agRu8ZzFJOl0t","tlshash":"32222c0cf199647bb772446491eb7015201c3ba6e01082e0e5f65f391babe623378f9b","size":10854,"data":"","first_seen":"2026-08-09T01:57:14.706977Z","last_seen":"2026-08-09T10:03:38.893842Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/polyfills-CU0JbG9M.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7818e4b29044ff046df99992a833f51","sha1":"3a5db2fb00e9228a4ea6febedc326f92db70499d","sha256":"7c823a510b4fcfd81b6fa002e11e982724c42d5f09d22cf36e636c9ecd21ee4b","sha512":"c8bc0ffafe7ed52654a4363a26ff6a11287cb8923221d15379851de6449f6175c7d9d463ad505220c1cff5e7a25bc9d5f72577f9a8abb315f1e21fd5508d4b6c","ssdeep":"1536:FzA0SKBnS7zzET4h9aYEN7hlztmHi69lN2cwdV8IEL3:FzJS7zGYEthlzUi6kcwdV8hr","tlshash":"a5b3d4c9f6d6f0a243e77061403f500bf23b5d59b80e9190e766d0e17cb9a8a817bf69","size":110461,"data":"","first_seen":"2026-08-09T01:57:14.68851Z","last_seen":"2026-08-09T10:03:38.882765Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"4k7e.com/static/images/guest-avatar.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:51.542Z","timestamp":1786269771542,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/guest-avatar.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Aug 2026 23:49:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a712927-3a97\"\r\nexpires: Tue, 08 Sep 2026 10:02:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14999,"size_decoded":15466,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"2d87b0a1dc32c5322f77a5a6429c9b97","sha1":"4e1e9da8fac38c7f8ab95931f132d75b810133a0","sha256":"32d16b02df340c374948a9fbc1ff545ef55e9413c92b80a8db1b3c7c699274ab","sha512":"8ef027da41e1625473ec181649cfca6dea4615a84213c565d981dd6e01786fb0fad37f58d34a557ab7277cf45141c44df20b8645129395f5bdc01eb6a2fd76a8","ssdeep":"192:3gYw2mzyEz4lP9O6JNEv9uVe/rlpeAlVJ9TaF8TDEVcq1SEumXLdTzHu1gz400Yx:3z1tlLANrtTeybqF/XxTzHBzGYx","tlshash":"8362c01f6ee4002e162f7485b6a02d12bfa12057085d1fc06f1c5bf2d7e489afbc66b6","first_seen":"2026-08-09T01:57:14.695298Z","last_seen":"2026-08-09T10:03:38.87718Z","times_seen":3,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/LoginKefuView-idyi6fKA.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.027Z","timestamp":1786269772027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/LoginKefuView-idyi6fKA.js HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-2a66\"\r\nexpires: Sun, 09 Aug 2026 22:02:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10854,"size_decoded":4857,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10585)","md5":"623913268d48b6fe204942c983e0436e","sha1":"fb2e34525148c9c81499d0f133bdd107f98d448a","sha256":"248042a134e0957f3f8172fa9440d9b5d7e79ad1e20c2feaa02fd4ca9c1f3328","sha512":"1ca289c2ed516cecf37a4028fffa08ca01ecdb8568fb0e630548a520098c4f95ca96fd0d20b20b84015459d4a850bd0d0c3a63a07a485012d4effcfa637dec69","ssdeep":"192:l+LT6Tu/mCm5mtl2VLeyJoroa0tvPUyKcC8ZzFJOl0g78K7a57Ry60Mo/Mff+338:lcT6ymCm5mtEVLeyJo0agRu8ZzFJOl0t","tlshash":"32222c0cf199647bb772446491eb7015201c3ba6e01082e0e5f65f391babe623378f9b","first_seen":"2026-08-09T01:57:14.706977Z","last_seen":"2026-08-09T10:03:38.893842Z","times_seen":3,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/dy-592ODP5h.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.030Z","timestamp":1786269772030,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/dy-592ODP5h.js HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 50\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\netag: \"6a72c45c-32\"\r\nexpires: Sun, 09 Aug 2026 22:02:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50,"size_decoded":567,"mime_type":"application/javascript","magic":"ASCII text","md5":"aaead408f9b88e4e2e17355e1a58a4dd","sha1":"22aadd5ed90939688d38372635309282e78de4ec","sha256":"da998231064edde28881ea935c29a63cd5ea84c595c8190496e079e170576aef","sha512":"55122bb616be60ebede038153b76f24fdd813a98bbfc9ebe2a6d2675376223cd5dadebe9a639442160d9d271adbb54c46121a7d38a8fff6481cc5ca859b8929d","ssdeep":"","tlshash":"77900211440004a002193884826ac65010c012646525725584185d1abd19840504a825","first_seen":"2026-08-09T01:57:14.700796Z","last_seen":"2026-08-09T10:03:38.905872Z","times_seen":3,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/browser-upgrade-gate.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:47.604Z","timestamp":1786269767604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /browser-upgrade-gate.js HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 Aug 2026 18:15:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a722c41-52f8\"\r\nexpires: Sun, 09 Aug 2026 22:02:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21240,"size_decoded":7697,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"d7a776ac10ca6bbae83ab908a5ecd79a","sha1":"d463aa32a659fc5990d02339d81338ece7afcfda","sha256":"9ea6dbf872bb9452eb381303db9199e285268aded904a0d14b7985a872902ccc","sha512":"a25967b2c2f3a443840fc12a457046634e33895ad8c3c95c4c0b1ff177418dbf605c16a4c1964d32e253a0b6882fab50cd6cbabb74cb01047dad95c066fa9ded","ssdeep":"384:quNGgJ6T3ftaYOfbQcfHhDITNCvGXg0AcJy15PyFhln:quNHJ6T3ftaYOze9Xgp5PGZ","tlshash":"e792a4e854977063457273ba9c6f8908fbb68223855f4523b87e41103ff05a883baf6d","first_seen":"2026-08-09T01:57:14.722502Z","last_seen":"2026-08-09T10:03:38.860565Z","times_seen":3,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get.geojs.io/v1/ip/country.json","fqdn":"get.geojs.io","domain":"geojs.io","tld":"io"},"ip":{"addr":"172.67.70.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:48.707Z","timestamp":1786269768707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geojs.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 09:05:21 GMT","end":"Sun, 13 Sep 2026 10:05:19 GMT"},"fingerprint":{"sha1":"B3:F2:DC:EC:52:71:F9:79:D2:00:8E:C8:AA:A1:86:8A:C1:E3:43:88","sha256":"11:6A:66:F9:3D:73:5D:D0:5E:A8:3D:AE:47:BE:47:E4:A4:52:BA:81:19:C0:F1:09:0A:1E:E0:7D:58:D9:26:39"}}},"request":{"raw":"GET /v1/ip/country.json HTTP/1.1\r\nHost: get.geojs.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nOrigin: https://4k7e.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: application/json\r\ncache-control: max-age=0, must-revalidate\r\nlast-modified: Sun, 09 Aug 2026 01:56:38 GMT\r\nx-request-id: 56ef00837e913095d6c32f6f261bee86-ASH\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ngeojs-backend: ash-01\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uUUIxgXtfxbdXG3anQNzEPU7LtaHQ0%2BYgBF4FTzERsXm77AhC3%2B51nH8tOGCPtctseMrLbk1kg5qEVzwcYhg8Rv8lnwPukLgRTqIFFYkofOEe%2BiDCW1p9g3%2BYV80Mg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nage: 29170\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nx-content-type-options: nosniff\r\ncf-ray: a285ed6689850b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73,"size_decoded":992,"mime_type":"application/json","magic":"JSON text data","md5":"46a6a0cb45e9fe8a937c1d379f58d2c5","sha1":"055617a08af5aa9a2aba05aa432407288c559367","sha256":"b09f253b6d83ab759c733d9bc894d8ab857dc68b5f1d96f91dbdb764ef816f37","sha512":"9331a0d3aec182cd05fa258fd0bdacca9d1a6d8a1d329d54b2f921435932c0f8d91b1bad9e7e82b118d21f754cecdc340b159d2b1d62a530349d6991b1a5dca5","ssdeep":"","tlshash":"32a0019e24a28b589860d2a5248a61a59586e64292aa6d0692c83b69da402dc6401271","first_seen":"2026-06-07T21:04:41.962532Z","last_seen":"2026-08-09T10:03:38.90734Z","times_seen":262,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":4,"connect":17,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-6.svg","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.039Z","timestamp":1786269772039,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-6.svg HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 330\r\nlast-modified: Thu, 30 Jul 2026 07:38:31 GMT\r\netag: \"6a6aff77-14a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":330,"size_decoded":770,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d2cf5a19c8d461980a0a94c20751997e","sha1":"71f862c0809a6744709833eced1a4fee4a2990f3","sha256":"998410ce1db07a05d1a08edefe12f0d20830fdb7d46d15e95e2e8fae4f19d498","sha512":"9c3e65ec6b612163a7334a1b2a291b3afdd27e0bdacc8d3d57eb3603321caefbc6ddbd2a87d4221e7393ff11d41bba3f31b5dc6e8e36c4f1c8e6759dfe0cfc15","ssdeep":"","tlshash":"6de0df1c936f901d44b6ce402f2828a6236eb1b97645059bba8e180534642edff53e54","first_seen":"2026-08-09T01:57:14.671511Z","last_seen":"2026-08-09T10:03:38.874152Z","times_seen":3,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-8.webp","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.212Z","timestamp":1786269772212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-8.webp HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 696\r\nlast-modified: Thu, 30 Jul 2026 07:39:26 GMT\r\netag: \"6a6affae-2b8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":696,"size_decoded":1133,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57f2f57eaee0d7dd49e00370c847166d","sha1":"563f42fbcdd46c4aa2e93fbd36faacc66005c1b3","sha256":"79d7b899dfdf2755502b12c610984e022c9501820be92987e64d9824ad97eb21","sha512":"8a3ee6a6e3f557d12319ca4cec307f3a117a4d04ef9d229cd80b8225b387587b5ead45d41c894c06c840788c969006886dfb273c4b5db1315cda1944cb193adb","ssdeep":"","tlshash":"0901eb381310539cf2206b7468c01f83fb79bc2583462604c25442230f288c1aeac1d7","first_seen":"2025-11-04T12:39:11.7712Z","last_seen":"2026-08-09T10:03:38.862303Z","times_seen":5,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-13.webp","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.380Z","timestamp":1786269772380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-13.webp HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 712\r\nlast-modified: Thu, 30 Jul 2026 07:40:36 GMT\r\netag: \"6a6afff4-2c8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":712,"size_decoded":1149,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8ab1dbb903c9213eefdd15f50a38a4c0","sha1":"45a243db870c5e8e1ec5d91d7999a78d0c0cc931","sha256":"00d2c3be29af9a2ee27467d780da183b7daaac631e6a8592e6f7b394b282a0b2","sha512":"f7f0567c49266b3fe2e4f9e471941dd4607acf7a54e1e39b3feaa8301f597f103dc2050bb36af9f5b6492bf935f92b94558ff4bdfdfc8510457a4d5c9dfe195c","ssdeep":"","tlshash":"f201e17973305b0cfa106a7c64d01babf7647c148747af0a814587262b60dc52cec69b","first_seen":"2025-11-04T12:39:11.784076Z","last_seen":"2026-08-09T10:03:38.858115Z","times_seen":5,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/kefu-icon.svg","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:47.623Z","timestamp":1786269767623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/kefu-icon.svg HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 551\r\nlast-modified: Mon, 03 Aug 2026 15:50:47 GMT\r\netag: \"6a70b8d7-227\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":551,"size_decoded":991,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cfcc26302f6dec3ad06329ad666cb7ad","sha1":"8c0758e077b8d7de63c671181b4417eb08ee6caa","sha256":"9e13590717471f21d52689fda2410204dd3cc174d3fdf3080a71797a4fe7d567","sha512":"fcb19c2c717af0fb8416c455866a301be9360571078e33608ca7a42c4f2aa83d9fd14ea5031373a43f392fd9afcd293d6597955e0115f77e2901cb441f9a8371","ssdeep":"","tlshash":"dcf0505a83281c2c75634738d39072350073594b271d6035a8753930460d59e7fbf6dd","first_seen":"2026-08-09T01:57:14.637463Z","last_seen":"2026-08-09T10:03:38.866475Z","times_seen":3,"resource_available":false,"data":null}},"time_used":747,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":306,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-1.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:51.535Z","timestamp":1786269771535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-1.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:37:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6aff21-f14\"\r\nexpires: Tue, 08 Sep 2026 10:02:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3860,"size_decoded":4387,"mime_type":"image/png","magic":"PNG image data, 171 x 128, 8-bit/color RGBA, non-interlaced","md5":"6a11a848800e26085a75723f79a3967d","sha1":"014f1e8f3a35e19c65279e53a0c132fa364a0e64","sha256":"6a9cb382f3467940118e0f1719f22cfa49412af83d51deaf947a16a6e44d8e13","sha512":"902f3102ce8af56d29b80b38f364cfae0f12e890811cf1edf983e416b8d898c35df62eb3fbee8ce0c5937753f114f7ee7b88f825918df0252eb1c3efdda01812","ssdeep":"","tlshash":"4d818e22a73e88b9c4725cfa05010966a8fc9a06d315b4e4f3a726dd4b7c3c7830e410","first_seen":"2025-11-04T12:39:11.812962Z","last_seen":"2026-08-09T10:03:38.868958Z","times_seen":5,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-16.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.552Z","timestamp":1786269772552,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-16.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 385\r\nlast-modified: Thu, 30 Jul 2026 07:42:04 GMT\r\netag: \"6a6b004c-181\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":385,"size_decoded":893,"mime_type":"image/png","magic":"PNG image data, 106 x 62, 8-bit/color RGBA, non-interlaced","md5":"24db6b9c0e21eb7d5d98e99067da9a10","sha1":"dd736ffd6b2bbeb6f33df02754a94d04d789a433","sha256":"d43b7078e562c104a4e53a5188d26b15332fb3c8b067e7aced5cde2d0553622e","sha512":"48f5c72ec82589f8b2a2fcc6577b46576ba821640396df4d8244b279b930626a9994f6cb8415320d13b099502e6d76fd5bba449db826a202b31a77083eb16373","ssdeep":"","tlshash":"aae0a7f6779db48ccf4b4613562e13225cb550bfb591110e6723682c47f988485e3350","first_seen":"2024-09-20T15:27:47Z","last_seen":"2026-08-09T10:03:38.887075Z","times_seen":116,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/vendor-DaYEmORY.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:47.607Z","timestamp":1786269767607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/vendor-DaYEmORY.js HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-1f1ff\"\r\nexpires: Sun, 09 Aug 2026 22:02:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":127487,"size_decoded":49977,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44858)","md5":"0589fa80541267e05fe00b414eeaa978","sha1":"5da62ebd401d5814588e82079bb9f2d2dda3183b","sha256":"c33d947d1e02f5aacf9cb154c07c157565963bac601119034a71925b73de2ce2","sha512":"b65eb73e1266890f164785537243470ba7698a6f2e8bee5ff36dac0c0c5cd3808e51867937db50c6685ef1598dbffa35772c66f5815edcf447ff77ab93569e2f","ssdeep":"3072:LhIsSjAJ7MInbc4Lt8N502BavNILKQ5TqVv:Lm3wO102BavNILKQG1","tlshash":"38c327e43192b06253fa19e640770502f3396816384d88e8b1acaddf3d7654691fbfbd","first_seen":"2026-08-09T01:57:14.705591Z","last_seen":"2026-08-09T10:03:38.910324Z","times_seen":3,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-4.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.033Z","timestamp":1786269772033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-4.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6aff50-17bc0\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97216,"size_decoded":93638,"mime_type":"image/png","magic":"PNG image data, 1280 x 853, 8-bit/color RGB, non-interlaced","md5":"a8e29efafeaf8b3fbb32b82c0e95ee73","sha1":"6d81c4b3144c1533e328a8d689afae642b30a594","sha256":"e93d5326085b2e1dd43ea027beede10a5f5b0b52f6e1b338af5aee2a21c345d5","sha512":"033f222fb745c3ed88fbdc4b779ea63bc93a247bb2bfd99b02f6d8620825a7b9e2ed5005b9782fe08d481da048b23801c13d61827b9a92d7f8401090f984e0dc","ssdeep":"1536:jGouyKc5uHx6HJBtPW0r2SOiNYpNjB9ofeEJIA7LnYaSOp5b8ylaZ8DHrLLQBJWh:jtDKc8iJjPTrCYSNj6eEJIQYrOphhaZ8","tlshash":"30930115d739f1e4914e383af2b7ac9ec299ab7f851a23c9d23338c390944749b48d69","first_seen":"2025-09-23T14:41:15.720194Z","last_seen":"2026-08-09T10:03:38.873436Z","times_seen":115,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-15.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.534Z","timestamp":1786269772534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-15.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 289\r\nlast-modified: Thu, 30 Jul 2026 07:41:51 GMT\r\netag: \"6a6b003f-121\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":289,"size_decoded":797,"mime_type":"image/png","magic":"PNG image data, 120 x 80, 1-bit colormap, non-interlaced","md5":"7b740440da8217f8e7340067bc7fec9b","sha1":"d0f90cdfde6bf3a4385334115b93229bf74de811","sha256":"f0ca66920e709dfef77417ad228f09df41c49358b34d8257f6bec8b7b59644b0","sha512":"f87d59540d423aa5b4baedbe995c8c3d0cd283409311628153a5a41734eed1b4143074249becb9abd3081cc40cf15844676c96c6aaa8916513dc3ac0350236eb","ssdeep":"","tlshash":"5dd07de1e1f68554c947510102061180fdb15b4621230b56e715e3098c2d6c149a4b42","first_seen":"2025-11-04T12:39:11.809489Z","last_seen":"2026-08-09T10:03:38.85382Z","times_seen":5,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-18.svg","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.710Z","timestamp":1786269772710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-18.svg HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 223\r\nlast-modified: Thu, 30 Jul 2026 07:42:38 GMT\r\netag: \"6a6b006e-df\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":223,"size_decoded":662,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f540417c1a9534a4ac5101c7817f279","sha1":"673638f2c685b3dd42e427d80c60723f89214efc","sha256":"4bd19c9a64d1579273e7ccfe111f82bbeb39d8061d8c1aa2dfb47d7bb33203df","sha512":"3e3a61c5a8eb421ad4216e94321c9ab329fb2f64d264f109daa1f285a5f9dc329a2982424ffb4aca500ef62394ddf80e5e5f2ce6f3f4f6ade79cc690ebdabd0c","ssdeep":"","tlshash":"1ad0239581247c5819188174c778bbe5c0f7f006614800d5f5f13015200d7eb7cf675d","first_seen":"2026-08-09T01:57:14.673154Z","last_seen":"2026-08-09T10:03:38.864099Z","times_seen":3,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/guest-kefu-login.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:47.613Z","timestamp":1786269767613,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /guest-kefu-login.js HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 Aug 2026 18:21:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a722da5-2a4e\"\r\nexpires: Sun, 09 Aug 2026 22:02:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10830,"size_decoded":4010,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1cfdea9232f6ff4bd7f0a86c38358634","sha1":"2d2ff1ce0fc52b3a670e13e00470aa205047fafd","sha256":"5cd0b01433d7143ff2cf511a5bf270bc98adf365a91f66371671f8403e8f37b1","sha512":"a5059a395f29e7bf442f864c269656efeefba4bc0ef22e8526f0fab8af8f0adb605ac9fbf80554bb1c83f9758edf3ff7df942611c47b23e2c3c05051f733c83d","ssdeep":"192:vsNrqQXiKTgAgfWpyFMQVjho3+9xAkx0y0FMVj6t6GOoTVZa2fcxml7fmW2J7bQB:vsH/T3MzrAkkFEI6mi+7fmWAgmflwdp","tlshash":"d622316b98e560321b43717919af9504b633c023000edd79beac4a647f9573a43ebfe9","first_seen":"2026-08-09T01:57:14.681117Z","last_seen":"2026-08-09T10:03:38.899702Z","times_seen":3,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/apiMsg-DVIUynXr.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:48.716Z","timestamp":1786269768716,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/apiMsg-DVIUynXr.js HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-1300\"\r\nexpires: Sun, 09 Aug 2026 22:02:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4864,"size_decoded":2417,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3407)","md5":"b358e53947e596035463fdf410f3bc63","sha1":"192efe1a8b20df7d32aef8751d69e65c251780a0","sha256":"d925723a9865bd36648ce7f1cb33c97ed96257743ba2621dc05382e5350c4779","sha512":"7e9b754b6886127cf4abb48338dad7166b5090c49ece79c5133b5d59afcdc4b38f443415fe36cd1823480df57293fa77bebd0af7c36810214df7811ef0cef6ef","ssdeep":"96:TCecEIjlDxOMeM2gd91qmxyAoaMcm23KZ+Ikfu0:TCecEIjlDxOMeWd91Dtm238+vm0","tlshash":"8ba1c864f69eb6c330d66444387f48c470f2e2a3ed2c5f09a47681a793de9cb6a7b045","first_seen":"2026-08-09T01:57:14.66707Z","last_seen":"2026-08-09T10:03:38.902341Z","times_seen":3,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/freezeLoginSafeTop-1zVc48iP.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:48.717Z","timestamp":1786269768717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/freezeLoginSafeTop-1zVc48iP.js HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 747\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\netag: \"6a72c45c-2eb\"\r\nexpires: Sun, 09 Aug 2026 22:02:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":747,"size_decoded":1266,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (746)","md5":"c06f4052c438a2c37b774bd413b444a0","sha1":"046156b5a4ebda644f2c6967086dc3a6ab90efe3","sha256":"0334ac42f1fbed36983db1d1847ebe92171a4ab68d07aceceb0dd120f13a57a7","sha512":"fecc3e6f6bbfcbab69d41d7962d6322e86187d5068b15964fb6a74c8bb0769bbcc74faee2e4d65a97eb12707801fe72f33e7440444a0370be9c591be8c882cbb","ssdeep":"","tlshash":"da01103821101830938d918ebc7dfb483d30056879639495506cce6a192dff99127cdd","first_seen":"2026-08-09T01:57:14.632029Z","last_seen":"2026-08-09T10:03:38.855482Z","times_seen":3,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/zg.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:51.235Z","timestamp":1786269771235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/zg.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 01 Aug 2026 00:14:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6d3a5e-3d71\"\r\nexpires: Tue, 08 Sep 2026 10:02:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15729,"size_decoded":16261,"mime_type":"image/png","magic":"PNG image data, 128 x 77, 8-bit/color RGBA, non-interlaced","md5":"2db7db6a7cac5c1d008a865ff81bffb1","sha1":"7e241c3c2301989184cf17a28432a60b25491f3d","sha256":"8398f274bc7daabd4c2a4e412045a362a3fd3aa7f76a8dc47c292ea36c85046b","sha512":"58bb60baacca4a4a6d0bf5484d7fb272499bab7ace8339fa126009ae8621adfe026ffcd40ec38540a43c911badf9ecb85d991511e5466d7e9e09ec797473923a","ssdeep":"384:fR652Xpmb5HnNVBGDmiQg4J+gksPdzWLTZAcg/UlS1ZXjuqLnv2VMWB:fRzcDVBm4zRdSQU8Jzbv2yE","tlshash":"3362c0d6d627c17eed181e4d6241f158749ca08f20bc0ac85883a58f5eacb9a3c76e4b","first_seen":"2026-08-09T01:57:14.627321Z","last_seen":"2026-08-09T10:03:38.850161Z","times_seen":3,"resource_available":false,"data":null}},"time_used":746,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":746,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-20.svg","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.718Z","timestamp":1786269772718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-20.svg HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 30 Jul 2026 07:43:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b0085-561\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1377,"size_decoded":1116,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0894cfd005d361c02e0968800c3835df","sha1":"4d26575475d446dffbbda2295ee06cad6088ebfa","sha256":"3522f321b5049f99a91201aace132c656d3b542bf66663e2b28f41f4a6d8f79e","sha512":"eb1ad188891a5beec7d238491263614f51bd2f39459b083293efcbcfd7c909d09693611436d26c88f6cc305d2d0dc0ec74e41c2e148e98e0688dd6e025a3fe5b","ssdeep":"","tlshash":"dc21c15dd12cd56dd897c1fccf5774f2a5afa16e72c2d314790d856625000eaf84f980","first_seen":"2026-08-09T01:57:14.71303Z","last_seen":"2026-08-09T10:03:38.859597Z","times_seen":3,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/target-login-cover.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:47.619Z","timestamp":1786269767619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/target-login-cover.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 May 2026 03:26:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a093579-41c00\"\r\nexpires: Tue, 08 Sep 2026 10:02:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":269312,"size_decoded":269648,"mime_type":"image/png","magic":"PNG image data, 562 x 346, 8-bit/color RGBA, non-interlaced","md5":"f3dbab5edcf97f15a178bbef54b1a7d4","sha1":"479b41913df720116b0261ed55e65533f809f209","sha256":"0c0774530f6a047f86a7e7a5fc09eb888cfaeb0c6cb75c7de008b564f40b29ba","sha512":"464d4eefe9377932b6814300a667e4db9b7a951eda406685e2f8aac12ac2f3fd1f752f9d3f666926e06e698fc36ade79a766e6e05819a41065bf215d82633996","ssdeep":"6144:50c+YaJIrojc8VWTRVgt8o3srVeYCiu9xSMK+3tiUyu0xo9S:LTaIKcQk0trc5eXhxCMyJP","tlshash":"c644233378b0b7b02917319247eb482b3529d4c78e73a8af2868d58d77c68d0ce75b55","first_seen":"2025-09-23T14:41:15.703899Z","last_seen":"2026-08-09T10:03:38.91102Z","times_seen":61,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/dy-cHxTr5JM.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:49.397Z","timestamp":1786269769397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/dy-cHxTr5JM.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-4f37\"\r\nexpires: Tue, 08 Sep 2026 10:02:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20279,"size_decoded":20822,"mime_type":"image/png","magic":"PNG image data, 282 x 282, 8-bit/color RGBA, non-interlaced","md5":"82ca0ad503d81ba4f7e7a090858c8cb4","sha1":"ad6d23ee52ab594ffbf773d1b534f7fd783c8271","sha256":"436c7a1d6f7c5e96720d0f0fa82b5d9bc9875d6b09e872e6904dc67584e9be68","sha512":"e90c3113ce6aebb10011cc4dbe8ef3f0c426ffec80b0d5e672692f81c197b2d23f7af9597b6fcc9b97989bf7b394f6dba1b02b6a3f91735ac9d6f940cf6a54e4","ssdeep":"384:ciucpNCcbnyF21dIzNg+hCWn/KfoIrIY+NH2sziOV9m223IjxFmeLLdspy:6cpUYC21duZlpuIYAWkiAYk8eXgy","tlshash":"8c92f15fa39b9e125eb9048fca071bc4e10975243bec48a58169f4c2437dc2fecba586","first_seen":"2026-08-09T01:57:14.645402Z","last_seen":"2026-08-09T10:03:38.872695Z","times_seen":3,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-5.webp","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.044Z","timestamp":1786269772044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-5.webp HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 284\r\nlast-modified: Thu, 30 Jul 2026 07:38:12 GMT\r\netag: \"6a6aff64-11c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284,"size_decoded":721,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3877b0647b7b9ac47b69d0ca9d6a937","sha1":"0888e31bb77ec453bd78bd3481bf5ebc044cb746","sha256":"626f53e02ef5fe7b0082dc971a3d94a5d5d8f6c1571a22c60fd34665504e3470","sha512":"dfa161ecbe45b581810c2e6e3c9f6adb7ec10842872f28acfcc786c6600a800382e9965de19042716189f5e41751a0416eec5230d059a599ed67ab3d405948aa","ssdeep":"","tlshash":"11d0ebaeea245140ae61686c33cd94140014260b38ece8c82a6f81adfd8e8033ea41f5","first_seen":"2024-09-20T15:27:47Z","last_seen":"2026-08-09T10:03:38.856333Z","times_seen":117,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-1.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:51.233Z","timestamp":1786269771233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-1.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:37:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6aff21-f14\"\r\nexpires: Tue, 08 Sep 2026 10:02:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3860,"size_decoded":4387,"mime_type":"image/png","magic":"PNG image data, 171 x 128, 8-bit/color RGBA, non-interlaced","md5":"6a11a848800e26085a75723f79a3967d","sha1":"014f1e8f3a35e19c65279e53a0c132fa364a0e64","sha256":"6a9cb382f3467940118e0f1719f22cfa49412af83d51deaf947a16a6e44d8e13","sha512":"902f3102ce8af56d29b80b38f364cfae0f12e890811cf1edf983e416b8d898c35df62eb3fbee8ce0c5937753f114f7ee7b88f825918df0252eb1c3efdda01812","ssdeep":"","tlshash":"4d818e22a73e88b9c4725cfa05010966a8fc9a06d315b4e4f3a726dd4b7c3c7830e410","first_seen":"2025-11-04T12:39:11.812962Z","last_seen":"2026-08-09T10:03:38.868958Z","times_seen":5,"resource_available":false,"data":null}},"time_used":747,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":747,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-12.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.539Z","timestamp":1786269772539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-12.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:40:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6affe9-3ec3\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16067,"size_decoded":16528,"mime_type":"image/png","magic":"PNG image data, 255 x 154, 8-bit/color RGBA, non-interlaced","md5":"6f83c7642bb0923aecc73346b2e1b580","sha1":"67c5b5691299be2df34c0d914b6bdcf8434ad65b","sha256":"af7104863ffc8d3f5320161fcc6146b67e70d0c3c67e93a26df3153310993fcf","sha512":"45262118ea24f7f8365dc5ea26647e3b515193a66feeea50c93c776b7a8dc5adf12543e03491dc5896cd49a22dd4b7456744bb91621be277f0d412cb1fbe22d1","ssdeep":"384:4FrnPOtltImFsefhfq+emszBIOcEyzwxFDeGqYmMCQ/:c7POtltIcsefh3elzB+zOFRqYfD","tlshash":"4072d0e420ce622cac09065f7d4ee4da0e83b9d0115e7dd16a37cd506eea6e3637252c","first_seen":"2025-09-23T14:41:15.724896Z","last_seen":"2026-08-09T10:03:38.857489Z","times_seen":116,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/i18n-vendor-IYk7foiF.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:47.609Z","timestamp":1786269767609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/i18n-vendor-IYk7foiF.js HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-fab8\"\r\nexpires: Sun, 09 Aug 2026 22:02:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64184,"size_decoded":20918,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26354)","md5":"ada196e88f53742422793f942d260872","sha1":"03c9efd22f309e1c0506ca77ed2133772e81089c","sha256":"bbe94b0f305034ae5ee68b1d6837b3f66d5c8340e2e26c56aee9d5e2494ac583","sha512":"570be3f72ac1f6ab8703ee458f003692d91b44faad1525ed9eb4875ecb8355aeb0c4dfe1e6715f006980911e0e55a28913c3881091c78a31069e52e6fa3e4580","ssdeep":"1536:q7V6NNo59QLLd4McxJxchPzASDGgNIveCb0+J:OVSNozQfd4McxJxch7ASDGgNYQ+J","tlshash":"455307d970d77016877a46ea60b30046bb3d2a58740dd894e0adea8b3e33c5983f7f58","first_seen":"2026-08-09T01:57:14.714841Z","last_seen":"2026-08-09T10:03:38.895771Z","times_seen":3,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/target-login-logo.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:48.731Z","timestamp":1786269768731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/target-login-logo.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 May 2026 03:26:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a09357a-cde9\"\r\nexpires: Tue, 08 Sep 2026 10:02:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52713,"size_decoded":52799,"mime_type":"image/png","magic":"PNG image data, 584 x 153, 8-bit/color RGBA, non-interlaced","md5":"f3dd0570340659ae29c7c5f966eebd83","sha1":"577fe0301597d05e28f0267163656f1222818fdf","sha256":"aeee186cab7fd029d4767a14aa469cedcd7ab01b78606e9a4eb61db61fc9ab38","sha512":"222cb79c0de636798aef127459f7111e326038f2256e77753fa72bdd7b92429d2a39858740b9a5f0e009e4ad584ef9a44e9d5eee49d23e21f15051b3227f3fea","ssdeep":"1536:UCm9xz1dhE/UBuAgKpekEshmxZlgV1VgiB4LZ9:NOxTsUNNWshmBgV1VgiB4V9","tlshash":"3833026f417afc11ca45a4b868e1ac8c19e6247108de84f4c6a3fc5eed22de475fcc19","first_seen":"2025-09-23T14:41:15.715845Z","last_seen":"2026-08-09T10:03:38.900936Z","times_seen":56,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-13.webp","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.379Z","timestamp":1786269772379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-13.webp HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 712\r\nlast-modified: Thu, 30 Jul 2026 07:40:36 GMT\r\netag: \"6a6afff4-2c8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":712,"size_decoded":1149,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8ab1dbb903c9213eefdd15f50a38a4c0","sha1":"45a243db870c5e8e1ec5d91d7999a78d0c0cc931","sha256":"00d2c3be29af9a2ee27467d780da183b7daaac631e6a8592e6f7b394b282a0b2","sha512":"f7f0567c49266b3fe2e4f9e471941dd4607acf7a54e1e39b3feaa8301f597f103dc2050bb36af9f5b6492bf935f92b94558ff4bdfdfc8510457a4d5c9dfe195c","ssdeep":"","tlshash":"f201e17973305b0cfa106a7c64d01babf7647c148747af0a814587262b60dc52cec69b","first_seen":"2025-11-04T12:39:11.784076Z","last_seen":"2026-08-09T10:03:38.858115Z","times_seen":5,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-19.svg","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.712Z","timestamp":1786269772712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-19.svg HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 309\r\nlast-modified: Thu, 30 Jul 2026 07:42:48 GMT\r\netag: \"6a6b0078-135\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":309,"size_decoded":749,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8890877fc281b3552728b534c6c75c3","sha1":"0954b54d485a581dec659d0f3437de3e91800110","sha256":"7d51020bf2ac5b6f5d54aa54e5c61550aea276b411e141fc478b391915ee8fe5","sha512":"dc11cef2ae2002e801c4eeb790a623023733a0bd2523a917b18efdcdfb7ed8bdb7d35ff9e47f5c75ebc9012c7c84a385496c85dd87a01a5b764cc0dffdc536b6","ssdeep":"","tlshash":"f6e07de461341c0441a143358e7ca8c6018f70c6200502edf01821b81a0abef7f19d58","first_seen":"2026-08-09T01:57:14.665031Z","last_seen":"2026-08-09T10:03:38.85458Z","times_seen":3,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/live-gate-p3.jpg","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:49.033Z","timestamp":1786269769033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/live-gate-p3.jpg HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Jul 2026 21:13:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a691b94-40e0\"\r\nexpires: Tue, 08 Sep 2026 10:02:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16608,"size_decoded":16887,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 400x200, components 3","md5":"880dff5e362068334b4c15281b3b5c44","sha1":"535cf5b5d3bf8730787d2bb5e025d742862b7e65","sha256":"d395cf0fda92428b62c27d5ef64b7f0f6996ab5a2451eca764480ad88c9be5af","sha512":"806994d0ab09a267bfd663178b8839b1372115430014247383d4608ff9eca5327934299f51f191650f38892d8008e79dff645ab4f1d62d64828fe1de7d4e5fb3","ssdeep":"384:mFkq82ThQkRn7AJiro2QsmPaFWdLkWFjaBhAKjrt:2kwQw7PopZTdLkOuWKPt","tlshash":"6872d1979f947063db3205bc22ce1357d321998466d269734ef83b39cd19eb064a875c","first_seen":"2026-08-09T01:57:14.678897Z","last_seen":"2026-08-09T10:03:38.912851Z","times_seen":3,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-2.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:51.236Z","timestamp":1786269771236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-2.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:37:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6aff2d-ad7\"\r\nexpires: Tue, 08 Sep 2026 10:02:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2775,"size_decoded":3317,"mime_type":"image/png","magic":"PNG image data, 144 x 66, 8-bit/color RGBA, non-interlaced","md5":"dfefe9b4410eca973b5959cf8ce10468","sha1":"1f13e548524639a1cb42073ecfeb1523d1a92df8","sha256":"b1621b61eee7735f889ae31fe324def94907c972065d609976d1b36eaaa8bcf6","sha512":"a73ff563908e59bc9323bdc2cd5a3340e11da8793ae34187806c40e9c5e241ba764db70a216c347a41e782af9a014758e84c46e1395bcf6135c713c2da729337","ssdeep":"","tlshash":"f7514bf355646a41db8b8576c3a22017b802bca68eabef85c4d0dbb3740ff4848588c3","first_seen":"2025-09-23T14:41:15.736382Z","last_seen":"2026-08-09T10:03:38.851557Z","times_seen":115,"resource_available":false,"data":null}},"time_used":746,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":746,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-15.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.546Z","timestamp":1786269772546,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-15.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 289\r\nlast-modified: Thu, 30 Jul 2026 07:41:51 GMT\r\netag: \"6a6b003f-121\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":289,"size_decoded":797,"mime_type":"image/png","magic":"PNG image data, 120 x 80, 1-bit colormap, non-interlaced","md5":"7b740440da8217f8e7340067bc7fec9b","sha1":"d0f90cdfde6bf3a4385334115b93229bf74de811","sha256":"f0ca66920e709dfef77417ad228f09df41c49358b34d8257f6bec8b7b59644b0","sha512":"f87d59540d423aa5b4baedbe995c8c3d0cd283409311628153a5a41734eed1b4143074249becb9abd3081cc40cf15844676c96c6aaa8916513dc3ac0350236eb","ssdeep":"","tlshash":"5dd07de1e1f68554c947510102061180fdb15b4621230b56e715e3098c2d6c149a4b42","first_seen":"2025-11-04T12:39:11.809489Z","last_seen":"2026-08-09T10:03:38.85382Z","times_seen":5,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/server/index.php?s=user%2FgetClientTimezone\u0026lang=en","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:48.708Z","timestamp":1786269768708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"POST /server/index.php?s=user%2FgetClientTimezone\u0026lang=en HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nX-Requested-With: XMLHttpRequest\r\nX-Lang: en\r\nX-HTTP-Method-Override: POST\r\nContent-Length: 3\r\nOrigin: https://4k7e.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3,"data":"_=1"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://4k7e.com\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Accept, Authorization, X-Auth-Token, TOKEN, User_id, X-User-Id, lang\r\naccess-control-max-age: 86400\r\nset-cookie: think_lang=en; path=/; secure; HttpOnly; SameSite=lax\nthink_var=en; path=/; secure; HttpOnly; SameSite=lax\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140,"size_decoded":969,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"411571927650326bbabe45d2d810ec3c","sha1":"1db382e37305f051761c1718ceccb9badb3b95e0","sha256":"22c03131a3f542371acc803d070e6f363f61b919ec5f4a18b2ac23208d53fe3b","sha512":"3eb7e6b5ada22a47dddc76d3bce8bfb86f10d39560692b7a73bd12413cdd390aff26d4a7e829edb43fd8b8d7390a78337cfd1aed2a71877a67e1a1a941b8ba31","ssdeep":"","tlshash":"5ac08c6850bc4e088829f28008186ba0839e21568286470287c82f28c5880cc7000232","first_seen":"2026-08-09T10:03:23.926001Z","last_seen":"2026-08-09T10:03:23.926001Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/live-gate-p4.jpg","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:49.035Z","timestamp":1786269769035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/live-gate-p4.jpg HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Jul 2026 21:13:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a691b95-4a1f\"\r\nexpires: Tue, 08 Sep 2026 10:02:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18975,"size_decoded":19316,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 400x200, components 3","md5":"954c59fac1031bf4e0c23b922cee6afc","sha1":"9d2982ac22fa48bd40fe24559f554a7e1e98bdd0","sha256":"0c6b663286696568809658cfde4fea7c652d2aa5850881d425fb2b8116be2dd5","sha512":"d5a6f47f020d6d5308c6411ed2ad5b4e59e0e2f953ecd097d62af7cfd9d8cebd716803becdee3aa9d2160073869062870250f65171d4a0cd9ba08dfe4220d5e5","ssdeep":"384:mB+Oydzf21noCAywDc29pOae/proch/IcrSCOI70QCXQyejLiFGpOW/:+Wzu1noCrwppTAO8IcrSCDoXrejLC3W/","tlshash":"9982c044ef1a540af31943f3463297ecdb5f083aa41e016a16013e7cee7a963da758f4","first_seen":"2026-08-09T01:57:14.654154Z","last_seen":"2026-08-09T10:03:38.903513Z","times_seen":3,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-7.webp","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.042Z","timestamp":1786269772042,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-7.webp HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1226\r\nlast-modified: Thu, 30 Jul 2026 07:39:03 GMT\r\netag: \"6a6aff97-4ca\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1226,"size_decoded":1664,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ba5cd4227f364d7352ecbae3f52755b9","sha1":"185affbcb73ce0bb9d387540a0bb76f8124d1bb6","sha256":"732c470ec17955a4153f539dbf0ec15be8f72e1bd8835b40e347362ddb904878","sha512":"bdac851e35756c0990c8fa99d62ed3336a1f7bfa1e637a1ebb6d92f977c1f18b77a5bb91f8346f184cc42413edcc033ce176e293ed1afaa4e95d947fe132edb7","ssdeep":"","tlshash":"9b21b6387331177cfd56767570d70fc1f7a5b8318e065229c04043b56f004c6b898847","first_seen":"2025-11-04T12:39:11.815319Z","last_seen":"2026-08-09T10:03:38.867642Z","times_seen":5,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-10.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.356Z","timestamp":1786269772356,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-10.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:39:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6affc2-d57\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3415,"size_decoded":3912,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"9f517a3b698397cfe134b9365d07780c","sha1":"e6b2166c92edee16d45ad2d7188f222beeff9336","sha256":"073fe4ef0f344d6a5c4ec446d3d8c3e78b5094cbe231beca7748775b1c0ce32f","sha512":"d280e132dee925ea1176d93e52777d6246c3d45069de17211acd41dfaf6b80a6ed07e7d985c024a1790420c5666e1a4e1c56d882e26e2363099431dcd01a1ca7","ssdeep":"","tlshash":"d3614d227c6b2fdd8afc3772a44e05685b7a81b35dc1eae2cd25486c9f20b81c601d47","first_seen":"2025-11-04T12:39:11.81643Z","last_seen":"2026-08-09T10:03:38.879928Z","times_seen":5,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-9.webp","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.364Z","timestamp":1786269772364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-9.webp HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 106\r\nlast-modified: Thu, 30 Jul 2026 07:39:35 GMT\r\netag: \"6a6affb7-6a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106,"size_decoded":542,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a223550b119986b732d2c8d134080df4","sha1":"68bf178ded653d1b2671972688ae49318e69ed3f","sha256":"bf7fbf191bea62cbf4ad4fb31631bf3fa75ea05af5fab02fed2c3aa0080a60a6","sha512":"03d75414f96bcf513873dee570de9c0df4c49133d050e36870af85e3a8948b509e4ebb3c46a49110b585dba2c503916888b6562fbeee83bdc6ecdc15f54c6e0c","ssdeep":"","tlshash":"12b01215c802a22a554c655307c75f24012400629178d9f164b32e707454a821270a0c","first_seen":"2025-09-23T14:41:15.721881Z","last_seen":"2026-08-09T10:03:38.856914Z","times_seen":106,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-14.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.545Z","timestamp":1786269772545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-14.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:41:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b000e-1904\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6404,"size_decoded":6652,"mime_type":"image/png","magic":"PNG image data, 171 x 128, 8-bit/color RGBA, non-interlaced","md5":"e68b04304ee7e8604ccb7890184001ea","sha1":"5e4133ae4b5008e22b88d44e50d9e8c9b21ffbc6","sha256":"e1b3229865c3209360b37eefe5ce2409b10b7b8409b4749646a12e783b685f17","sha512":"7339cc401c2dd4f9fde5ff1eb6e8d3610f68d9dfb2791360ae694cbfbd6447ff58833e2af65e835f3115c6d1bc728d9c05a110e6438e1c23464b865208e23f5b","ssdeep":"96:vH2ArtZcgaJIej9TcW27Vo+tfUH66Jj0zt2iPdD2qV/+Xpi6mK7Ce6WhD93:trtZcgaOVo+tfFkIFPd1VWZ6KmtWd9","tlshash":"f4d16c3ce950b2ffdb85292f4a502569e948682e33875fe2c253d25ed64760fb051e38","first_seen":"2025-11-04T12:39:11.767716Z","last_seen":"2026-08-09T10:03:38.881831Z","times_seen":5,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/datetime-DTdMhzj9.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.029Z","timestamp":1786269772029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/datetime-DTdMhzj9.js HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-d05\"\r\nexpires: Sun, 09 Aug 2026 22:02:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3333,"size_decoded":1777,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3332)","md5":"1228a734c040da8c37d249d5f3781ad0","sha1":"ea66a3b5a0e37c78cc340e5d669116f01363af82","sha256":"8f2158928dfa8025b559196c90372e3920530f1a320f2aa99fc5ffa4eabf50fa","sha512":"bef8c33e8701f40f79ba9da2afb43ef4df7514c5329805c312422ba43ec5d1e8634ffd9c3f51fa1e1876616e2ec619823711dad5080908ffc5ba5ae177e091db","ssdeep":"","tlshash":"956155a26687c154bbb90583927b0b41f72ee5577c068fe0d16f691a7a9bc02c22cf58","first_seen":"2026-08-09T01:57:14.676441Z","last_seen":"2026-08-09T10:03:38.863318Z","times_seen":3,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-13.webp","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.540Z","timestamp":1786269772540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-13.webp HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 712\r\nlast-modified: Thu, 30 Jul 2026 07:40:36 GMT\r\netag: \"6a6afff4-2c8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":712,"size_decoded":1149,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8ab1dbb903c9213eefdd15f50a38a4c0","sha1":"45a243db870c5e8e1ec5d91d7999a78d0c0cc931","sha256":"00d2c3be29af9a2ee27467d780da183b7daaac631e6a8592e6f7b394b282a0b2","sha512":"f7f0567c49266b3fe2e4f9e471941dd4607acf7a54e1e39b3feaa8301f597f103dc2050bb36af9f5b6492bf935f92b94558ff4bdfdfc8510457a4d5c9dfe195c","ssdeep":"","tlshash":"f201e17973305b0cfa106a7c64d01babf7647c148747af0a814587262b60dc52cec69b","first_seen":"2025-11-04T12:39:11.784076Z","last_seen":"2026-08-09T10:03:38.858115Z","times_seen":5,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-10.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.365Z","timestamp":1786269772365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-10.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:39:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6affc2-d57\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3415,"size_decoded":3912,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"9f517a3b698397cfe134b9365d07780c","sha1":"e6b2166c92edee16d45ad2d7188f222beeff9336","sha256":"073fe4ef0f344d6a5c4ec446d3d8c3e78b5094cbe231beca7748775b1c0ce32f","sha512":"d280e132dee925ea1176d93e52777d6246c3d45069de17211acd41dfaf6b80a6ed07e7d985c024a1790420c5666e1a4e1c56d882e26e2363099431dcd01a1ca7","ssdeep":"","tlshash":"d3614d227c6b2fdd8afc3772a44e05685b7a81b35dc1eae2cd25486c9f20b81c601d47","first_seen":"2025-11-04T12:39:11.81643Z","last_seen":"2026-08-09T10:03:38.879928Z","times_seen":5,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/live-gate-p1.jpg","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:49.029Z","timestamp":1786269769029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/live-gate-p1.jpg HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Jul 2026 21:13:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a691b90-19d4\"\r\nexpires: Tue, 08 Sep 2026 10:02:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6612,"size_decoded":6907,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 400x200, components 3","md5":"cb0faa196313281434d50c8b47a4982e","sha1":"1ba3aa350ee1c9510d075ce5048b380f42f668be","sha256":"9c32066acf0c80b93345a267f764a741d1499f4a3aca2ccaebf3f5c21281343f","sha512":"893531e0a71e53bdde2f16832538efd44c4086b7ac845c715df5a8705b49d10efd0a56e75c0ab1f0ef826c9cf5afca3d0c9267f02a2406802f5ca6c09c270604","ssdeep":"96:mQhLJeWSdipERQbn5vJ5e1fMkFGQ9LLEDAab5UcOOAzJQuZc9pgVsLRD/A:m29eNdidbn5vJ4NZLWAab542Z9gs90","tlshash":"6ad15b2ea7143902db276b35931879a9da119e863a6066bed1527c10ecfccf09cd02f5","first_seen":"2026-08-09T01:57:14.638785Z","last_seen":"2026-08-09T10:03:38.888897Z","times_seen":3,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-7.webp","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.046Z","timestamp":1786269772046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-7.webp HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1226\r\nlast-modified: Thu, 30 Jul 2026 07:39:03 GMT\r\netag: \"6a6aff97-4ca\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1226,"size_decoded":1664,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ba5cd4227f364d7352ecbae3f52755b9","sha1":"185affbcb73ce0bb9d387540a0bb76f8124d1bb6","sha256":"732c470ec17955a4153f539dbf0ec15be8f72e1bd8835b40e347362ddb904878","sha512":"bdac851e35756c0990c8fa99d62ed3336a1f7bfa1e637a1ebb6d92f977c1f18b77a5bb91f8346f184cc42413edcc033ce176e293ed1afaa4e95d947fe132edb7","ssdeep":"","tlshash":"9b21b6387331177cfd56767570d70fc1f7a5b8318e065229c04043b56f004c6b898847","first_seen":"2025-11-04T12:39:11.815319Z","last_seen":"2026-08-09T10:03:38.867642Z","times_seen":5,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-8.webp","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.210Z","timestamp":1786269772210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-8.webp HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 696\r\nlast-modified: Thu, 30 Jul 2026 07:39:26 GMT\r\netag: \"6a6affae-2b8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":696,"size_decoded":1133,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57f2f57eaee0d7dd49e00370c847166d","sha1":"563f42fbcdd46c4aa2e93fbd36faacc66005c1b3","sha256":"79d7b899dfdf2755502b12c610984e022c9501820be92987e64d9824ad97eb21","sha512":"8a3ee6a6e3f557d12319ca4cec307f3a117a4d04ef9d229cd80b8225b387587b5ead45d41c894c06c840788c969006886dfb273c4b5db1315cda1944cb193adb","ssdeep":"","tlshash":"0901eb381310539cf2206b7468c01f83fb79bc2583462604c25442230f288c1aeac1d7","first_seen":"2025-11-04T12:39:11.7712Z","last_seen":"2026-08-09T10:03:38.862303Z","times_seen":5,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-15.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.533Z","timestamp":1786269772533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-15.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 289\r\nlast-modified: Thu, 30 Jul 2026 07:41:51 GMT\r\netag: \"6a6b003f-121\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":289,"size_decoded":797,"mime_type":"image/png","magic":"PNG image data, 120 x 80, 1-bit colormap, non-interlaced","md5":"7b740440da8217f8e7340067bc7fec9b","sha1":"d0f90cdfde6bf3a4385334115b93229bf74de811","sha256":"f0ca66920e709dfef77417ad228f09df41c49358b34d8257f6bec8b7b59644b0","sha512":"f87d59540d423aa5b4baedbe995c8c3d0cd283409311628153a5a41734eed1b4143074249becb9abd3081cc40cf15844676c96c6aaa8916513dc3ac0350236eb","ssdeep":"","tlshash":"5dd07de1e1f68554c947510102061180fdb15b4621230b56e715e3098c2d6c149a4b42","first_seen":"2025-11-04T12:39:11.809489Z","last_seen":"2026-08-09T10:03:38.85382Z","times_seen":5,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-17.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.556Z","timestamp":1786269772556,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-17.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 903\r\nlast-modified: Thu, 30 Jul 2026 07:42:20 GMT\r\netag: \"6a6b005c-387\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":903,"size_decoded":1411,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"de5f751b90adbb7268cc6d8b505ea4b7","sha1":"7f9e37c37b2774ff363b5018d33063d09f44a015","sha256":"30e5cfe4c4f017c43f1263debe543edc548c944875975cb2a1bbc91427d129d9","sha512":"b2556311bddccd35fc6d1c1c0f8551bfc9669b1e733540b6be8fa017b1dcea02814de08b3b014d0e87de6ef4746da1ca0b8415bdf8b0304fdcd09ddb0dd8e57e","ssdeep":"","tlshash":"7d114471d15d8c749c8b7d466a15130b8502436fc5531f900a2f2c0a1d17166dec77de","first_seen":"2026-08-09T01:57:14.629107Z","last_seen":"2026-08-09T10:03:38.874923Z","times_seen":3,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:48.727Z","timestamp":1786269768727,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 05:11:37 GMT","end":"Sun, 13 Sep 2026 06:11:34 GMT"},"fingerprint":{"sha1":"CE:63:0D:F2:C0:D2:04:93:CA:AE:0D:AA:ED:9F:31:01:7A:BC:69:40","sha256":"0D:2E:E4:8D:BD:B6:76:95:B5:BD:B8:C5:CE:61:98:B9:6E:81:B5:4B:16:5C:C0:0C:C9:FB:54:0B:B4:A6:7C:65"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nOrigin: https://4k7e.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: OPTIONS, HEAD, POST, GET, OPTIONS\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://4k7e.com\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://challenges.cloudflare.com/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iN27dHKZM0jgYbQQgwmXsm68jYqsxLfBt125KSx5MxLPXBRBF3VkswdZm3r3mI7uQzskSHgUlIF8xZE2GRVeOOPzWfRpNBe446QTsyDdL27CSGyx9i0IWori\"}]}\r\ncontent-encoding: br\r\ncf-ray: a285ed66aa28c759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":742,"size_decoded":2124,"mime_type":"application/json","magic":"JSON text data","md5":"c072daa1c2cda30d0f3f81ca812ae319","sha1":"d5445a8099ed4730982271c1ed6f80fa78de8c14","sha256":"33c5189253a521d59112bc6a96710c6dee86b2d05e85e945f5bd56ac736c425c","sha512":"84df51623e52eb7458514c9b46c5fac80f3293a9123643f4f411ee7fbaec100ce117dd72327d9a9c16254ab67b90c36d536b902c003b5a10c304974f44478743","ssdeep":"","tlshash":"f6012f68e4780e7b9cb813587078690b103422176e523a8e7bc0a74d0f8d8bf30b035e","first_seen":"2026-08-03T13:31:59.23668Z","last_seen":"2026-08-09T12:51:08.125387Z","times_seen":243,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":4,"connect":5,"send":0,"wait":199,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-18.svg","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.693Z","timestamp":1786269772693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-18.svg HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 223\r\nlast-modified: Thu, 30 Jul 2026 07:42:38 GMT\r\netag: \"6a6b006e-df\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":223,"size_decoded":662,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f540417c1a9534a4ac5101c7817f279","sha1":"673638f2c685b3dd42e427d80c60723f89214efc","sha256":"4bd19c9a64d1579273e7ccfe111f82bbeb39d8061d8c1aa2dfb47d7bb33203df","sha512":"3e3a61c5a8eb421ad4216e94321c9ab329fb2f64d264f109daa1f285a5f9dc329a2982424ffb4aca500ef62394ddf80e5e5f2ce6f3f4f6ade79cc690ebdabd0c","ssdeep":"","tlshash":"1ad0239581247c5819188174c778bbe5c0f7f006614800d5f5f13015200d7eb7cf675d","first_seen":"2026-08-09T01:57:14.673154Z","last_seen":"2026-08-09T10:03:38.864099Z","times_seen":3,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/index-B7sguwFr.css","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:47.611Z","timestamp":1786269767611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/index-B7sguwFr.css HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-67a9\"\r\nexpires: Sun, 09 Aug 2026 22:02:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26537,"size_decoded":6260,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (26498)","md5":"37ce9ee0beb9259fb43e7b4f667f24ed","sha1":"a9f464633206d98dc508a7afdeaeb8e5ee8976b2","sha256":"09205cd464a1c9369133d3f92ce49e302245f13cd4e746971075ac896c9b6365","sha512":"1cf86168f27a8432f4f7dea21d7ccfbb665451d6a9c4dd0a486f7cb683bdf3d86313cd0df556a352bfe25ca5857b179d654733f85bfb884d76a63660b75171a0","ssdeep":"384:PjdpzUYa47i2Wo6ymbD60dJ7iyaI94RrIF6DwUxS4:QYljuD72y1krSQ/","tlshash":"c8c2a633f240283df73bc626a9d83b9c611ee163a6520a7de313775986cb39f1a70549","first_seen":"2026-08-09T01:57:14.64642Z","last_seen":"2026-08-09T10:03:38.876403Z","times_seen":3,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/PuzzleGate-CDyD2IMN.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:48.712Z","timestamp":1786269768712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/PuzzleGate-CDyD2IMN.js HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-497b\"\r\nexpires: Sun, 09 Aug 2026 22:02:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18811,"size_decoded":6315,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18646)","md5":"3d094f3e15652ca6262dc8a3bbdd008a","sha1":"a4c33a63c4172c5950a7581cecae2ad10eac035b","sha256":"dbb122f20b28a1eabaac5c1134bec3587cecebde0568398b022288f6c391f267","sha512":"175d2bb990b04f500ebfebce645011273671806c2639a79d9ed96ea71f4aec2fb994566385f7525f9c8023f155bad386059030426d2202de267b03e8fd355e84","ssdeep":"384:a22BLsfjoS/HOP2tLO3YSoIr3UVN3VifDO0211x9uatfS3iUMUVlpS:XYkoS/Hw2tUCIr3UVN3VifDO0211xUa5","tlshash":"bc82c9b0e32011fd846b83c449eab7d8221236b5b6b388f0316c5d4917b6dd9776ae71","first_seen":"2026-08-09T01:57:14.684737Z","last_seen":"2026-08-09T10:03:38.858694Z","times_seen":3,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/LoginView-CTiyAKDy.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:48.714Z","timestamp":1786269768714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/LoginView-CTiyAKDy.js HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-1c39\"\r\nexpires: Sun, 09 Aug 2026 22:02:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7225,"size_decoded":3351,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6996)","md5":"52b41c31e78595f2e79c38392c6ecd5a","sha1":"91fc9df771f0aa3a244652b3fcdc2891921d054d","sha256":"618276033b48c289a95ef0c14b1e45e25b6991808a81fdaeb373972c0d4a43a5","sha512":"5e980fa908e84ee8d5aed704c09dd3f33b4130b82ef9f10982cb9f9a0f7ab439b26901ea63a2355a99464e0261a4a7887e3da714b24453b10e9e63518f3b2cda","ssdeep":"192:scC3iMNgIzf65RXwOACG4vbZlP2OLeflgVgPgv3lVaHvUJaw45LDipJs:s33i6f65OOACG41lPfLeiVYEHad+6","tlshash":"54e1b918f07a853af6a3c058716bbd2131182b655c108ef587f51f101feae17a61a5df","first_seen":"2026-08-09T01:57:14.719172Z","last_seen":"2026-08-09T10:03:38.883556Z","times_seen":3,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-14.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.530Z","timestamp":1786269772530,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-14.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:41:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b000e-1904\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6404,"size_decoded":6652,"mime_type":"image/png","magic":"PNG image data, 171 x 128, 8-bit/color RGBA, non-interlaced","md5":"e68b04304ee7e8604ccb7890184001ea","sha1":"5e4133ae4b5008e22b88d44e50d9e8c9b21ffbc6","sha256":"e1b3229865c3209360b37eefe5ce2409b10b7b8409b4749646a12e783b685f17","sha512":"7339cc401c2dd4f9fde5ff1eb6e8d3610f68d9dfb2791360ae694cbfbd6447ff58833e2af65e835f3115c6d1bc728d9c05a110e6438e1c23464b865208e23f5b","ssdeep":"96:vH2ArtZcgaJIej9TcW27Vo+tfUH66Jj0zt2iPdD2qV/+Xpi6mK7Ce6WhD93:trtZcgaOVo+tfFkIFPd1VWZ6KmtWd9","tlshash":"f4d16c3ce950b2ffdb85292f4a502569e948682e33875fe2c253d25ed64760fb051e38","first_seen":"2025-11-04T12:39:11.767716Z","last_seen":"2026-08-09T10:03:38.881831Z","times_seen":5,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-09T10:02:46.579Z","timestamp":1786269766579,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:47 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-25de\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9694,"size_decoded":3758,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (435)","md5":"92a571e8dbddd074ad00b4f17fdde3bd","sha1":"7fa9d52347028e68ab9de84c515b93258d8c83ae","sha256":"31a556c4271de29d402bdd38950c411379e057d35619dd009efca696a7fa4968","sha512":"c1011268809a6804fe685fe29eedd3859a0077bdc91244a52e973cf917d0ee11be05dc99a89cca62b5791e412ce77369d296b9fc0e7f774c74bd26131081d113","ssdeep":"192:aNDu50mxFQlZr9laJgjqCjDQ6i6FZ1eqsb+ZCxf7G3ijRxdXmmcbwsR1e+3JuB1o:aRZr5S+ZCxzVdWR16iRIo","tlshash":"3112b66b6df040334153316a1ebff50c3a22d193404ddda07edd86589f50e6a0babed8","first_seen":"2026-08-09T01:57:14.698133Z","last_seen":"2026-08-09T10:03:38.891521Z","times_seen":3,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":0,"dns":157,"connect":154,"send":0,"wait":154,"receive":0,"ssl":310},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-icon.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:47.621Z","timestamp":1786269767621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-icon.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 15 May 2026 16:08:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a074507-b5a\"\r\nexpires: Tue, 08 Sep 2026 10:02:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2906,"size_decoded":2884,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"4fc06f22c6a211c7c52801dd976e5261","sha1":"08a35f1e1c234498042a733934b8755455d82c0b","sha256":"06a9d6628618d3b0886dea141bda355011034e5835e039561695bc23a7b767e5","sha512":"aade803231f095d75acb55219ee00288fbfcf3062d1066f5b2aaa41da1b440bb52b5b3e0a47e7af4740a2ab25a1b3df4e361491414f7e87d224abef59041cd2d","ssdeep":"","tlshash":"fe513be1f086ce4bd8256b3964c8e188f6b6e744c33c899d50f9585a481c04437e76d7","first_seen":"2025-12-03T08:36:49.269139Z","last_seen":"2026-08-09T10:03:38.844344Z","times_seen":9,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/GateView-BcgCgiYz.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:48.711Z","timestamp":1786269768711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/GateView-BcgCgiYz.js HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-957\"\r\nexpires: Sun, 09 Aug 2026 22:02:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2391,"size_decoded":1503,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2390)","md5":"f903c889a4b1bda2592129f760ce9811","sha1":"0cb0bd1b264ce0ba4706f90b6253262286405a10","sha256":"dbe38cd20042b8bb710a02b42ad6280c4206ab05172ada6c2b1770391c090f2b","sha512":"7f19066d805112c1eb000c15cd40e5cc67f4a3ab78115f946142bf79f3ab8bbe7dc0ad1a73c4c2186ad5b173597fcba537ecc589c93b5d092a17e9d3ebf6d0c6","ssdeep":"","tlshash":"9741113eb461547b06e84498b23fef40b632035049a040f672bd4f4427a2db7bb6d0ea","first_seen":"2026-08-09T01:57:14.710121Z","last_seen":"2026-08-09T10:03:38.890651Z","times_seen":3,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/live-gate-p5.jpg","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:48.729Z","timestamp":1786269768729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/live-gate-p5.jpg HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Jul 2026 21:13:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a691b97-45c3\"\r\nexpires: Tue, 08 Sep 2026 10:02:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17859,"size_decoded":18188,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 400x200, components 3","md5":"be335ac217abe259761211b5bdfc880f","sha1":"6e4768034f7d8a741452551084fd06d2a73749dc","sha256":"90664349d2432521addea5d5a665ec4075f158604d26d1ea2942ae1111ee27a2","sha512":"83f777a2feb9dc22bb1709841d031f23f1abaef458baf000930568aa489c5ad9935e71908c698943f9b71f8b353cd474f42ba072b849e48e82e13a09cc16b10c","ssdeep":"384:mtOjYurT+AFJOsOQ2uWUcCWEaQapQb8HC8vKbwJW+L2dhY68/YWbgk:9ZPJBOQ2tGaDpni5wJW+L2g60j","tlshash":"4182d0c78fab50bafb84643251397b1ae106eb780de23f75b4c61f545688c724878198","first_seen":"2026-08-09T01:57:14.640007Z","last_seen":"2026-08-09T10:03:38.909551Z","times_seen":3,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/verify-badge-Bc01xIP8.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.031Z","timestamp":1786269772031,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/verify-badge-Bc01xIP8.js HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-743\"\r\nexpires: Sun, 09 Aug 2026 22:02:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1859,"size_decoded":1296,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1858)","md5":"d51479f8fb546a36e41f96d2ff923a20","sha1":"c0799aaee3f8e1af9eeb38e725c0fed32eaaf0d3","sha256":"68f298219a2fdcbd702faef9268f9a64ecbd8543dd196848819976145772c53f","sha512":"c2f77e4166ff84d2260dad1b17c7e21ce4593e1f615608c7ea9857a8c52061ef5e3cf64a593386a42fbdf7e00b09baa7e3b43cd264cbefcb7868a54450994f08","ssdeep":"","tlshash":"71310f8ed539abbc0c1acb2f06f03b60f0b60a5efb75ea6869b606047f4761110e4934","first_seen":"2026-08-09T01:57:14.680023Z","last_seen":"2026-08-09T10:03:38.88433Z","times_seen":3,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-12.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.373Z","timestamp":1786269772373,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-12.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:40:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6affe9-3ec3\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16067,"size_decoded":16528,"mime_type":"image/png","magic":"PNG image data, 255 x 154, 8-bit/color RGBA, non-interlaced","md5":"6f83c7642bb0923aecc73346b2e1b580","sha1":"67c5b5691299be2df34c0d914b6bdcf8434ad65b","sha256":"af7104863ffc8d3f5320161fcc6146b67e70d0c3c67e93a26df3153310993fcf","sha512":"45262118ea24f7f8365dc5ea26647e3b515193a66feeea50c93c776b7a8dc5adf12543e03491dc5896cd49a22dd4b7456744bb91621be277f0d412cb1fbe22d1","ssdeep":"384:4FrnPOtltImFsefhfq+emszBIOcEyzwxFDeGqYmMCQ/:c7POtltIcsefh3elzB+zOFRqYfD","tlshash":"4072d0e420ce622cac09065f7d4ee4da0e83b9d0115e7dd16a37cd506eea6e3637252c","first_seen":"2025-09-23T14:41:15.724896Z","last_seen":"2026-08-09T10:03:38.857489Z","times_seen":116,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/RegisterView-tCC31NK9.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:48.720Z","timestamp":1786269768720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/RegisterView-tCC31NK9.js HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-3a5d\"\r\nexpires: Sun, 09 Aug 2026 22:02:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14941,"size_decoded":5907,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14262)","md5":"b41631f5333dfe4706cc1b0e561fd820","sha1":"7b9eb9511af29e415d6566323dcb0788e228a85a","sha256":"2b61208fcba70d8e3c45dff4a694537d0a78542fb15e88768db99ba9bd11c751","sha512":"b34ae07332c81cec015c088c3c90a3dae6a3c224c33ae924773ea39b73ae11513fb84a521149b581a0ea7254580b553b4510cbfa6f979442a3cb74d80fda20a5","ssdeep":"384:4cbIkg+/kACpTfjE9OB4f1loRnJ+jsoCo3h:4cb9kACpTfY9u4f1loBJWQY","tlshash":"02620a0cf665253ebb73809c966f761530182713a41486f4dbbe0e303fe6d97953b2aa","first_seen":"2026-08-09T01:57:14.6905Z","last_seen":"2026-08-09T10:03:38.91172Z","times_seen":3,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/favicon.ico","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:49.027Z","timestamp":1786269769027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":279,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-09T12:34:44.886164Z","times_seen":547684,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/IMG_3379-bg.mp4?v=260","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:51.209Z","timestamp":1786269771209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/IMG_3379-bg.mp4?v=260 HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://4k7e.com/\r\nRange: bytes=0-1048575\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:51 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 361872\r\nlast-modified: Wed, 05 Aug 2026 03:35:26 GMT\r\netag: \"6a72af7e-58590\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-range: bytes 0-361871/361872\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":361872,"size_decoded":362329,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"4e19f1144915a215d2aa25a012909351","sha1":"fa4cb4aa3161090e2d22c52a7a0e1537483b35fe","sha256":"ae940f26e7aded73fea7d0c1854f29e6f2ec0ca48590a9f9b70b2d4aa560d17a","sha512":"558e5648c5bd503e95e5c466f21a9521d1deaeb6e9e2c0e57b09547ab04c4563b707e59c1d867939f159c21bad7ec1b2db5411652dd47326eb0e1c73edd79f4c","ssdeep":"6144:pH3mm3glRfhmNyDqUXy6Bh3Ya5PY+LKrOQm39feHLUu1Xn54HWQcIEJyNol3iht1:pHT3gTAyDq273F2+mc392LN13q0FJ7lM","tlshash":"7c74236de47e7053c27508f931db67de9be4bfd816819adfc180b019a9f10a4063f6a8","first_seen":"2026-08-09T01:57:14.660554Z","last_seen":"2026-08-09T10:03:38.848714Z","times_seen":3,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":463,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/IMG_3379-bg.mp4?v=260","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:51.229Z","timestamp":1786269771229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/IMG_3379-bg.mp4?v=260 HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://4k7e.com/\r\nRange: bytes=0-1048575\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:51 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 361872\r\nlast-modified: Wed, 05 Aug 2026 03:35:26 GMT\r\netag: \"6a72af7e-58590\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-range: bytes 0-361871/361872\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":361872,"size_decoded":362329,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"4e19f1144915a215d2aa25a012909351","sha1":"fa4cb4aa3161090e2d22c52a7a0e1537483b35fe","sha256":"ae940f26e7aded73fea7d0c1854f29e6f2ec0ca48590a9f9b70b2d4aa560d17a","sha512":"558e5648c5bd503e95e5c466f21a9521d1deaeb6e9e2c0e57b09547ab04c4563b707e59c1d867939f159c21bad7ec1b2db5411652dd47326eb0e1c73edd79f4c","ssdeep":"6144:pH3mm3glRfhmNyDqUXy6Bh3Ya5PY+LKrOQm39feHLUu1Xn54HWQcIEJyNol3iht1:pHT3gTAyDq273F2+mc392LN13q0FJ7lM","tlshash":"7c74236de47e7053c27508f931db67de9be4bfd816819adfc180b019a9f10a4063f6a8","first_seen":"2026-08-09T01:57:14.660554Z","last_seen":"2026-08-09T10:03:38.848714Z","times_seen":3,"resource_available":false,"data":null}},"time_used":751,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-10.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.357Z","timestamp":1786269772357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-10.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:39:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6affc2-d57\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3415,"size_decoded":3912,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"9f517a3b698397cfe134b9365d07780c","sha1":"e6b2166c92edee16d45ad2d7188f222beeff9336","sha256":"073fe4ef0f344d6a5c4ec446d3d8c3e78b5094cbe231beca7748775b1c0ce32f","sha512":"d280e132dee925ea1176d93e52777d6246c3d45069de17211acd41dfaf6b80a6ed07e7d985c024a1790420c5666e1a4e1c56d882e26e2363099431dcd01a1ca7","ssdeep":"","tlshash":"d3614d227c6b2fdd8afc3772a44e05685b7a81b35dc1eae2cd25486c9f20b81c601d47","first_seen":"2025-11-04T12:39:11.81643Z","last_seen":"2026-08-09T10:03:38.879928Z","times_seen":5,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-12.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.376Z","timestamp":1786269772376,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-12.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:40:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6affe9-3ec3\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16067,"size_decoded":16528,"mime_type":"image/png","magic":"PNG image data, 255 x 154, 8-bit/color RGBA, non-interlaced","md5":"6f83c7642bb0923aecc73346b2e1b580","sha1":"67c5b5691299be2df34c0d914b6bdcf8434ad65b","sha256":"af7104863ffc8d3f5320161fcc6146b67e70d0c3c67e93a26df3153310993fcf","sha512":"45262118ea24f7f8365dc5ea26647e3b515193a66feeea50c93c776b7a8dc5adf12543e03491dc5896cd49a22dd4b7456744bb91621be277f0d412cb1fbe22d1","ssdeep":"384:4FrnPOtltImFsefhfq+emszBIOcEyzwxFDeGqYmMCQ/:c7POtltIcsefh3elzB+zOFRqYfD","tlshash":"4072d0e420ce622cac09065f7d4ee4da0e83b9d0115e7dd16a37cd506eea6e3637252c","first_seen":"2025-09-23T14:41:15.724896Z","last_seen":"2026-08-09T10:03:38.857489Z","times_seen":116,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-16.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.702Z","timestamp":1786269772702,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-16.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 385\r\nlast-modified: Thu, 30 Jul 2026 07:42:04 GMT\r\netag: \"6a6b004c-181\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":385,"size_decoded":893,"mime_type":"image/png","magic":"PNG image data, 106 x 62, 8-bit/color RGBA, non-interlaced","md5":"24db6b9c0e21eb7d5d98e99067da9a10","sha1":"dd736ffd6b2bbeb6f33df02754a94d04d789a433","sha256":"d43b7078e562c104a4e53a5188d26b15332fb3c8b067e7aced5cde2d0553622e","sha512":"48f5c72ec82589f8b2a2fcc6577b46576ba821640396df4d8244b279b930626a9994f6cb8415320d13b099502e6d76fd5bba449db826a202b31a77083eb16373","ssdeep":"","tlshash":"aae0a7f6779db48ccf4b4613562e13225cb550bfb591110e6723682c47f988485e3350","first_seen":"2024-09-20T15:27:47Z","last_seen":"2026-08-09T10:03:38.887075Z","times_seen":116,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/LoginView-jD65_9yY.css","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:48.719Z","timestamp":1786269768719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/LoginView-jD65_9yY.css HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-2063\"\r\nexpires: Sun, 09 Aug 2026 22:02:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8291,"size_decoded":2751,"mime_type":"text/css","magic":"ASCII text, with very long lines (8290)","md5":"7d55691a658719f6d11a047730363aa9","sha1":"d04502a2ab310ce925ed129e6684eaac97ffe44d","sha256":"18b49d954ea67efca3dcf8827d01e6f20243e6ebac64c105b756f3b779baf0df","sha512":"e49d9a567b986d4f7695157e00a79648992ff50fdeddf080fa0f6ae92bd9d9dabef566a7c31536df3997bf64b460a729b2cde7da74ebc9bb82afa2e0f8541435","ssdeep":"192:dreVN+L0QVYTL0Qn2lWW3GWbROym4SGzV7EVJjBDljrV:dSVNIlWSjUjHrrV","tlshash":"e902a421b109225fb237c923755456de722bd713fd42473cae269db0cf8724a36365ac","first_seen":"2026-08-09T01:57:14.675397Z","last_seen":"2026-08-09T10:03:38.906611Z","times_seen":3,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/RegisterView-BM5MEAKA.css","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:48.722Z","timestamp":1786269768722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/RegisterView-BM5MEAKA.css HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-2260\"\r\nexpires: Sun, 09 Aug 2026 22:02:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8800,"size_decoded":2920,"mime_type":"text/css","magic":"ASCII text, with very long lines (8799)","md5":"889b1552a117ded0020b97324736fa3c","sha1":"41fca2b5604349f6fcf7eb2d35f696913f7b48a8","sha256":"96405ae56ca20564c01aa15c28f204c52fa4eb59d9d410665b8b534619079c0a","sha512":"bae5a5915b3c45129039ba0897a60507eabd8c2d52e52fa8b121afb773cf1e9f06d79939927d31ce81c8cb5552eb3cb21fe3900d374530727147550bcf2f11cc","ssdeep":"192:pd36vTaL0QFlL0Q0BV8klRYM0b2DYHIL69bQ1By:pdKvTxhlRuqDYlQG","tlshash":"11024029720c290cf037cea1b8da5f8bb11b91139d1b1a2dfd61217e9ecb6972771748","first_seen":"2026-08-09T01:57:14.711589Z","last_seen":"2026-08-09T10:03:38.892325Z","times_seen":3,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-18.svg","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.691Z","timestamp":1786269772691,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-18.svg HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 223\r\nlast-modified: Thu, 30 Jul 2026 07:42:38 GMT\r\netag: \"6a6b006e-df\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223,"size_decoded":662,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f540417c1a9534a4ac5101c7817f279","sha1":"673638f2c685b3dd42e427d80c60723f89214efc","sha256":"4bd19c9a64d1579273e7ccfe111f82bbeb39d8061d8c1aa2dfb47d7bb33203df","sha512":"3e3a61c5a8eb421ad4216e94321c9ab329fb2f64d264f109daa1f285a5f9dc329a2982424ffb4aca500ef62394ddf80e5e5f2ce6f3f4f6ade79cc690ebdabd0c","ssdeep":"","tlshash":"1ad0239581247c5819188174c778bbe5c0f7f006614800d5f5f13015200d7eb7cf675d","first_seen":"2026-08-09T01:57:14.673154Z","last_seen":"2026-08-09T10:03:38.864099Z","times_seen":3,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-20.svg","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.717Z","timestamp":1786269772717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-20.svg HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 30 Jul 2026 07:43:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b0085-561\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1377,"size_decoded":1116,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0894cfd005d361c02e0968800c3835df","sha1":"4d26575475d446dffbbda2295ee06cad6088ebfa","sha256":"3522f321b5049f99a91201aace132c656d3b542bf66663e2b28f41f4a6d8f79e","sha512":"eb1ad188891a5beec7d238491263614f51bd2f39459b083293efcbcfd7c909d09693611436d26c88f6cc305d2d0dc0ec74e41c2e148e98e0688dd6e025a3fe5b","ssdeep":"","tlshash":"dc21c15dd12cd56dd897c1fccf5774f2a5afa16e72c2d314790d856625000eaf84f980","first_seen":"2026-08-09T01:57:14.71303Z","last_seen":"2026-08-09T10:03:38.859597Z","times_seen":3,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/polyfills-CU0JbG9M.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:47.600Z","timestamp":1786269767600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/polyfills-CU0JbG9M.js HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://4k7e.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-1af7d\"\r\nexpires: Sun, 09 Aug 2026 22:02:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":110461,"size_decoded":44903,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65496), with NEL line terminators","md5":"b7818e4b29044ff046df99992a833f51","sha1":"3a5db2fb00e9228a4ea6febedc326f92db70499d","sha256":"7c823a510b4fcfd81b6fa002e11e982724c42d5f09d22cf36e636c9ecd21ee4b","sha512":"c8bc0ffafe7ed52654a4363a26ff6a11287cb8923221d15379851de6449f6175c7d9d463ad505220c1cff5e7a25bc9d5f72577f9a8abb315f1e21fd5508d4b6c","ssdeep":"1536:FzA0SKBnS7zzET4h9aYEN7hlztmHi69lN2cwdV8IEL3:FzJS7zGYEthlzUi6kcwdV8hr","tlshash":"a5b3d4c9f6d6f0a243e77061403f500bf23b5d59b80e9190e766d0e17cb9a8a817bf69","first_seen":"2026-08-09T01:57:14.68851Z","last_seen":"2026-08-09T10:03:38.882765Z","times_seen":3,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/login-kefu-chat.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:47.612Z","timestamp":1786269767612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /login-kefu-chat.js HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 Aug 2026 18:15:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a722c41-ca46\"\r\nexpires: Sun, 09 Aug 2026 22:02:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51782,"size_decoded":25362,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19961), with CRLF line terminators","md5":"a5dce09a7bb37c0d6241914dbab03cb5","sha1":"806ea767f9f6b552bdbd5aab9cc5fa0abbef0ed6","sha256":"97d089e19e3fa8e3c0811706f95791d5b6971e9179361bf0949039332844d23f","sha512":"57547a58f4b2031c11db9433cd4fe330f1936e26536dd3b11a6f6f4424fa7e1d0be62ffe905117ed914f7d1d13727832d103ef44add001805176593becf2cf56","ssdeep":"1536:rfR8ZGo8ckprjvnLWhL/qb0wnyLnzho1LyUJOB4qoxTAFMWbVPM:rfR8YOkNfLsL/O0wnyLnzhsLyUJOB4q8","tlshash":"f4332a26a443743659b3e37ae8af9209f67741275077d021bdac80506ff096a037efe9","first_seen":"2026-08-09T01:57:14.630955Z","last_seen":"2026-08-09T10:03:38.897317Z","times_seen":3,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/live-entry-gate-DpUhzlgn.css","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:48.713Z","timestamp":1786269768713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/live-entry-gate-DpUhzlgn.css HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-2663\"\r\nexpires: Sun, 09 Aug 2026 22:02:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9827,"size_decoded":3093,"mime_type":"text/css","magic":"ASCII text, with very long lines (9826)","md5":"25fd75dedd32f18b4b2bb0b6e4c68d59","sha1":"6ff5b15fb2e5703c5f48ebf9f6e9b43582827352","sha256":"919b4fe0cd4c4e123d1fd7d946436ea9a040a133aed880b35d061aa7caab7651","sha512":"52b0e1c2047663774bd17a2525e84e04152a89b39341571086e6859f468bc91e331fcf40d0ce9d831a0642d9e2782caa3b63b07bbffb35a15dba649a65947fcf","ssdeep":"192:SFqCnzu6z3FnhWt0R0yzWarBhv6JjvZZblRv:Q5ai1nhjbzWoj6JjBdlRv","tlshash":"9712b7b5d500303ce53be65329e1cb8c7234d603d7334aaff6896695c7cb5aa2a75388","first_seen":"2026-08-09T01:57:14.67423Z","last_seen":"2026-08-09T10:03:38.913718Z","times_seen":3,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/validateImageFile-B9Sg2ojq.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:48.721Z","timestamp":1786269768721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/validateImageFile-B9Sg2ojq.js HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-a69\"\r\nexpires: Sun, 09 Aug 2026 22:02:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2665,"size_decoded":1845,"mime_type":"application/javascript","magic":"exported SGML document, Unicode text, UTF-8 text, with very long lines (2528)","md5":"631767a1e65f3f7aca88ac7245e2b528","sha1":"83f37372cac846b91d04db2d63eda6bc49a21bc9","sha256":"d8ef3362f1f10cfe06628608cfdcc047dcf7988197e6cab1a58f64a13b9bef80","sha512":"3f30e21db8c6fb3cd3347e3d3d8998f2dd43427c6bb74705c66c5e39cf8acb11105164a04442286183010db8c474daf7c9058ec4ac8b76d5798263e77da80ba2","ssdeep":"","tlshash":"c55151c466b3187ad6e522913cd88708631e9e78310faed8f045bd430c1a5ab5afef03","first_seen":"2026-08-09T01:57:14.726396Z","last_seen":"2026-08-09T10:03:38.908213Z","times_seen":3,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-16.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.551Z","timestamp":1786269772551,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-16.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 385\r\nlast-modified: Thu, 30 Jul 2026 07:42:04 GMT\r\netag: \"6a6b004c-181\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":385,"size_decoded":893,"mime_type":"image/png","magic":"PNG image data, 106 x 62, 8-bit/color RGBA, non-interlaced","md5":"24db6b9c0e21eb7d5d98e99067da9a10","sha1":"dd736ffd6b2bbeb6f33df02754a94d04d789a433","sha256":"d43b7078e562c104a4e53a5188d26b15332fb3c8b067e7aced5cde2d0553622e","sha512":"48f5c72ec82589f8b2a2fcc6577b46576ba821640396df4d8244b279b930626a9994f6cb8415320d13b099502e6d76fd5bba449db826a202b31a77083eb16373","ssdeep":"","tlshash":"aae0a7f6779db48ccf4b4613562e13225cb550bfb591110e6723682c47f988485e3350","first_seen":"2024-09-20T15:27:47Z","last_seen":"2026-08-09T10:03:38.887075Z","times_seen":116,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-9.webp","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.216Z","timestamp":1786269772216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-9.webp HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 106\r\nlast-modified: Thu, 30 Jul 2026 07:39:35 GMT\r\netag: \"6a6affb7-6a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106,"size_decoded":542,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a223550b119986b732d2c8d134080df4","sha1":"68bf178ded653d1b2671972688ae49318e69ed3f","sha256":"bf7fbf191bea62cbf4ad4fb31631bf3fa75ea05af5fab02fed2c3aa0080a60a6","sha512":"03d75414f96bcf513873dee570de9c0df4c49133d050e36870af85e3a8948b509e4ebb3c46a49110b585dba2c503916888b6562fbeee83bdc6ecdc15f54c6e0c","ssdeep":"","tlshash":"12b01215c802a22a554c655307c75f24012400629178d9f164b32e707454a821270a0c","first_seen":"2025-09-23T14:41:15.721881Z","last_seen":"2026-08-09T10:03:38.856914Z","times_seen":106,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-14.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.528Z","timestamp":1786269772528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-14.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:41:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b000e-1904\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6404,"size_decoded":6652,"mime_type":"image/png","magic":"PNG image data, 171 x 128, 8-bit/color RGBA, non-interlaced","md5":"e68b04304ee7e8604ccb7890184001ea","sha1":"5e4133ae4b5008e22b88d44e50d9e8c9b21ffbc6","sha256":"e1b3229865c3209360b37eefe5ce2409b10b7b8409b4749646a12e783b685f17","sha512":"7339cc401c2dd4f9fde5ff1eb6e8d3610f68d9dfb2791360ae694cbfbd6447ff58833e2af65e835f3115c6d1bc728d9c05a110e6438e1c23464b865208e23f5b","ssdeep":"96:vH2ArtZcgaJIej9TcW27Vo+tfUH66Jj0zt2iPdD2qV/+Xpi6mK7Ce6WhD93:trtZcgaOVo+tfFkIFPd1VWZ6KmtWd9","tlshash":"f4d16c3ce950b2ffdb85292f4a502569e948682e33875fe2c253d25ed64760fb051e38","first_seen":"2025-11-04T12:39:11.767716Z","last_seen":"2026-08-09T10:03:38.881831Z","times_seen":5,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-17.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.554Z","timestamp":1786269772554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-17.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 903\r\nlast-modified: Thu, 30 Jul 2026 07:42:20 GMT\r\netag: \"6a6b005c-387\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":903,"size_decoded":1411,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"de5f751b90adbb7268cc6d8b505ea4b7","sha1":"7f9e37c37b2774ff363b5018d33063d09f44a015","sha256":"30e5cfe4c4f017c43f1263debe543edc548c944875975cb2a1bbc91427d129d9","sha512":"b2556311bddccd35fc6d1c1c0f8551bfc9669b1e733540b6be8fa017b1dcea02814de08b3b014d0e87de6ef4746da1ca0b8415bdf8b0304fdcd09ddb0dd8e57e","ssdeep":"","tlshash":"7d114471d15d8c749c8b7d466a15130b8502436fc5531f900a2f2c0a1d17166dec77de","first_seen":"2026-08-09T01:57:14.629107Z","last_seen":"2026-08-09T10:03:38.874923Z","times_seen":3,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-1.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:51.238Z","timestamp":1786269771238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-1.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:37:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6aff21-f14\"\r\nexpires: Tue, 08 Sep 2026 10:02:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3860,"size_decoded":4387,"mime_type":"image/png","magic":"PNG image data, 171 x 128, 8-bit/color RGBA, non-interlaced","md5":"6a11a848800e26085a75723f79a3967d","sha1":"014f1e8f3a35e19c65279e53a0c132fa364a0e64","sha256":"6a9cb382f3467940118e0f1719f22cfa49412af83d51deaf947a16a6e44d8e13","sha512":"902f3102ce8af56d29b80b38f364cfae0f12e890811cf1edf983e416b8d898c35df62eb3fbee8ce0c5937753f114f7ee7b88f825918df0252eb1c3efdda01812","ssdeep":"","tlshash":"4d818e22a73e88b9c4725cfa05010966a8fc9a06d315b4e4f3a726dd4b7c3c7830e410","first_seen":"2025-11-04T12:39:11.812962Z","last_seen":"2026-08-09T10:03:38.868958Z","times_seen":5,"resource_available":false,"data":null}},"time_used":744,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":744,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-2.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:51.240Z","timestamp":1786269771240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-2.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:37:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6aff2d-ad7\"\r\nexpires: Tue, 08 Sep 2026 10:02:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2775,"size_decoded":3317,"mime_type":"image/png","magic":"PNG image data, 144 x 66, 8-bit/color RGBA, non-interlaced","md5":"dfefe9b4410eca973b5959cf8ce10468","sha1":"1f13e548524639a1cb42073ecfeb1523d1a92df8","sha256":"b1621b61eee7735f889ae31fe324def94907c972065d609976d1b36eaaa8bcf6","sha512":"a73ff563908e59bc9323bdc2cd5a3340e11da8793ae34187806c40e9c5e241ba764db70a216c347a41e782af9a014758e84c46e1395bcf6135c713c2da729337","ssdeep":"","tlshash":"f7514bf355646a41db8b8576c3a22017b802bca68eabef85c4d0dbb3740ff4848588c3","first_seen":"2025-09-23T14:41:15.736382Z","last_seen":"2026-08-09T10:03:38.851557Z","times_seen":115,"resource_available":false,"data":null}},"time_used":742,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":742,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/IMG_3379-bg.mp4?v=260","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:51.532Z","timestamp":1786269771532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/IMG_3379-bg.mp4?v=260 HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://4k7e.com/\r\nRange: bytes=0-1048575\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:51 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 361872\r\nlast-modified: Wed, 05 Aug 2026 03:35:26 GMT\r\netag: \"6a72af7e-58590\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-range: bytes 0-361871/361872\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":361872,"size_decoded":362329,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"4e19f1144915a215d2aa25a012909351","sha1":"fa4cb4aa3161090e2d22c52a7a0e1537483b35fe","sha256":"ae940f26e7aded73fea7d0c1854f29e6f2ec0ca48590a9f9b70b2d4aa560d17a","sha512":"558e5648c5bd503e95e5c466f21a9521d1deaeb6e9e2c0e57b09547ab04c4563b707e59c1d867939f159c21bad7ec1b2db5411652dd47326eb0e1c73edd79f4c","ssdeep":"6144:pH3mm3glRfhmNyDqUXy6Bh3Ya5PY+LKrOQm39feHLUu1Xn54HWQcIEJyNol3iht1:pHT3gTAyDq273F2+mc392LN13q0FJ7lM","tlshash":"7c74236de47e7053c27508f931db67de9be4bfd816819adfc180b019a9f10a4063f6a8","first_seen":"2026-08-09T01:57:14.660554Z","last_seen":"2026-08-09T10:03:38.848714Z","times_seen":3,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-2.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:51.538Z","timestamp":1786269771538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-2.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:37:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6aff2d-ad7\"\r\nexpires: Tue, 08 Sep 2026 10:02:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2775,"size_decoded":3317,"mime_type":"image/png","magic":"PNG image data, 144 x 66, 8-bit/color RGBA, non-interlaced","md5":"dfefe9b4410eca973b5959cf8ce10468","sha1":"1f13e548524639a1cb42073ecfeb1523d1a92df8","sha256":"b1621b61eee7735f889ae31fe324def94907c972065d609976d1b36eaaa8bcf6","sha512":"a73ff563908e59bc9323bdc2cd5a3340e11da8793ae34187806c40e9c5e241ba764db70a216c347a41e782af9a014758e84c46e1395bcf6135c713c2da729337","ssdeep":"","tlshash":"f7514bf355646a41db8b8576c3a22017b802bca68eabef85c4d0dbb3740ff4848588c3","first_seen":"2025-09-23T14:41:15.736382Z","last_seen":"2026-08-09T10:03:38.851557Z","times_seen":115,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-3.webp","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:51.539Z","timestamp":1786269771539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-3.webp HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 352\r\nlast-modified: Thu, 30 Jul 2026 07:37:30 GMT\r\netag: \"6a6aff3a-160\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":352,"size_decoded":789,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"646e1e0d92153b3b4ce764c7b04ed767","sha1":"6d1ed0385c5b41284b26faa32c42cefbcb5f0a2d","sha256":"79bcedc7c67a3546239bf1abdbddb72177a92046c6bd35c7959228dadbde8136","sha512":"4361c9374ffa08e8d0f19ec45902bf7cc6728e705b20301cfed9812e19729c8b2fcd550cdbb2916ea50c4178b640d9b0f16717fe63c33f9529ece0788d6ed1bd","ssdeep":"","tlshash":"f9e0c0fa11801c38ec99a4ac02d6b5d7e04c01d60ba14c003b8106ba03aa139b658e7a","first_seen":"2025-11-04T12:39:11.785202Z","last_seen":"2026-08-09T10:03:38.869703Z","times_seen":5,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-5.webp","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.037Z","timestamp":1786269772037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-5.webp HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 284\r\nlast-modified: Thu, 30 Jul 2026 07:38:12 GMT\r\netag: \"6a6aff64-11c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":721,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3877b0647b7b9ac47b69d0ca9d6a937","sha1":"0888e31bb77ec453bd78bd3481bf5ebc044cb746","sha256":"626f53e02ef5fe7b0082dc971a3d94a5d5d8f6c1571a22c60fd34665504e3470","sha512":"dfa161ecbe45b581810c2e6e3c9f6adb7ec10842872f28acfcc786c6600a800382e9965de19042716189f5e41751a0416eec5230d059a599ed67ab3d405948aa","ssdeep":"","tlshash":"11d0ebaeea245140ae61686c33cd94140014260b38ece8c82a6f81adfd8e8033ea41f5","first_seen":"2024-09-20T15:27:47Z","last_seen":"2026-08-09T10:03:38.856333Z","times_seen":117,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-6.svg","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.040Z","timestamp":1786269772040,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-6.svg HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 330\r\nlast-modified: Thu, 30 Jul 2026 07:38:31 GMT\r\netag: \"6a6aff77-14a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":330,"size_decoded":770,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d2cf5a19c8d461980a0a94c20751997e","sha1":"71f862c0809a6744709833eced1a4fee4a2990f3","sha256":"998410ce1db07a05d1a08edefe12f0d20830fdb7d46d15e95e2e8fae4f19d498","sha512":"9c3e65ec6b612163a7334a1b2a291b3afdd27e0bdacc8d3d57eb3603321caefbc6ddbd2a87d4221e7393ff11d41bba3f31b5dc6e8e36c4f1c8e6759dfe0cfc15","ssdeep":"","tlshash":"6de0df1c936f901d44b6ce402f2828a6236eb1b97645059bba8e180534642edff53e54","first_seen":"2026-08-09T01:57:14.671511Z","last_seen":"2026-08-09T10:03:38.874152Z","times_seen":3,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-17.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.703Z","timestamp":1786269772703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-17.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 903\r\nlast-modified: Thu, 30 Jul 2026 07:42:20 GMT\r\netag: \"6a6b005c-387\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":903,"size_decoded":1411,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"de5f751b90adbb7268cc6d8b505ea4b7","sha1":"7f9e37c37b2774ff363b5018d33063d09f44a015","sha256":"30e5cfe4c4f017c43f1263debe543edc548c944875975cb2a1bbc91427d129d9","sha512":"b2556311bddccd35fc6d1c1c0f8551bfc9669b1e733540b6be8fa017b1dcea02814de08b3b014d0e87de6ef4746da1ca0b8415bdf8b0304fdcd09ddb0dd8e57e","ssdeep":"","tlshash":"7d114471d15d8c749c8b7d466a15130b8502436fc5531f900a2f2c0a1d17166dec77de","first_seen":"2026-08-09T01:57:14.629107Z","last_seen":"2026-08-09T10:03:38.874923Z","times_seen":3,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-3.webp","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:51.241Z","timestamp":1786269771241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-3.webp HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 352\r\nlast-modified: Thu, 30 Jul 2026 07:37:30 GMT\r\netag: \"6a6aff3a-160\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":352,"size_decoded":789,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"646e1e0d92153b3b4ce764c7b04ed767","sha1":"6d1ed0385c5b41284b26faa32c42cefbcb5f0a2d","sha256":"79bcedc7c67a3546239bf1abdbddb72177a92046c6bd35c7959228dadbde8136","sha512":"4361c9374ffa08e8d0f19ec45902bf7cc6728e705b20301cfed9812e19729c8b2fcd550cdbb2916ea50c4178b640d9b0f16717fe63c33f9529ece0788d6ed1bd","ssdeep":"","tlshash":"f9e0c0fa11801c38ec99a4ac02d6b5d7e04c01d60ba14c003b8106ba03aa139b658e7a","first_seen":"2025-11-04T12:39:11.785202Z","last_seen":"2026-08-09T10:03:38.869703Z","times_seen":5,"resource_available":false,"data":null}},"time_used":742,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":742,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/zg.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:51.537Z","timestamp":1786269771537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/zg.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 01 Aug 2026 00:14:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6d3a5e-3d71\"\r\nexpires: Tue, 08 Sep 2026 10:02:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15729,"size_decoded":16261,"mime_type":"image/png","magic":"PNG image data, 128 x 77, 8-bit/color RGBA, non-interlaced","md5":"2db7db6a7cac5c1d008a865ff81bffb1","sha1":"7e241c3c2301989184cf17a28432a60b25491f3d","sha256":"8398f274bc7daabd4c2a4e412045a362a3fd3aa7f76a8dc47c292ea36c85046b","sha512":"58bb60baacca4a4a6d0bf5484d7fb272499bab7ace8339fa126009ae8621adfe026ffcd40ec38540a43c911badf9ecb85d991511e5466d7e9e09ec797473923a","ssdeep":"384:fR652Xpmb5HnNVBGDmiQg4J+gksPdzWLTZAcg/UlS1ZXjuqLnv2VMWB:fRzcDVBm4zRdSQU8Jzbv2yE","tlshash":"3362c0d6d627c17eed181e4d6241f158749ca08f20bc0ac85883a58f5eacb9a3c76e4b","first_seen":"2026-08-09T01:57:14.627321Z","last_seen":"2026-08-09T10:03:38.850161Z","times_seen":3,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-4.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.036Z","timestamp":1786269772036,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-4.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6aff50-17bc0\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97216,"size_decoded":93638,"mime_type":"image/png","magic":"PNG image data, 1280 x 853, 8-bit/color RGB, non-interlaced","md5":"a8e29efafeaf8b3fbb32b82c0e95ee73","sha1":"6d81c4b3144c1533e328a8d689afae642b30a594","sha256":"e93d5326085b2e1dd43ea027beede10a5f5b0b52f6e1b338af5aee2a21c345d5","sha512":"033f222fb745c3ed88fbdc4b779ea63bc93a247bb2bfd99b02f6d8620825a7b9e2ed5005b9782fe08d481da048b23801c13d61827b9a92d7f8401090f984e0dc","ssdeep":"1536:jGouyKc5uHx6HJBtPW0r2SOiNYpNjB9ofeEJIA7LnYaSOp5b8ylaZ8DHrLLQBJWh:jtDKc8iJjPTrCYSNj6eEJIQYrOphhaZ8","tlshash":"30930115d739f1e4914e383af2b7ac9ec299ab7f851a23c9d23338c390944749b48d69","first_seen":"2025-09-23T14:41:15.720194Z","last_seen":"2026-08-09T10:03:38.873436Z","times_seen":115,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-6.svg","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.045Z","timestamp":1786269772045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-6.svg HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 330\r\nlast-modified: Thu, 30 Jul 2026 07:38:31 GMT\r\netag: \"6a6aff77-14a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":330,"size_decoded":770,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d2cf5a19c8d461980a0a94c20751997e","sha1":"71f862c0809a6744709833eced1a4fee4a2990f3","sha256":"998410ce1db07a05d1a08edefe12f0d20830fdb7d46d15e95e2e8fae4f19d498","sha512":"9c3e65ec6b612163a7334a1b2a291b3afdd27e0bdacc8d3d57eb3603321caefbc6ddbd2a87d4221e7393ff11d41bba3f31b5dc6e8e36c4f1c8e6759dfe0cfc15","ssdeep":"","tlshash":"6de0df1c936f901d44b6ce402f2828a6236eb1b97645059bba8e180534642edff53e54","first_seen":"2026-08-09T01:57:14.671511Z","last_seen":"2026-08-09T10:03:38.874152Z","times_seen":3,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-9.webp","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.218Z","timestamp":1786269772218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-9.webp HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 106\r\nlast-modified: Thu, 30 Jul 2026 07:39:35 GMT\r\netag: \"6a6affb7-6a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106,"size_decoded":542,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a223550b119986b732d2c8d134080df4","sha1":"68bf178ded653d1b2671972688ae49318e69ed3f","sha256":"bf7fbf191bea62cbf4ad4fb31631bf3fa75ea05af5fab02fed2c3aa0080a60a6","sha512":"03d75414f96bcf513873dee570de9c0df4c49133d050e36870af85e3a8948b509e4ebb3c46a49110b585dba2c503916888b6562fbeee83bdc6ecdc15f54c6e0c","ssdeep":"","tlshash":"12b01215c802a22a554c655307c75f24012400629178d9f164b32e707454a821270a0c","first_seen":"2025-09-23T14:41:15.721881Z","last_seen":"2026-08-09T10:03:38.856914Z","times_seen":106,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-11.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.360Z","timestamp":1786269772360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-11.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:40:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6affd4-1831\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6193,"size_decoded":6726,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"0078880ce0a98da93abc22a6be07f95f","sha1":"191f68571f20cb271d9db6318d599391c88508f3","sha256":"2f226f15a4a40f578de19cd564985048bfd9a8c4e6f5792745ff05502f0354ce","sha512":"e97f5b78cf476eff60c3ea72c1cc69bee785d770cfdb3660961eaf3787c4fc83ff8fa0a1f401b60d15e279fe52e90a1c30b818364ba996c4b3cc0d16839e905c","ssdeep":"96:Z1mGwpb+Q+8PwuGPh0ySsAM+2eTj7YaKka+pqGsxEqfau5c+15d8m3J9:Z3wkSwLhPXAM4H7Yaj1ILxr5DH733","tlshash":"8dd19eb621a3ef18d4cfa310a1219b55624a067e7b55245b7109ab1e7d78de6ca30213","first_seen":"2025-11-04T12:39:11.79459Z","last_seen":"2026-08-09T10:03:38.885084Z","times_seen":5,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.country.is/","fqdn":"api.country.is","domain":"country.is","tld":"is"},"ip":{"addr":"104.26.1.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:48.705Z","timestamp":1786269768705,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"country.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 00:18:08 GMT","end":"Tue, 20 Oct 2026 01:17:54 GMT"},"fingerprint":{"sha1":"C8:95:B6:41:54:BF:CC:CB:F6:25:39:AC:AD:BB:8C:44:02:D7:AE:5F","sha256":"44:1F:B8:8A:5E:D7:23:CD:EA:13:42:96:1B:04:9F:C7:7D:C7:AB:7C:D5:D8:F8:31:AC:3A:DE:D1:D8:12:39:F8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.country.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nOrigin: https://4k7e.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J40T%2F1Ytf4QSha8idjPCY%2BEVjE%2FW3RyjDwbDHS%2BIy57rfo3iFR69Sz%2FNd6avcS91oAAojvX8DNiVum%2Fl1TT%2Fx%2F%2FP1M%2B7LUZCAg%2B%2FE4mU6hQ6%2FIdoczIzuLS6lv6QeNG4\"}]}\r\netag: W/\"26-s87Asb/nOWeVJNZsRLZ5EgeHar0\"\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a285ed6689fac272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":689,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84ce7d452c22b1ff0ffc904e7ab8394f","sha1":"b3cec0b1bfe739679524d66c44b6791207876abd","sha256":"73029324a548df1d37ca51cc4e456e4925e9bb95cefab9e69892626377f64f40","sha512":"9871e27e557fd6f1deaeb8c3ce3d5638c659e1b6085c49e851501dc3300b1207d89eb1847fd0e32355132e7df50c4505b61e4d2601c78e13c9ef22c8d3012cb2","ssdeep":"","tlshash":"3580045500704f04d45043451445503040d7534113434d04c3c4333d4d401dc7000031","first_seen":"2025-12-20T16:42:41.64905Z","last_seen":"2026-08-09T11:51:40.898965Z","times_seen":417,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":4,"connect":3,"send":0,"wait":22,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/IMG_3379-bg.mp4?v=260","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:51.244Z","timestamp":1786269771244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/IMG_3379-bg.mp4?v=260 HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://4k7e.com/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:51 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 361872\r\nlast-modified: Wed, 05 Aug 2026 03:35:26 GMT\r\netag: \"6a72af7e-58590\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-range: bytes 0-361871/361872\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":361872,"size_decoded":362329,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"4e19f1144915a215d2aa25a012909351","sha1":"fa4cb4aa3161090e2d22c52a7a0e1537483b35fe","sha256":"ae940f26e7aded73fea7d0c1854f29e6f2ec0ca48590a9f9b70b2d4aa560d17a","sha512":"558e5648c5bd503e95e5c466f21a9521d1deaeb6e9e2c0e57b09547ab04c4563b707e59c1d867939f159c21bad7ec1b2db5411652dd47326eb0e1c73edd79f4c","ssdeep":"6144:pH3mm3glRfhmNyDqUXy6Bh3Ya5PY+LKrOQm39feHLUu1Xn54HWQcIEJyNol3iht1:pHT3gTAyDq273F2+mc392LN13q0FJ7lM","tlshash":"7c74236de47e7053c27508f931db67de9be4bfd816819adfc180b019a9f10a4063f6a8","first_seen":"2026-08-09T01:57:14.660554Z","last_seen":"2026-08-09T10:03:38.848714Z","times_seen":3,"resource_available":false,"data":null}},"time_used":891,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":739,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-4.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.043Z","timestamp":1786269772043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-4.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6aff50-17bc0\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97216,"size_decoded":93638,"mime_type":"image/png","magic":"PNG image data, 1280 x 853, 8-bit/color RGB, non-interlaced","md5":"a8e29efafeaf8b3fbb32b82c0e95ee73","sha1":"6d81c4b3144c1533e328a8d689afae642b30a594","sha256":"e93d5326085b2e1dd43ea027beede10a5f5b0b52f6e1b338af5aee2a21c345d5","sha512":"033f222fb745c3ed88fbdc4b779ea63bc93a247bb2bfd99b02f6d8620825a7b9e2ed5005b9782fe08d481da048b23801c13d61827b9a92d7f8401090f984e0dc","ssdeep":"1536:jGouyKc5uHx6HJBtPW0r2SOiNYpNjB9ofeEJIA7LnYaSOp5b8ylaZ8DHrLLQBJWh:jtDKc8iJjPTrCYSNj6eEJIQYrOphhaZ8","tlshash":"30930115d739f1e4914e383af2b7ac9ec299ab7f851a23c9d23338c390944749b48d69","first_seen":"2025-09-23T14:41:15.720194Z","last_seen":"2026-08-09T10:03:38.873436Z","times_seen":115,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-20.svg","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.861Z","timestamp":1786269772861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-20.svg HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 30 Jul 2026 07:43:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b0085-561\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1377,"size_decoded":1116,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0894cfd005d361c02e0968800c3835df","sha1":"4d26575475d446dffbbda2295ee06cad6088ebfa","sha256":"3522f321b5049f99a91201aace132c656d3b542bf66663e2b28f41f4a6d8f79e","sha512":"eb1ad188891a5beec7d238491263614f51bd2f39459b083293efcbcfd7c909d09693611436d26c88f6cc305d2d0dc0ec74e41c2e148e98e0688dd6e025a3fe5b","ssdeep":"","tlshash":"dc21c15dd12cd56dd897c1fccf5774f2a5afa16e72c2d314790d856625000eaf84f980","first_seen":"2026-08-09T01:57:14.71303Z","last_seen":"2026-08-09T10:03:38.859597Z","times_seen":3,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipwho.is/","fqdn":"ipwho.is","domain":"ipwho.is","tld":"is"},"ip":{"addr":"172.66.175.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:48.726Z","timestamp":1786269768726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipwho.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 17:11:12 GMT","end":"Mon, 02 Nov 2026 18:11:07 GMT"},"fingerprint":{"sha1":"5E:E2:C3:89:78:64:9F:D1:72:38:82:CE:9A:64:52:5E:6F:BC:2E:8D","sha256":"84:35:87:FA:FA:70:1B:FD:E9:C4:CE:E2:2B:E4:BB:4E:2A:1E:20:D4:9B:99:4B:F6:FC:3E:CE:8B:56:FD:9F:30"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ipwho.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nOrigin: https://4k7e.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 09 Aug 2026 10:02:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\ncf-ray: a285ed66a9eeb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":638,"size_decoded":718,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9b4377b9e6c0d9740cdc35026f2cc0b7","sha1":"b20c30ff2e74b92c429dda872a0f1b5c03a52e54","sha256":"9792c57511ae767e24192193a3cfa3cf088d3e478d44016bf688bc044ac4dedf","sha512":"95e9694954fe1fb5412932cf8f93e67027828c60e40d152e94abdf6d2b475f4d9fd5daee99ce904e2c668cd86a78635f74d59819b9f3a7848f775a900606bd91","ssdeep":"","tlshash":"cff02d21019c7e0e86af438a20cef90a26bc2017d2c2a18ac8fc5a94c1c42ee708016f","first_seen":"2026-08-02T22:12:00.58064Z","last_seen":"2026-08-09T10:03:38.861659Z","times_seen":142,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/dy-cHxTr5JM.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:51.541Z","timestamp":1786269771541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/dy-cHxTr5JM.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-4f37\"\r\nexpires: Tue, 08 Sep 2026 10:02:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20279,"size_decoded":20822,"mime_type":"image/png","magic":"PNG image data, 282 x 282, 8-bit/color RGBA, non-interlaced","md5":"82ca0ad503d81ba4f7e7a090858c8cb4","sha1":"ad6d23ee52ab594ffbf773d1b534f7fd783c8271","sha256":"436c7a1d6f7c5e96720d0f0fa82b5d9bc9875d6b09e872e6904dc67584e9be68","sha512":"e90c3113ce6aebb10011cc4dbe8ef3f0c426ffec80b0d5e672692f81c197b2d23f7af9597b6fcc9b97989bf7b394f6dba1b02b6a3f91735ac9d6f940cf6a54e4","ssdeep":"384:ciucpNCcbnyF21dIzNg+hCWn/KfoIrIY+NH2sziOV9m223IjxFmeLLdspy:6cpUYC21duZlpuIYAWkiAYk8eXgy","tlshash":"8c92f15fa39b9e125eb9048fca071bc4e10975243bec48a58169f4c2437dc2fecba586","first_seen":"2026-08-09T01:57:14.645402Z","last_seen":"2026-08-09T10:03:38.872695Z","times_seen":3,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-7.webp","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.041Z","timestamp":1786269772041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-7.webp HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1226\r\nlast-modified: Thu, 30 Jul 2026 07:39:03 GMT\r\netag: \"6a6aff97-4ca\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1226,"size_decoded":1664,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ba5cd4227f364d7352ecbae3f52755b9","sha1":"185affbcb73ce0bb9d387540a0bb76f8124d1bb6","sha256":"732c470ec17955a4153f539dbf0ec15be8f72e1bd8835b40e347362ddb904878","sha512":"bdac851e35756c0990c8fa99d62ed3336a1f7bfa1e637a1ebb6d92f977c1f18b77a5bb91f8346f184cc42413edcc033ce176e293ed1afaa4e95d947fe132edb7","ssdeep":"","tlshash":"9b21b6387331177cfd56767570d70fc1f7a5b8318e065229c04043b56f004c6b898847","first_seen":"2025-11-04T12:39:11.815319Z","last_seen":"2026-08-09T10:03:38.867642Z","times_seen":5,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-19.svg","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.696Z","timestamp":1786269772696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-19.svg HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 309\r\nlast-modified: Thu, 30 Jul 2026 07:42:48 GMT\r\netag: \"6a6b0078-135\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":309,"size_decoded":749,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8890877fc281b3552728b534c6c75c3","sha1":"0954b54d485a581dec659d0f3437de3e91800110","sha256":"7d51020bf2ac5b6f5d54aa54e5c61550aea276b411e141fc478b391915ee8fe5","sha512":"dc11cef2ae2002e801c4eeb790a623023733a0bd2523a917b18efdcdfb7ed8bdb7d35ff9e47f5c75ebc9012c7c84a385496c85dd87a01a5b764cc0dffdc536b6","ssdeep":"","tlshash":"f6e07de461341c0441a143358e7ca8c6018f70c6200502edf01821b81a0abef7f19d58","first_seen":"2026-08-09T01:57:14.665031Z","last_seen":"2026-08-09T10:03:38.85458Z","times_seen":3,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/live-gate-p2.jpg","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:49.032Z","timestamp":1786269769032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/live-gate-p2.jpg HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Jul 2026 21:13:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a691b92-183e\"\r\nexpires: Tue, 08 Sep 2026 10:02:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6206,"size_decoded":6376,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 400x200, components 3","md5":"1e2c12df9b49e3b4110b19e56ce9d7d7","sha1":"952a81e101a3b0afcf2d6965b2fd4b63d6f5cbd4","sha256":"41e34cc622614797933129c9b7a9a0f70424e5b7b48691d008e65838093c0741","sha512":"0d7588a02a78d065fc71016a90346cef2043b4be8dd97d7e2e9e49499f0765b6b3f8cf0ebccfc785c0725bf16c53080dd7ba3e02153d34c60c7d8f3ee8aa561d","ssdeep":"96:mIheKF2hK7+mCpwWPZIoytxEpxH3k4VcisDbbKUcUY23lFQB3iGDPNQpGIYSA19q:mueCzqhFytxwGKlUhxGxF3fHYv","tlshash":"16d1be9307866d0bdf3ea6b266db2362a360ef41c52c1db113588ea0f023c7d0860662","first_seen":"2026-08-09T01:57:14.704551Z","last_seen":"2026-08-09T10:03:38.852532Z","times_seen":3,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/zg.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:51.239Z","timestamp":1786269771239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/zg.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 01 Aug 2026 00:14:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6d3a5e-3d71\"\r\nexpires: Tue, 08 Sep 2026 10:02:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15729,"size_decoded":16261,"mime_type":"image/png","magic":"PNG image data, 128 x 77, 8-bit/color RGBA, non-interlaced","md5":"2db7db6a7cac5c1d008a865ff81bffb1","sha1":"7e241c3c2301989184cf17a28432a60b25491f3d","sha256":"8398f274bc7daabd4c2a4e412045a362a3fd3aa7f76a8dc47c292ea36c85046b","sha512":"58bb60baacca4a4a6d0bf5484d7fb272499bab7ace8339fa126009ae8621adfe026ffcd40ec38540a43c911badf9ecb85d991511e5466d7e9e09ec797473923a","ssdeep":"384:fR652Xpmb5HnNVBGDmiQg4J+gksPdzWLTZAcg/UlS1ZXjuqLnv2VMWB:fRzcDVBm4zRdSQU8Jzbv2yE","tlshash":"3362c0d6d627c17eed181e4d6241f158749ca08f20bc0ac85883a58f5eacb9a3c76e4b","first_seen":"2026-08-09T01:57:14.627321Z","last_seen":"2026-08-09T10:03:38.850161Z","times_seen":3,"resource_available":false,"data":null}},"time_used":743,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":743,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/guest-avatar.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:51.540Z","timestamp":1786269771540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/guest-avatar.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Aug 2026 23:49:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a712927-3a97\"\r\nexpires: Tue, 08 Sep 2026 10:02:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14999,"size_decoded":15466,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"2d87b0a1dc32c5322f77a5a6429c9b97","sha1":"4e1e9da8fac38c7f8ab95931f132d75b810133a0","sha256":"32d16b02df340c374948a9fbc1ff545ef55e9413c92b80a8db1b3c7c699274ab","sha512":"8ef027da41e1625473ec181649cfca6dea4615a84213c565d981dd6e01786fb0fad37f58d34a557ab7277cf45141c44df20b8645129395f5bdc01eb6a2fd76a8","ssdeep":"192:3gYw2mzyEz4lP9O6JNEv9uVe/rlpeAlVJ9TaF8TDEVcq1SEumXLdTzHu1gz400Yx:3z1tlLANrtTeybqF/XxTzHBzGYx","tlshash":"8362c01f6ee4002e162f7485b6a02d12bfa12057085d1fc06f1c5bf2d7e489afbc66b6","first_seen":"2026-08-09T01:57:14.695298Z","last_seen":"2026-08-09T10:03:38.87718Z","times_seen":3,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/LoginKefuView-DHhnOeQO.css","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.035Z","timestamp":1786269772035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/LoginKefuView-DHhnOeQO.css HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-1757\"\r\nexpires: Sun, 09 Aug 2026 22:02:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5975,"size_decoded":2161,"mime_type":"text/css","magic":"ASCII text, with very long lines (5974)","md5":"d530ac658d314cabe12dfbe20bff1b01","sha1":"db9aa4b6adf35f8ab98554466ba566d356d7721e","sha256":"9307260c509d0300968a7462093736cb89e28ef807fecb330f3fd8455be76ab5","sha512":"7c6dcd1ec8101c1e509c970b8200b420012d8f5d43e8fb72d5c513e41616c8e1ad963fe088c3eba78fe427e44073dc1da99bb2896e515eeb4ea2c6e6dad75e3f","ssdeep":"96:9GN0afXQH5xmbe/hGnWCGDLczn4Eo9GpGslsvF:GRfXQZ8mAnWCGDozqMIy6F","tlshash":"abc153327d05212cb53fe8e0a992668e3368e19bf51117a8ca85f73688cb7c73d715c5","first_seen":"2026-08-09T01:57:14.699601Z","last_seen":"2026-08-09T10:03:38.878905Z","times_seen":3,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-5.webp","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.038Z","timestamp":1786269772038,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-5.webp HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 284\r\nlast-modified: Thu, 30 Jul 2026 07:38:12 GMT\r\netag: \"6a6aff64-11c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":721,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3877b0647b7b9ac47b69d0ca9d6a937","sha1":"0888e31bb77ec453bd78bd3481bf5ebc044cb746","sha256":"626f53e02ef5fe7b0082dc971a3d94a5d5d8f6c1571a22c60fd34665504e3470","sha512":"dfa161ecbe45b581810c2e6e3c9f6adb7ec10842872f28acfcc786c6600a800382e9965de19042716189f5e41751a0416eec5230d059a599ed67ab3d405948aa","ssdeep":"","tlshash":"11d0ebaeea245140ae61686c33cd94140014260b38ece8c82a6f81adfd8e8033ea41f5","first_seen":"2024-09-20T15:27:47Z","last_seen":"2026-08-09T10:03:38.856333Z","times_seen":117,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-11.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.359Z","timestamp":1786269772359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-11.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:40:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6affd4-1831\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6193,"size_decoded":6726,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"0078880ce0a98da93abc22a6be07f95f","sha1":"191f68571f20cb271d9db6318d599391c88508f3","sha256":"2f226f15a4a40f578de19cd564985048bfd9a8c4e6f5792745ff05502f0354ce","sha512":"e97f5b78cf476eff60c3ea72c1cc69bee785d770cfdb3660961eaf3787c4fc83ff8fa0a1f401b60d15e279fe52e90a1c30b818364ba996c4b3cc0d16839e905c","ssdeep":"96:Z1mGwpb+Q+8PwuGPh0ySsAM+2eTj7YaKka+pqGsxEqfau5c+15d8m3J9:Z3wkSwLhPXAM4H7Yaj1ILxr5DH733","tlshash":"8dd19eb621a3ef18d4cfa310a1219b55624a067e7b55245b7109ab1e7d78de6ca30213","first_seen":"2025-11-04T12:39:11.79459Z","last_seen":"2026-08-09T10:03:38.885084Z","times_seen":5,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-8.webp","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.363Z","timestamp":1786269772363,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-8.webp HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 696\r\nlast-modified: Thu, 30 Jul 2026 07:39:26 GMT\r\netag: \"6a6affae-2b8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":696,"size_decoded":1133,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57f2f57eaee0d7dd49e00370c847166d","sha1":"563f42fbcdd46c4aa2e93fbd36faacc66005c1b3","sha256":"79d7b899dfdf2755502b12c610984e022c9501820be92987e64d9824ad97eb21","sha512":"8a3ee6a6e3f557d12319ca4cec307f3a117a4d04ef9d229cd80b8225b387587b5ead45d41c894c06c840788c969006886dfb273c4b5db1315cda1944cb193adb","ssdeep":"","tlshash":"0901eb381310539cf2206b7468c01f83fb79bc2583462604c25442230f288c1aeac1d7","first_seen":"2025-11-04T12:39:11.7712Z","last_seen":"2026-08-09T10:03:38.862303Z","times_seen":5,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-19.svg","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.695Z","timestamp":1786269772695,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-19.svg HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 309\r\nlast-modified: Thu, 30 Jul 2026 07:42:48 GMT\r\netag: \"6a6b0078-135\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":309,"size_decoded":749,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8890877fc281b3552728b534c6c75c3","sha1":"0954b54d485a581dec659d0f3437de3e91800110","sha256":"7d51020bf2ac5b6f5d54aa54e5c61550aea276b411e141fc478b391915ee8fe5","sha512":"dc11cef2ae2002e801c4eeb790a623023733a0bd2523a917b18efdcdfb7ed8bdb7d35ff9e47f5c75ebc9012c7c84a385496c85dd87a01a5b764cc0dffdc536b6","ssdeep":"","tlshash":"f6e07de461341c0441a143358e7ca8c6018f70c6200502edf01821b81a0abef7f19d58","first_seen":"2026-08-09T01:57:14.665031Z","last_seen":"2026-08-09T10:03:38.85458Z","times_seen":3,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/index-C2awDlO6.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:47.606Z","timestamp":1786269767606,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/index-C2awDlO6.js HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-83844\"\r\nexpires: Sun, 09 Aug 2026 22:02:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":538692,"size_decoded":134931,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45717)","md5":"54ff103b14a271de2bb5f61f125f7753","sha1":"b57a2c4a3f552a6854e360b1a16ca33b97f9305c","sha256":"0e3aa40a70677a0852d77cc2a8fbb3bc0bf65a564ef913cc6303448ac30d7411","sha512":"7a55ec99a62794d09c91b217f47f834908f8087af7beead5efcbe659dbfed9e8f363baead2ba9a3a983b1086e9c4b4b4454bd1954f134d180b146e0532a10464","ssdeep":"12288:O0NgRkOMOFwsgyK7CqhEGGXNYfYPVClL954MDXWb/UYNxWRqHnNbbKtjGBQAsKNF:kgE6lWB5VU8+8vCSbd","tlshash":"46b4ae3523db35ba0194db81e2c7b26835241d7bb60ee6e190f1ad6d25e110b8b76f33","first_seen":"2026-08-09T01:57:14.724146Z","last_seen":"2026-08-09T10:03:38.898852Z","times_seen":3,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/assets/vue-vendor-OsbTyNw5.js","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:47.608Z","timestamp":1786269767608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /assets/vue-vendor-OsbTyNw5.js HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Aug 2026 05:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72c45c-6cf7\"\r\nexpires: Sun, 09 Aug 2026 22:02:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27895,"size_decoded":11639,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17265)","md5":"84ea1fb2cb98ff93391e1191582baaf4","sha1":"3e488f601a781b03f1cdbffe3854351043446f9e","sha256":"616d26901bfcd6eb8551cbaa7a965f18af37025706dd14c1e47a1e2a4402a46d","sha512":"c5641870b153e648f15ef576e8492d0db404f5c61ea0ff01f240b132012760e293b00fb76baab75eca83f148204023871839a11d3fa8adc24f6247cd382c3d52","ssdeep":"768:mpBZo+keFuKFr8fyVAwsNZ0d/pCx7Cb05lbNLjiRV6+jrStd7BnT1ylCmJ8Rvp+E:Y7oYplvw9BnT1ECX7p","tlshash":"84c2e7a9328670a147b609e8507f2405f2751d94348e94e0b12cade73c77c9dd2bbebd","first_seen":"2026-08-09T01:57:14.666033Z","last_seen":"2026-08-09T10:03:38.86528Z","times_seen":3,"resource_available":true,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-11.png","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:52.366Z","timestamp":1786269772366,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-11.png HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 07:40:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6affd4-1831\"\r\nexpires: Tue, 08 Sep 2026 10:02:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6193,"size_decoded":6726,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"0078880ce0a98da93abc22a6be07f95f","sha1":"191f68571f20cb271d9db6318d599391c88508f3","sha256":"2f226f15a4a40f578de19cd564985048bfd9a8c4e6f5792745ff05502f0354ce","sha512":"e97f5b78cf476eff60c3ea72c1cc69bee785d770cfdb3660961eaf3787c4fc83ff8fa0a1f401b60d15e279fe52e90a1c30b818364ba996c4b3cc0d16839e905c","ssdeep":"96:Z1mGwpb+Q+8PwuGPh0ySsAM+2eTj7YaKka+pqGsxEqfau5c+15d8m3J9:Z3wkSwLhPXAM4H7Yaj1ILxr5DH733","tlshash":"8dd19eb621a3ef18d4cfa310a1219b55624a067e7b55245b7109ab1e7d78de6ca30213","first_seen":"2025-11-04T12:39:11.79459Z","last_seen":"2026-08-09T10:03:38.885084Z","times_seen":5,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4k7e.com/static/images/lang-3.webp","fqdn":"4k7e.com","domain":"4k7e.com","tld":"com"},"ip":{"addr":"45.203.220.45","port":443,"asn":984,"as":"OWS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4k7e.com/","date":"2026-08-09T10:02:51.237Z","timestamp":1786269771237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4k7e.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:19:24 GMT","end":"Tue, 03 Nov 2026 11:19:23 GMT"},"fingerprint":{"sha1":"1A:7E:A0:79:49:06:A7:6B:5E:F8:82:E0:D2:76:B7:07:F1:F4:FF:ED","sha256":"0C:1A:41:C3:6F:94:79:1F:6A:2E:14:21:3A:69:1C:86:96:2E:67:BD:03:3F:38:4C:4A:82:20:FC:FC:AD:D3:13"}}},"request":{"raw":"GET /static/images/lang-3.webp HTTP/1.1\r\nHost: 4k7e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4k7e.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: think_lang=en; think_var=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:02:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 352\r\nlast-modified: Thu, 30 Jul 2026 07:37:30 GMT\r\netag: \"6a6aff3a-160\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":352,"size_decoded":789,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"646e1e0d92153b3b4ce764c7b04ed767","sha1":"6d1ed0385c5b41284b26faa32c42cefbcb5f0a2d","sha256":"79bcedc7c67a3546239bf1abdbddb72177a92046c6bd35c7959228dadbde8136","sha512":"4361c9374ffa08e8d0f19ec45902bf7cc6728e705b20301cfed9812e19729c8b2fcd550cdbb2916ea50c4178b640d9b0f16717fe63c33f9529ece0788d6ed1bd","ssdeep":"","tlshash":"f9e0c0fa11801c38ec99a4ac02d6b5d7e04c01d60ba14c003b8106ba03aa139b658e7a","first_seen":"2025-11-04T12:39:11.785202Z","last_seen":"2026-08-09T10:03:38.869703Z","times_seen":5,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":745,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"4k7e.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"4k7e.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}