{"report_id":"0eabf4a6-28c2-48fd-a03c-98cb1c9a8e69","version":6,"status":"done","tags":[],"date":"2026-05-17T02:10:53Z","url":{"schema":"https","addr":"www.mkwhcsq.com/","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"172.67.181.103","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.mkwhcsq.com/#/index","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"title":"Shopee","dom":{"size":192657,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (44693)","md5":"63cca59a28aaf76c825ce1079ff61488","sha1":"36cb0b2a2340e7e10cda5b10f86907ff256151b9","sha256":"506997e03d8a313cdc727a1d28da2b3ed3179f875e6011d53b2eed2e940682e3","sha512":"82d2279efdf5ca06022a114ca1073f08d523e92a123b42b50e994a8b423b011c60e9dc1d4d6aff1c8401d9163d4d1adbc878a2b53f752f1be0111ae3a252d12e","ssdeep":"3072:npaRil9R1T6N80wUMaOoV7gaEpkPepbPN:npasRR6N80wjaOoV7HEpyqZ","tlshash":"94146371c96a223b42274cd870705b4fbae3c31dde97560167fca78a5febc94ea08485","dom_hash":"domhash0ee1ea8eb635865027527529cd189414","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.mkwhcsq.com/","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"172.67.181.103","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-21T02:10:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mall-test.s3.amazonaws.com","ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2024-08-11T22:28:16Z","last_seen":"2026-05-13T10:08:47.683191Z","alert_count":0,"request_count":46,"received_data":6538663,"sent_data":20659,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.mkwhcsq.com","ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":248,"request_count":124,"received_data":7306336,"sent_data":53332,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"imgtest1.s3.amazonaws.com","ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2019-08-25T08:51:32Z","last_seen":"2026-05-10T11:08:59.673587Z","alert_count":0,"request_count":22,"received_data":1469425,"sent_data":10033,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"sk-tk-mall.s3.amazonaws.com","ip":{"addr":"3.5.149.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2026-05-17T02:11:04.642097Z","last_seen":"2026-05-17T02:11:04.642097Z","alert_count":0,"request_count":18,"received_data":14497152,"sent_data":8265,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/vendors~app.de839525.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a2e2620e56aeb87314ad31b2d20f151","sha1":"c47ac2723bc746d72bb25e488c59ddb6b56340a4","sha256":"bb0b89499974411e2d86725d8df128255e67ddc5a70de051746863239c9b8812","sha512":"e937000fdb9a906f657b1f8a9bc6d8f852e5d094dbb671fa0147e45ae458f87876cbddb7f52e2d2307c7284614016264ae180f734a7105f8c6550f0462de36d8","ssdeep":"49152:XJypp88Cx3zMCzMffKGbJUV/8rW4AhW0rzHR1P8Id+is3tTZ4ZUy:5izCxDMCQaGFUV4W4grPITZ4Cy","tlshash":"b3f5c35c365af340914ad0e7e43b3c49d26ae189a40b40d07f7187f31eb574ae7aee26","size":3579712,"data":"","first_seen":"2024-07-31T10:49:34Z","last_seen":"2026-06-06T14:40:04.526851Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/app.b8f67cc8.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d53368160c088429112db1ed8e934f07","sha1":"1fbc98f1e42f0432963e792626e11c5e74df5dbd","sha256":"41c213ee9fe9da5e19aa70402a0b6bc8bfc4bd2b431e809f3add9139b57447a9","sha512":"b6e181c48b1ce861df056a31d4b45312c6483f9eee4f4194159a4f05f24a9d1798cd658e3891fbecb92d53fe05da193a5fefafb59fd7f87979df5817a658c64f","ssdeep":"24576:1OaWKd8OV1hfWMU92HPMHD4+tLz29HxNUCOE3Nkxp5R+4t69uE9s1B9Lfbzxg7Bu:1OxKd8OV1hfWMU9CPohtm9Hb59dWf+8f","tlshash":"65658daf67da77fc08545646a04f3974219c1cbafb96f4e008edf61922e9e40c213f69","size":1443394,"data":"","first_seen":"2026-05-17T02:11:28.877166Z","last_seen":"2026-05-31T13:48:58.361424Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-79bc161e.c5735a58.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0997eb4e778f8cb41cc88d76632d0485","sha1":"d499a986749e1c2805d475d690ea18ba86e2a0b4","sha256":"788f56d8df889f35cd7f4471f5da8fa3f65cf46cc4bf9cdce617390c6aef8724","sha512":"14a898659c11f5bdf7362d29b870f0d6a0d9228588feab91d9dc73e4385e6550f8afe78e55132733dd3698c7d70591639bcccedbfa57b8dae42c15c57c3f21e1","ssdeep":"192:9zCjfAcMsHRpMu7mWKD12R+YEX+WzU9MuMOO0Kxq/cictjAfNeNF/BPsGC3M:cfNMsHRp3Q19X+WzU9MKXmvPd","tlshash":"eb5285e6c070a4bd895a82b22055f1e0fb643a1cd102514efa7cec9b72dd424332e77e","size":13662,"data":"","first_seen":"2026-05-17T02:11:28.589918Z","last_seen":"2026-05-31T13:48:58.233501Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-2bdc7c1c.b5ba7b7f.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44cee33451db802573f054731f83a9ce","sha1":"4779c42be7e25f6a87516e80943a9c28027aaead","sha256":"98c534485551816379ec54c3d0aa253d469a0f20b6ad3b97e53b9541a7111b50","sha512":"6e01a994eefd657558bfbdb6ef8198495ce93b0ea4fe5912c5b45e71bf735dcb976fb517c2a9a5e7465b5135b0c90d783f418cc4b6c3bc0103d51ffc3d56b1bb","ssdeep":"384:/XWsnfX8q8V8bTpAtlfs/0NbuGoalAu2bHz/jvMs4WvzsL5cU+18e:/pMqs7s/gbuG6T/AsMLDe","tlshash":"55e20a4ba4c2687d899a6159241b1658b8323fc5d041c8d6b63cfdf4e2f8e34772b76c","size":33190,"data":"","first_seen":"2026-05-17T02:11:28.633448Z","last_seen":"2026-05-31T13:48:58.235193Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/f638f5c6-610e-4035-8a7d-1b49bd18a6ea.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/f638f5c6-610e-4035-8a7d-1b49bd18a6ea.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: nQFH2WqszUSMmO/4nVoHnt4WH6Y79r0CEvC+q3rgSteiG5qv+yV+EPcpCQ+ch14BiKNyPkvSUl9dtCbYzb2COZ7B6aC4CzFX\r\nx-amz-request-id: 49WCKWQG9X0D563M\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"b367a1a2939abed5721ba1cf5fd272ac\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 43151\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":43151,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"b367a1a2939abed5721ba1cf5fd272ac","sha1":"14494a7fe1017a29f9fed7421f7d652257490203","sha256":"46d322495677c8a7c5394e265b4ff29491e138ca470aa1ca2d8abf364db9cd21","sha512":"2952940e26d548ef1b5caaff6ed0f6226a5fe3333be792544289621e428353943df8b2c80303329041e0b0308b6fd4961d0805110e5d74bf4bfd3808f3c71117","ssdeep":"768:GAnBvnXpOznCDoX5cNyXgGjFLhpx12yVa6+kZL/4FIpV8xoeKzHMkLFr3:GAnBvZOzCe5cNAgGjFNpb2R+4gixovLF","tlshash":"4b13bf87ad198f936454dbb87f530c396bcc1e1ce8463af910a52ed72f582094caf52a","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-07-19T06:15:01.534682Z","times_seen":9544,"resource_available":false,"data":null}},"time_used":1013,"timings":{"blocked":393,"dns":53,"connect":96,"send":0,"wait":133,"receive":94,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sk-tk-mall.s3.amazonaws.com/selle/2026-05-10/3daa0283-f13c-4ba6-81f4-bc1be4e9b4d8.jpg","fqdn":"sk-tk-mall.s3.amazonaws.com","domain":"sk-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /selle/2026-05-10/3daa0283-f13c-4ba6-81f4-bc1be4e9b4d8.jpg HTTP/1.1\r\nHost: sk-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: JlG8PGNNP85VhdpYLTs8xqXClCRlUrmw1/7pTuE1/CsSjopkYlGhfR6ASYMJFY3PuC0qmEZcAEYYwnyQ5HL2+CjoH2+xIhFH\r\nx-amz-request-id: X5T2G3W0V3YBPDZ9\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Sun, 10 May 2026 14:55:39 GMT\r\nETag: \"0e7b28ca74ba41d35a08eb1269988059\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 261648\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":261648,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1440, components 3","md5":"0e7b28ca74ba41d35a08eb1269988059","sha1":"a0fcf269494a693f2bbff07541b9df2bfe6b7c17","sha256":"dc39bbdc7d5b22c50990c4b14583c738d7dd47f6b2b2493b6a7556f54af96149","sha512":"5d7e1480969979b21114e4b027df358e53b023ed7722f8289a28b300b44a9ce31e9e48a86dedb5bbbb8de5be5d2519d5319a687c898f380303eb5d2b3e4b2342","ssdeep":"6144:E2DUYSYYxHAB8ym0UmH6qAzFS/FfkL5a5gjcfLYp4cw2:0YkxHABRoHUdfKkgYLYO/2","tlshash":"914422d306da93ac8e168534fc7d215858b603383ddcaab2c3681dc613954dabfef964","first_seen":"2026-05-17T02:11:28.580791Z","last_seen":"2026-05-31T13:48:58.300149Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1548,"timings":{"blocked":171,"dns":0,"connect":0,"send":0,"wait":367,"receive":1010,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B071V2Z75Y/61j2rYufLHL._AC_UL1000_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:29.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B071V2Z75Y/61j2rYufLHL._AC_UL1000_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: QC4vL82qyumx6hC7rGCVmM/lgFN0I63p7uy6ukL40eMAooLME0WYtT6N16Dvb3WhWv4HF7lQLNLBeZ0pRh4NCxA6Mbn+jkGZ\r\nx-amz-request-id: X5T5B1DTA3E36PZH\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 00:39:14 GMT\r\nETag: \"17cb983c7221583ead9bb3f86a6c5e9e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: a7cb0254274a9f026778039c85fec4ee763cd19ab76f141cbfa47fb003694f29\r\nx-amz-meta-s3b-last-modified: 20230718T074914Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 75291\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":75291,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 530x1000, components 3","md5":"17cb983c7221583ead9bb3f86a6c5e9e","sha1":"301b825eebab2c6c9d8290566cd5835433363a19","sha256":"a7cb0254274a9f026778039c85fec4ee763cd19ab76f141cbfa47fb003694f29","sha512":"0bb09799275c16a0178be527f8f8e849052b216dabb9accd4e8e23287473cb8ad9cc9faaffc9f135fcf0bb7eaafb5074fe99c6e438ad4ced6b90d2f172d1fa0e","ssdeep":"1536:VG4vgp28yL1ccoJ3tz000YIW7tpjZCQk/wfJ6Ag2dzBV3SG3dc5dKdqizq:/oplsEMRgtpZ6/w652dz/CYi5dKM","tlshash":"897302078a71c804d0fe6e34b19e92ef7b30c78c664178f3ac52a03759581a6e97379a","first_seen":"2024-09-19T22:34:32.573497Z","last_seen":"2026-05-31T13:48:58.267587Z","times_seen":20,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":389,"dns":0,"connect":0,"send":0,"wait":115,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-2bdc7c1c.d10fa6e7.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:32.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-2bdc7c1c.d10fa6e7.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:32 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"15177-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 5\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qaFTQnx42U4NuK7wyfSZ%2BtQhEm5puwcaJs4RXvjBRgSYa8djj3zhGKeQG6WEP8Tzkyy%2Btwh6cxRO9WgkRjHedkYs2uWTkJlY42aw7xR6vjjjL6VAMwF8MN7sxmjRe6%2FZ%2BUk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf161bd943b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15177,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15177), with no line terminators","md5":"e8f0d8a145ea382f2121421c8087d314","sha1":"2141f6a0814533f4403f813ab214c0db606ed844","sha256":"b3ade7cf169fe446ca4328caeedaa6e148e424a1c1bd5b6cfa17da8314e97eb5","sha512":"152dd11cf62faf5e0c57b51da6ee42af53261ef2bb2717bcbfb892afbc74968cdf6cc04a0a2f4a81266f072c212878851f47759d59e208af85b0802f15e03931","ssdeep":"384:iCQRDeBzT8lN9lc1J41+qFkV0vD5rw/CVFcjTK:iTe2lAJ4EFaDm0Fc/K","tlshash":"1462d87365a0963a76b79a7931c4a4ce7067e923c11742bdab59f13cc8c72a3263134e","first_seen":"2024-02-19T23:01:27Z","last_seen":"2026-07-09T07:07:04.493375Z","times_seen":101,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-9d964e9e.1a94a034.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:35.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-9d964e9e.1a94a034.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:35 GMT\r\ncontent-type: text/css\r\npriority: u=4,i=?0\r\netag: W/\"428-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uCfLK6xZcvhLlfe2sdUCifXfjzjFukffdI17bbPA2MsrWLnyIL9FIdohkIEyBZvtu2NB5pUYd3v1aRN%2BiQcgmT7Z2IJCce8i23Nh7jwOtYGBNkBxtiehm0Ytpyy4C9ODiuI%3D\"}]}\r\ncf-ray: 9fcf1629499eb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":428,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (428), with no line terminators","md5":"839113b3a06297a1185b208299520527","sha1":"df67e42e507fdf888b4f0b1706a0bd54e09763ff","sha256":"ae7439473b984cf35ac3a8199ea3a3ccd8c794d239d0e36fec25cd4a3f0222ac","sha512":"da16c62f7431636915bdfa092d4468b66770272aca96b2e4c27d1bf9cd36b044dc03acb199486e709a3a82c272c9ab6ffe79305e116376d596ec30e3523dbf6b","ssdeep":"","tlshash":"2de0a0a051072a3b2563f0b6a8c20427b655f7abe91291107be305092e7b38a68373e8","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.363745Z","times_seen":6807,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-708e8450.d1916050.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:37.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-708e8450.d1916050.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"50645-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ufwz9bKjU0GBz9%2FCcEBzXYslwqd5Gxuh73DnMdN3803oTEg0bdnXwok%2F44Ajk%2BTwf1Sjdo%2F23eULLJ9bNQSncKr5M9sU9omO8EolLg7peP%2BGFCJ50zgmW%2BP5gOUnSj4OtKs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1639d9efb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50645,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50569), with no line terminators","md5":"6ceb996e01c7a70f7f68c1cbf4c37c07","sha1":"c978afb33de8442807a6b5d567ccba56041543ec","sha256":"de423b181b69f29515a0eb379e1f7ba57bcc0eccb69f9a23b5de79eb2ed05098","sha512":"58fb94a5e2237bea35aefc00b1b4228784412eb679ef5715f66d6c6167d10496e69eb34203b8a04adc22f6064409bea707f84409fd9a6b93f740e174910c1bde","ssdeep":"768:MXy9m3v1Y6eUpbH/7wkDOLJdqBPjHCogWn6Ia1KABkRq7h1:OSMJ7TYobMW6IeBH7X","tlshash":"18331a436129b45e5f6752a2301b20a1a2a426e56409989ff27ccdf973dcc243b1ff7e","first_seen":"2026-05-17T02:11:28.584069Z","last_seen":"2026-05-31T13:48:58.244321Z","times_seen":4,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":930,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/wap/api/seller!list.action?isRec=1\u0026lang=en","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:27.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"POST /wap/api/seller!list.action?isRec=1\u0026lang=en HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://www.mkwhcsq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tXJ8EN8PJUleXtvDNG8EGTjfT34hBsaK8pTCubk%2BdnP7%2Bucj8hsNgV5rMkSbP1i6KAOdeia0WBbqymhX9J3UmOvAq%2BVE%2Bw2HSLRCJtzaa%2Bw1zfqV3Bfre5uRVo6%2B7xx%2FesE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15fc18c6b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18605,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"555fa13f620a236062b354a445e51c59","sha1":"6b55785358c07dd60a2e5020906a8ec20e246a76","sha256":"b3981f1801f6ad4f1a09af4f38e36fd30dc3a0123d5e293ad462963602717f4b","sha512":"df399a1188d9f59c5b439f6898e052d3edca1c0f7bbaec364e0ceb406e02132bc059bb8cfc16ab74e0cbd79c9ffffeee6f371f16ebe29d824a669a0d9aef34b1","ssdeep":"192:5qEvVuqsjuj2u4+IYFNp2ujYuQUugiJDusTOau+4Ia/u4/uPDUu/tPutiWuVTuvt:5qK7skg+hNp7qiiVTr4F18D9+AQm+","tlshash":"018213492a4c7e72675d5e53bc077e86c0ac12cf5d868e71db9ccf0829f8ab4571e620","first_seen":"2026-05-17T02:11:28.585Z","last_seen":"2026-05-17T02:11:28.585Z","times_seen":1,"resource_available":false,"data":null}},"time_used":824,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":824,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:27.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sbAoLm1Y5QH7zCFYvQ%2FmSfcwyMQTeCjZYxuNNu1cLnKfgrW0S822TJqIsKPNrc4zXVwa%2B7eOdzoaLk4oRx2UBfWNLabQJAXIOHwcIgkB3d805b5au6Ql5V%2FvZFdER5tYn8s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15fc18c7b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"87f201052e0dc6c3b8a4a53b83bf44b5","sha1":"f6b152fa79c655449e9e938e4417a5676a2e06da","sha256":"fb522b0841e80aac3e1cb4fe0f613ae4bfd87fcbe1c03d0137e5c10fbdb86cf4","sha512":"8f854611a22d0fe5ab058bb7ae25c79e995dcc20396f0e64e68aea6662f71cd4144e3378ca1d648d4e3785d96bdb9522864359c14da34c69bbcbceb0bd412777","ssdeep":"","tlshash":"8aa00200146d582b0ca364896c6d39548a5e615348d09f246f99a66440de56d1004429","first_seen":"2023-12-01T19:12:11Z","last_seen":"2026-07-21T20:31:55.967677Z","times_seen":6195,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/df5865b4-fbaa-4cfe-960d-b53e9781bbb4.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/df5865b4-fbaa-4cfe-960d-b53e9781bbb4.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: r7G4cdTGxlHnmmr8D2IiJehUR13lnfn1bbdx0FJEQ8jEg7pVjM1IjpKE8erk/U3HbwP8qiDxKkl+mrc5Wx0WxaxA7O0xhtcS\r\nx-amz-request-id: 49WBG0VP8SSAA0PQ\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:54:33 GMT\r\nETag: \"0f076e5566fdfa9c2e0727da459375a6\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 150127\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":150127,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"0f076e5566fdfa9c2e0727da459375a6","sha1":"6b67360926620bd5cc00d9489451c8183cf5a008","sha256":"f9104455543ef7aed24ceb919693a208736e753bd4affb5a04ab52a4d1b9da5f","sha512":"7a50641633c8b4bd57cf3877f794fdb27d8ecb8025a9d532bb702c35eafb75d95d8d07a2630174f032b5dcd4cce710daab4186051ba78ec34efc558d83ca8064","ssdeep":"3072:jBa3il3+MrzKQdB86+sxZa534Jw8BE14aBqfHlvGLpTuIcYwYYTU40:I3illzE6+CQVp8HaBqfHhGLpi/YYTh0","tlshash":"d5e31261e51b4b12ebc1b178e16a70c327219979f3900b5c311b2419aa7febd4fd78b2","first_seen":"2025-08-24T07:16:10.990887Z","last_seen":"2026-05-31T13:48:58.199541Z","times_seen":8,"resource_available":false,"data":null}},"time_used":798,"timings":{"blocked":189,"dns":0,"connect":95,"send":0,"wait":126,"receive":284,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp910/B09T5M3FBS/61s4Pj-C5kL._AC_UL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:29.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp910/B09T5M3FBS/61s4Pj-C5kL._AC_UL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: +GY8Rot1gv7rO4FRv6q9WdPyGXaXx+Oy8piye0tqdwTNU1f6vNL9VROPCa4At0M4K0ys4GMf0rAe4CLLtYFkV+i30LhmgSFv\r\nx-amz-request-id: X5TCXG8248JWKA9D\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 14:09:25 GMT\r\nETag: \"c2d36a4ee1b780d7b1c31f6b90ddb7ff\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 70917\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":70917,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1092x1500, components 3","md5":"c2d36a4ee1b780d7b1c31f6b90ddb7ff","sha1":"a70613b36f8a891b33ec8dfbe38ad433a306392b","sha256":"b8767358fe83f825d16ff7d491ba2340ddcde159ea3cef3d1ac7d378dd587077","sha512":"0daa41f33e309b821fafd5bac8586f5f3461b7d8eac6e92edba32a543228620797a1c9821bacb5cebb3253978a5932076903e26e79a304d327a4e12cef295fe6","ssdeep":"1536:XiX1fqiONwk3a3p/+lDO/1qanG46rgN5tF0uZbl7ZAnCUlGC:yX1frt3p2pOPTa3+bl1Anfh","tlshash":"7a630244aa05c663ef56513a509f1eba536ec2f86f35b0b794c00907eb5e833b4bed84","first_seen":"2026-05-17T02:11:28.58741Z","last_seen":"2026-05-31T13:48:58.237114Z","times_seen":4,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":375,"dns":0,"connect":0,"send":0,"wait":118,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-060a6d9e.615f6bf6.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:32.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-060a6d9e.615f6bf6.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:32 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"1594-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=70aqFzRrFXWiZgHF%2BKe9Stu2QHqGujaIUvpAjAlCsQ2fUuyP4KhYVrzloohSX0HN3sb2P2U7d8ThJN%2FmYF9eAfohLrWcbkGzQMGyxmFzhT88tdm%2Fsiol17ShMdN%2Bd9GEP84%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf161a4929b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1594,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1594), with no line terminators","md5":"7bb68d7264949b255c669843ea227988","sha1":"c37129a7f0dbda018bd10436c4812ca558ccca03","sha256":"e1e47844c3390d548f1cd51ea560bf6301ebc6163228d4bf728cfd0a10b5e70d","sha512":"af29987a4411e45d99202eed3f1ebb777ea971e2b4eb617f4232c504c4f83b247c6e6651bb83c7dd153a19306a521a1e4ff6e633c6faf12308f1eb631623f7eb","ssdeep":"","tlshash":"3b31761e3e491d18f833f71f21c24a5e3212a37385b6831a7c43e55afd470c67ab12a6","first_seen":"2024-02-11T04:26:50Z","last_seen":"2026-06-06T14:40:04.368662Z","times_seen":5573,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-2d2212c4.f8da9303.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:36.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-2d2212c4.f8da9303.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:36 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"10854-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bFe%2BfnMm%2FsjAhJrM72iilmd2sJoNM%2BWRLod4WRPlJl%2Bzy0qtSfCkirjZ5iFjDkvwmk3TaLMXUNkzD2xtRKHDjeFgOo14E6seIqIQjzZ4HdlZxl47ydkBL6RpZzWaLgBHVq0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf163269d0b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10854,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10854), with no line terminators","md5":"519717efd2f57fa864ba8623100c7642","sha1":"7ac1859fe338e9277240734f202d92e09930112c","sha256":"f232414972569de79688102a84e53705ecc71705837e1ed51b0844a2145b2637","sha512":"2895108d52709e65b21e5c1a7517f30972cd6858ed97bde3c98adcbb8eeba978ca38fa6a5d93c402583a3a509162168fbbda116ed476f1a8728615ff3bd4df8a","ssdeep":"192:f/sOYPMSXr6GqgCI9pn5VsFyeyVu+4ceiyEufVx6IrI36:ns7NX2782yD4+4ceiafnj","tlshash":"d622f80eb466a9b8885b41223106b27471766fd1f00854adf7bcccf45688eb8372b37e","first_seen":"2026-05-17T02:11:28.588941Z","last_seen":"2026-05-31T13:48:58.216491Z","times_seen":4,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-79bc161e.c5735a58.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:38.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-79bc161e.c5735a58.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"13662-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 10\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZXDbhE%2FuD1zJQ8p2%2BVN85QhSK8mgsX9%2FpY05OCoL9vufZYgOC1VLqrmWwdGmDe%2FaBc2%2FknmjeixdGlZWVmovRT%2FYzMG5UKH3oty9WbPW8t2VPd6eL7rNXh8uQpSOapevJyA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf163b99f5b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13662,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13654), with no line terminators","md5":"0997eb4e778f8cb41cc88d76632d0485","sha1":"d499a986749e1c2805d475d690ea18ba86e2a0b4","sha256":"788f56d8df889f35cd7f4471f5da8fa3f65cf46cc4bf9cdce617390c6aef8724","sha512":"14a898659c11f5bdf7362d29b870f0d6a0d9228588feab91d9dc73e4385e6550f8afe78e55132733dd3698c7d70591639bcccedbfa57b8dae42c15c57c3f21e1","ssdeep":"192:9zCjfAcMsHRpMu7mWKD12R+YEX+WzU9MuMOO0Kxq/cictjAfNeNF/BPsGC3M:cfNMsHRp3Q19X+WzU9MKXmvPd","tlshash":"eb5285e6c070a4bd895a82b22055f1e0fb643a1cd102514efa7cec9b72dd424332e77e","first_seen":"2026-05-17T02:11:28.589918Z","last_seen":"2026-05-31T13:48:58.233501Z","times_seen":4,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-dea9f6de.dbe439ca.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:38.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-dea9f6de.dbe439ca.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"18244-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yKxchgEYY1uuZyG172WZQEUJX4TcukAeaMPZzm4QWUHVBqhwvennez09IlD0irRYOYGXdN2fvwydYBa5sBpybBHKmLP3DVkc6YHI9qS1d3i3te8sh05Ca8uhAze60HGOt94%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf16407a0cb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18244,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18212), with no line terminators","md5":"ef7266018a6d0aec85723b933fd9b7f8","sha1":"d3dde2bb154905fc446521d74e9af3bd4af39e8e","sha256":"661300c3418542bfd2dae006550e4380ed121b89818df442ccff9b9b09f20ed8","sha512":"d0e2e17e7ce1caca39d14c008765b57b123024789c1e9e4981fd6b172fcb4866500306d89bac8e5e75053c1351ebbf3a1a9e1e8896dc491c6302b9a5aa920082","ssdeep":"192:VxJtwDwYwBvpTG25+MOXmj+Ytc8E3Y7nPfYUzRi/ji+3I5qTRiA6aJHz3Jn5stdZ:NtU3wFpGDtmip8WY0OoIYRiA6aJH1i","tlshash":"f382b69ba651b45f0e6776a1309b2403a15862a43c0c9d56f27dc9f633bcc382b17b7e","first_seen":"2025-04-08T10:46:39.885045Z","last_seen":"2026-06-06T14:40:04.305741Z","times_seen":150,"resource_available":false,"data":null}},"time_used":756,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":756,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/d26d36b6-6435-4071-a1ed-647cf4e9214b.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/d26d36b6-6435-4071-a1ed-647cf4e9214b.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: wCDyBvVInB8GHOf8GZ2WtLFCfO3Fzs9s6o7dtOFHB007B8HH7su9POGFkZ4ZS6vEMl+8f0QsS5OfYSIZDLZgXKviM0DPwtVe\r\nx-amz-request-id: 49WEEZKF81VXK7WE\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"60e10d77ebe5877fc1c9385748e2cf72\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 180465\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":180465,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"60e10d77ebe5877fc1c9385748e2cf72","sha1":"77082da3f7af090dbcf9ac692bf2ba4e0d699aec","sha256":"f1343ddaa389f3aca6568d15637793f510925e7f88d13a6ff93591a326a66c48","sha512":"1a4999d20713081b41425f1f82ed3e7b5003e8f7024b18986a6f1e759e0cc797f7a0003c2d0e208d14261df253681ebe2795836541ff4ebb82b8763fbe5ce182","ssdeep":"3072:TrvxlqyFWPMUAy9v42Jxd3BDRnD748ezoCrW4rlfBoKamBYuWhNJwhi1nkx:Tr5AxXZvDJH3bnn7etB5fxzYhJb1nu","tlshash":"ca041269530c763929af82bccfdac921eff0210d0a74d75911cbf8e90a7a0bb91f2515","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-07-17T17:41:48.617015Z","times_seen":9661,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":46,"connect":95,"send":0,"wait":142,"receive":279,"ssl":256},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/fd370537-bc59-4d31-a9c8-e7bbfebb9c9f.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/fd370537-bc59-4d31-a9c8-e7bbfebb9c9f.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: m1ToeUF9tVrFLI/+8rIxMT8gxBvT/50yHw8bWfXxQWIy2x2Qgzs1kocmG8Q8UNpBPm92mhMWh+B1O2FP8uv5ap13rf8n/OPQ\r\nx-amz-request-id: 49W9K6CDW043V157\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"87706f749b341f09c0d4f313a08fc43e\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 29992\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":29992,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"87706f749b341f09c0d4f313a08fc43e","sha1":"1509845938ec37024267488237d11e718cde9f13","sha256":"b7fe2721d939005c3d167ba39f1512ee5ba880a08fe370ab93dab990ff0a914f","sha512":"862ad1c48221a29e8fbeeef1be46b06d77617afd44de9e63598e0f746aa0277ef3c79366454df627aa6c12f465440d729d9157ba768922c90a574439df2d195c","ssdeep":"768:Gv6RenUljXtCiU+uKMHNDBp56HJJg0+Fz7P:GVnUlJFiuJ6FfP","tlshash":"67d2ad27aa50afd7b448d7a2ff030d862fda522c41d439de81d76b436b18b77480d1ad","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-07-19T06:15:01.576773Z","times_seen":9927,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":596,"dns":0,"connect":0,"send":0,"wait":114,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B00T9T6REQ/61yIh8GLjlL._AC_UL1000_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.199.85","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B00T9T6REQ/61yIh8GLjlL._AC_UL1000_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ikiYduOg16QNoU/ecrvSFGbVhhVIEmf0zmOCOXYDQNc/ZlQIWbCSh1JUgLA02XGOHDQhvmciHqGC+QpVOoUTD4fmjWoJJv6Q\r\nx-amz-request-id: X5T4K4GG731EMVJZ\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 00:06:24 GMT\r\nETag: \"bb00cb243d7875a2708fae69e5e9706d\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 6c56e0a61b3cd3f67e925ee34139cae43bd3ba8939e516f46aaf9d71108b0010\r\nx-amz-meta-s3b-last-modified: 20230718T074913Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 121788\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":121788,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 624x1000, components 3","md5":"bb00cb243d7875a2708fae69e5e9706d","sha1":"2a76fa51e09c01121423f966ddb60fb86638bdfe","sha256":"6c56e0a61b3cd3f67e925ee34139cae43bd3ba8939e516f46aaf9d71108b0010","sha512":"375b2a7aa46935e31d301b3a7d3f875e886dbd2e35035cfe6f098fc50fbd9f79f26c349a94ac70d57a1a360f86be4d575546cbd14d5d546010b004ff5f33b8c0","ssdeep":"3072:VLnaunvTUzRSRi4f1Mp3KNaupbjTe3F951J:R5nryRSR/f1+3duh69","tlshash":"3dc31324072b6a46c8fb0cb5b51728e41b6e859e798bdf013c3fb47b895c70771e258a","first_seen":"2025-04-01T12:46:36.979753Z","last_seen":"2026-05-31T13:48:58.309784Z","times_seen":17,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":417,"dns":0,"connect":0,"send":0,"wait":109,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-8501b9c2.e3d69890.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:34.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-8501b9c2.e3d69890.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:34 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"2934-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nPtiaLkNf%2FTzf8daWPc%2FyzW7l2eeFZ2wGIyocCqG9voWiY8cg7hHfXe27J3FMTJB%2FoRLqWD5MLUxcPdzsr0C8%2BS03%2BPWo2iEJvqr9uEBYabjbPnoEdvnvezAIB%2B4ceR%2FlHM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf16264992b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2934,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2934), with no line terminators","md5":"6c9c06504aeaa44eceb02b42501b4d05","sha1":"f44d6b5f35027749a0816164f09b9bed1890ddfa","sha256":"f00be6b0aedab8ac5e7de13774b195a7ea74e9ebb240a077a80f953ce6ee868e","sha512":"915e73c6db5b1607e430494b9064be658f02e64a04af9de8f3c615fc034bcd7fb8dd609a3df2f40ee8f652f430d94fe31e6ae3080ed2c7242c3bb72f6073c923","ssdeep":"","tlshash":"df511fa139392a7c4837e067b1d5d5af70a8f25bc0b786cd8ca1335e9cc32422d126ce","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-06T14:40:04.330347Z","times_seen":964,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-dea9f6de.3ecf88fe.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:35.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-dea9f6de.3ecf88fe.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:35 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"3338-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xx7XEoHSWFcXbiBBEXueFSIyUyyLJ7kp6biMFiZB5IOtKQFZez8uObXlgk2TXK05PuwEmQbtqCNUXHh8EnpPu4B8N3RV%2Fzwf0NSnsNTIAthoEW8Ni2alFyFF87SlesW%2BkVo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf162a99a8b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3338,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3338), with no line terminators","md5":"1bc5b8235f9e8d5bf3961279423cf630","sha1":"466627105df20f8e829d3db72a2617802b7b265a","sha256":"cc7c2d00d52891b7af0ae290785d54f087c4f61951893b7c7fd8c869f7a8047f","sha512":"a2c17506a8e46344978b7955c1c162a6fdb844d0ec51fce021c04aee33df5d44cae64f10a7a6bf5ec295a1210540e5b82c1f7e79b9d89aa14dc29e7531cd81ca","ssdeep":"","tlshash":"766110382130361c3b37922a25c8f54e2619a9e5f18995c9ba98c42f4edf769dcb0263","first_seen":"2024-02-11T04:26:48Z","last_seen":"2026-06-06T14:40:04.508224Z","times_seen":6672,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-2d216994.084ec234.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:36.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-2d216994.084ec234.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:37 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\netag: W/\"255-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rMVQLt485JYtSH1r5gtCVvtEtqhGIGqYgd7QiOA9ucibq0vp5YzO06W9xKuGbe8OEwZAHaOW84M6Oas0MJRRR0O4YizMD%2F1h2rwIdJmgGkQEz%2Fbc8jyCMiYU3sUDn2FIffE%3D\"}]}\r\ncf-ray: 9fcf1631e9ccb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"7a8a7fb5ffd400e722f95a769e34ef63","sha1":"ac59bc32ff6a0809103fa7a19434ed2e46633ba9","sha256":"b2ce88d59c3e4f4ef0f3c9f065e3a1cb0d23011c15cc116334f5162b365e1c06","sha512":"e311bd396f91df957dc0124e2184bb00a186f65130de68b5a4995c9ed53b18ee302b2326f5a14e00d3b26be4352dc42c5ad7af854eb57188ab79ee4e998a1efc","ssdeep":"","tlshash":"19d02ba6b0527ca5c55b2485026be363382e249a0e8c106417f145d83275b1f8111999","first_seen":"2024-09-28T07:44:49.475934Z","last_seen":"2026-06-06T14:40:04.379464Z","times_seen":156,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":689,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-f0130b90.1c375d99.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:38.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-f0130b90.1c375d99.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"17011-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hOKSFLpKhooCqk2gNjdSvsbBTbUpmsM071qs7L%2FbsDlhUL6YLXwGL1abdgR8zJ1d2i9DNZuPtwyj4KKM1xNCuOh3qXEvmMcxsGDWGUy3BiC%2BlZ3Y0DDmKCpnRtgyA%2BWJ5ks%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf16418a0fb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17011,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16965), with no line terminators","md5":"53473979de18a9c277d3cb23040d4643","sha1":"2040e0effccb8cb688294e9241b8c966a38badf6","sha256":"a15b94d2a2f3d721bf04bb436b7c9474ac4b10db0331fbcdcdea3f09f03e452d","sha512":"860666dc10e167bd37a77b1f4b992671653d9733ba41a7149d3975d52b8747384fe11cc7b34c5ccd5c06052ffbcf4738b5b0e381bc0827eb68accee58af98552","ssdeep":"192:dVthRrXBroFGaEERrSMjya7cAfo8KwRHfnQMsgN8qAV5BQzpV7ocKwRHfnyMs4m/:dzXeM1EREW7HnmqIa7HndqIls3V","tlshash":"4b72e82a50047c9c0e6290ed702b3464a09e95105919df5affb8ceadbaced2d271737f","first_seen":"2026-05-17T02:11:28.59668Z","last_seen":"2026-05-31T13:48:58.241066Z","times_seen":4,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":717,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/wap/api/newOnlinechat!unread.action?lang=en","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:27.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /wap/api/newOnlinechat!unread.action?lang=en HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eDRnpi7JGEAP8OnfqoEUH8LH7p8e5QOI1MzDnCjDHJ0nIndtlGtG4gYYzF3F1F385xiZ9sn69JkYtflxz3qs64QQadoq7Qg9P3EIFGfyBPMGZydGnBE5PEcqEGuAZG80VVE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15fc28cab4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"472e9a7530675f76d965067fcba6278d","sha1":"e1fdae764ba06c37792e7b2a2549c88cf3350b09","sha256":"26de7e215697f7b90d77581633fd7fe0b379ba230d1a9c1a0b502ed862b3f5bd","sha512":"7f765b18a1b6f5818daf3905ed24ae9f4283248ac7a41bfcca65dd1be696c9a741d510629b6134940784b3cb832fe3be7fa76881cb2d01f226e1246a70039e7a","ssdeep":"","tlshash":"47800000280e2c0b08032088a88c3a0080ae22a308c0cb308e8cab3080ae2b22000830","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-21T20:31:56.015161Z","times_seen":8750,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/40488675-237a-40d9-b2d3-e5d53b0e6455.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/40488675-237a-40d9-b2d3-e5d53b0e6455.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: eCt3ZFF4Ori29QCUdMUs6s5KJ1jhOM3HiwBgYX9KeE3KNtV+7dFPopQqEnfLlh3aY64QlFrYjbg550+eSN+LKAiyoSNx5AHJ\r\nx-amz-request-id: 49WDW82W8S5XJJFT\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"a5941f987a0fe015714bc8b8cde4baff\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 44216\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":44216,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"a5941f987a0fe015714bc8b8cde4baff","sha1":"88c88146f9813942943df5777e08d4486db3040a","sha256":"41da4ebe3b85b5ca006db2a633baa60593618feeb72f3db99e110d74e1cbd918","sha512":"937d3c4add07ef443e201c34e73eef5cf558a781c5112a81719a989e4ff4c2cc29f2bf35739cec929988409694a4518fe862820b2fb6c18d71b4195954700628","ssdeep":"768:GTRG9BPKCHP1oTrfNz7uVdkyQ5CmHjrYaBsDTtk9GbLf+H:GT8QgP1oTzB0dkyQ5Cm7Bs/u9+CH","tlshash":"52139d478e489f835014d3fd3e079e6d6b891b0c59893aef19b31eab3f216521c8e54e","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-07-19T06:15:01.522955Z","times_seen":9912,"resource_available":false,"data":null}},"time_used":1004,"timings":{"blocked":392,"dns":51,"connect":96,"send":0,"wait":120,"receive":94,"ssl":240},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/fonts/element-icons.535877f5.woff","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:27.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /fonts/element-icons.535877f5.woff HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mkwhcsq.com/css/app.ff94b4c1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\netag: W/\"28200-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nD77v%2BlMt0GJH02h6PSY64%2Fu%2BwxYnpDuiVKz9pO06G8e72sBZSI1ZDjGsN4AQmGAfqlY3HmLJJLAGmZhEmVTn4AP9qt%2BN4VBSMWemtNtSDq9untn58TbzhxyNCva0Baqu%2FA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fcf15fb48aeb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28200,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-07-21T20:43:01.934655Z","times_seen":26889,"resource_available":false,"data":null}},"time_used":950,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":930,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp910/B09VT1Q2YT/7149Twjp%2BKL._AC_UL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp910/B09VT1Q2YT/7149Twjp%2BKL._AC_UL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: LQFIohAGOAj9hB9bEUJ61fJ0AFrHqy+/Rwtf6IGUSxWMCt38YLatqv+aJUdXDgER7+AdarpzaNhvsP/nOM6px+UYr3JR/uc0\r\nx-amz-request-id: X5TAHG8JV5RQW74S\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 14:10:10 GMT\r\nETag: \"4c1e3996fd20c2f4fb0188b3019ddafb\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 113918\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":113918,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1257, components 3","md5":"4c1e3996fd20c2f4fb0188b3019ddafb","sha1":"5fdedee67502987277e90c23896337fada161f08","sha256":"b840ff272bc2bf0e7ae83e1e05d1c5a704c58b38a949f4f20775cf0171b14284","sha512":"2b57608ca4f80c6470b0a60b6e5f7c902267360283e26f85dadd897214e50a1fd5444d31da7b25497f307337a031a74fd7fb2a74a618356aab05085c1065c0b8","ssdeep":"3072:zrbxZ1eFRQBGihx9EQWpgMH7pQwvwvIvav8bdWLLiWiSNNC:dHeLQUihxiOQvavBGp","tlshash":"d5b302e6576393efe966ee7b2208071d9f823e392572535232b753b2cf173160e41286","first_seen":"2026-05-17T02:11:28.59946Z","last_seen":"2026-05-31T13:48:58.210666Z","times_seen":4,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":601,"dns":0,"connect":0,"send":0,"wait":116,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B0BX2YSSXH/61EJ3kxsRGL._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B0BX2YSSXH/61EJ3kxsRGL._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: rAWetswPpReAML2wHjoAswfDClT3cO8TFq83oqsBemTO2sEFK/xbSxQsPQPdoV/dPmzF3/A1MvsDSH+1a63z7dRkajISDtKZ\r\nx-amz-request-id: X5T2X1WN5JBAV598\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 10:09:19 GMT\r\nETag: \"7f69b4d98c217914e3cb25fb3ee2b52e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: df456ec1e148d2587d0bab996592be9d6304e160f92ae5ed0e842d576c9f36d2\r\nx-amz-meta-s3b-last-modified: 20230717T144900Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 87816\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":87816,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1246x1257, components 3","md5":"7f69b4d98c217914e3cb25fb3ee2b52e","sha1":"b925be5774e721537d4790fe620194c801f47bb7","sha256":"df456ec1e148d2587d0bab996592be9d6304e160f92ae5ed0e842d576c9f36d2","sha512":"103abb4859f66a7df36ad3eaf9e54ac0ea855de35609e18d9200e66a2726da459b7451b223393f3d4703a3c2eca7095d2aef0888d338b8f809460c911dfbaec7","ssdeep":"1536:ZMCnfHoWM30jIgAS0O+fX5BPY0a698dqD0jELosRwG7ZurUJcIz8:ZMAHo9K+2ddUUql48cIg","tlshash":"b383129136acf843ce5da5bfd17439309e4d1fe0951b21a014966bca15333a736be32a","first_seen":"2026-05-17T02:11:28.600293Z","last_seen":"2026-05-31T13:48:58.247176Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1024,"timings":{"blocked":912,"dns":0,"connect":0,"send":0,"wait":109,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sk-tk-mall.s3.amazonaws.com/avatar/2026-05-04/1ba71332-be93-4928-8525-deafce1696c1.jpg","fqdn":"sk-tk-mall.s3.amazonaws.com","domain":"sk-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /avatar/2026-05-04/1ba71332-be93-4928-8525-deafce1696c1.jpg HTTP/1.1\r\nHost: sk-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ueHi7UGub1jB+t5A72GJXogvJZjgPWGgz9GdElYM5Pfo/l2g+o9qB/UJBBvGIhps4vcCGk8WeUAM2mbdG8qL/fn+rN9vdh8C\r\nx-amz-request-id: S9WYAE17PH3TPGBT\r\nDate: Sun, 17 May 2026 02:10:32 GMT\r\nLast-Modified: Sun, 03 May 2026 22:52:45 GMT\r\nETag: \"3e1ef53f016c6d56999454c4ba4c9788\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 2333678\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2333678,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 5472x3648, components 3","md5":"f927d75fbc612b7bcee445930aa7cda8","sha1":"c8f110eebf15897da566411db1d2c812b2cccfae","sha256":"8c4b6d7b773294ce4cd305fb9f98d326ac2a06c85f0d278b31abc826eb0a6e6b","sha512":"4f10c51ab56521ffab56e7e4d6b281a3f2427d750d8ed99e9a7baf9a67a176390ddc5d77decdeec98016ea5f7aba6f0ecaf055317c94c564494e2b5ac7168878","ssdeep":"24576:/EHxnAAZ4kLfO1DycFkEKaj/PPRUSq8VQKGidHQkts:cRhZ3LfO1NCO3PPSSdHM","tlshash":"0f253351c0979ef7dd4c9873af97ef0a0ec58a1e2802e9246e0f1f0d55e32ae4d65e60","first_seen":"2026-05-17T02:11:28.601362Z","last_seen":"2026-05-31T13:48:58.266887Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3695,"timings":{"blocked":2209,"dns":0,"connect":0,"send":0,"wait":370,"receive":1116,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-708e8450.1837b4a8.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:34.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-708e8450.1837b4a8.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:35 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"21339-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sT0SUp6pHpc0EIE2g9m%2F%2FrOFcolmqi0loWcrZ5HG10Z4v9wzMxO18jh7pSD9giUYE6bWg9jvnfxYM8Fbh31O4pLx%2F%2F3sOp%2FeEmZdggT%2B4Spim0Lg7Esv2ZfY%2B4ehKfpj8vQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf16248981b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21339,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21339), with no line terminators","md5":"4999aec05e5d35547b85108739fad5e5","sha1":"543357337951b8dda942cb041d2b0c5d384c375e","sha256":"b5f1bb7367d11a08172a447b50b4bad9304cf13caa87a0b46cf01b78ee4c2e50","sha512":"4dd76776f9e259e22a46f6e05904579ccd709a19dfeeb8822a5cc45e1bcad27149deda542e24d8f2333025b8c7285c4b0cf4676db2b43eeba4b68a53600d20d2","ssdeep":"384:3ZTMfdfzNb6mapzeX/pZ25ZC8CQRDeBzT8lN9lc1gR2iW4YGrSLjhh+P5/e7R0N:6fJNbT2zeX/poFTe2lADtLr+P5/eVy","tlshash":"70a22b70b22d22387837f2691a8155c9b4a4f363d5268396bfdc77168dc36e3bc38256","first_seen":"2024-02-19T23:01:30Z","last_seen":"2026-06-06T14:40:04.388395Z","times_seen":146,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":698,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-83285f10.03c5e968.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:34.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-83285f10.03c5e968.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:35 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"1224-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ckem1UE4quCgjU0Aw76vsK7v%2FZKJGG25hlhOL4JHNMiN7eHAB5sKWjWVDI9U29ceyWVudmYllaZ7OB%2FvumwzrSn9NVFZYQBnREtCK8l1N4QJkyt4i6tHNwLSj8AEVWuebvU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf16264991b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1224,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1224), with no line terminators","md5":"efff8542cb73c85ee85efd24535a5d2a","sha1":"d349fea54dd16de6874a420f79388407e2fd05cf","sha256":"0198f6533d83bd348a16ef7735fb444e4f4dab419e638d85ac95a4b700e44f50","sha512":"c78053b870e87027849f1478ef04aba055e91e98ce7d26c66b53cd7a58b8fda7bfadf4c9bf4612f0e0ba808029b2525045ec13059fdcd9c7d318d184ab60f126","ssdeep":"","tlshash":"d821c041719b32361477f8aa50a00275b811f3e79c1f4262fddbe2104bcb6273861e9e","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-06T14:40:04.423608Z","times_seen":974,"resource_available":false,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":753,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-ec9441c2.f2bd8913.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:35.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-ec9441c2.f2bd8913.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:35 GMT\r\ncontent-type: text/css\r\npriority: u=4,i=?0\r\netag: W/\"731-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r1Lf7gPT18hzL5d3PjbvrgEFM5ZLtSHRgC%2F8KbF9kHeUR0IrwpkhbQdTApnSDoZnzCAZY1NkPKzLl5umb0myOIi67lnEu6x76M%2BiMA7b9ITjEtfBpFFyTR7BDzltoFY%2BQew%3D\"}]}\r\ncf-ray: 9fcf162ad9abb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":731,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (731), with no line terminators","md5":"04fddaebcf220f89065a61a8972e9ff6","sha1":"a72aaad63f69552c1bfc2ce529d0934877a151a5","sha256":"fde628e3bf1d28a032a27b15fb82ee652f593c2de925664d244ef73294ca3002","sha512":"91283184ba4be03fc8613a4cb7476f38560ea9ce179e380e14c783b1dbd2a7b001596670057aca7a28aa80f63ff390a69ddada5e8730d7ec4ab353382952985b","ssdeep":"","tlshash":"b30128f3d1100422c1f7e617e1826898ff95ccb2e753c0afad92551d82caad70ba7b15","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-06T14:40:04.35256Z","times_seen":8466,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-17T02:10:22.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 02:10:23 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JbuU3VHF5iZhEcbiLy%2BvtTZpikVZTFfbhGeVtvv1DesVxtYUmSciM3847%2BnvQytxWHwYmQBG%2FvSPjmt42qksVYMfcgZWPecWRYtD1usICyyGqKeHj9O3HDd23QrBFDjWzck%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9fcf15dbab3756b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5607,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (5607), with no line terminators","md5":"3688b189141c4214cc6e57a205200813","sha1":"8082e7dda22a07f710d86c41a9be473787db266f","sha256":"532b7c57429a31646ecf3b924a778041bb1094aa6da038ed0be466d667a6b55f","sha512":"61d811ea707967600b0a42db434ffd3069f855117878c8752f2d27d817f1388d59c4d6bddb8357ce518dbc2894a75f655179a1c5729afd012dd5299e40f31856","ssdeep":"48:/5ExlkIu8QHydHBZbz8dcTDqGEYOMiMIBqEtX351/LVlrW4VOVe3Qb7iA8V:/ClFVHBpFEYDiM2/tX35pLVgBvb7oV","tlshash":"3bc126b9da50648fa9f0de879e29f72be9cf9d7a1130e040d118c85fc868fd5162b843","first_seen":"2026-05-17T02:11:28.606106Z","last_seen":"2026-05-31T13:48:58.202292Z","times_seen":4,"resource_available":false,"data":null}},"time_used":798,"timings":{"blocked":43,"dns":29,"connect":1,"send":0,"wait":711,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-79bc161e.c5735a58.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:26.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-79bc161e.c5735a58.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:27 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"13662-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d0NVTe7%2Fuafc38coYm%2Bi07%2BB9NYxJZlMPFSDcgFYf%2BW1WvSWDyFdls9avHLmBPdgkOqSXHPrmKDOOd63F%2FW1DyGOvSI2EvBHe3RlLlj7GOErJJkNmQJYPAUwb9cN8QldcQY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15f4685bb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13662,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13654), with no line terminators","md5":"0997eb4e778f8cb41cc88d76632d0485","sha1":"d499a986749e1c2805d475d690ea18ba86e2a0b4","sha256":"788f56d8df889f35cd7f4471f5da8fa3f65cf46cc4bf9cdce617390c6aef8724","sha512":"14a898659c11f5bdf7362d29b870f0d6a0d9228588feab91d9dc73e4385e6550f8afe78e55132733dd3698c7d70591639bcccedbfa57b8dae42c15c57c3f21e1","ssdeep":"192:9zCjfAcMsHRpMu7mWKD12R+YEX+WzU9MuMOO0Kxq/cictjAfNeNF/BPsGC3M:cfNMsHRp3Q19X+WzU9MKXmvPd","tlshash":"eb5285e6c070a4bd895a82b22055f1e0fb643a1cd102514efa7cec9b72dd424332e77e","first_seen":"2026-05-17T02:11:28.589918Z","last_seen":"2026-05-31T13:48:58.233501Z","times_seen":4,"resource_available":true,"data":null}},"time_used":695,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":695,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/img/zd.7857e3f2.png","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:27.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /img/zd.7857e3f2.png HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"14770-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jfV%2FtsmkuHPQtBOSk4rZkxN21ywIKzC5vgpYt4YtVq3K0MdJfAFKq0yDn8BaKHItMUUbRv7L2ms5mbKFS7ZhHLAlpnzj5%2BHqYo6DF2e5TtomUXxYehGA2M569h9Gxkqpq70%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15fb38acb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14770,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 656 x 500, 8-bit colormap, non-interlaced","md5":"7857e3f262cd92fc4c1628cfed84504b","sha1":"c6a1fd89fd78644cc34a811bc73198a475208540","sha256":"de2bfee73dbee58da60ad3331ae186927f49973367fa6a2a6b3a31e51eff9f69","sha512":"acadab42dcd2e231fed556903265eccd27189835f340fe0de2a99902330f9878043a47147764ad2436d9fae0469e841861dfd03b7126e7fe7c1393bdc47fa823","ssdeep":"384:xbFvWjJqmFVCc1yZCXXZtYkBn3NwSvshkoXPtFuJIJ:RFvwj1yZCXXzHNhpyl8JQ","tlshash":"5662c04cb44419abd2b1d0ba600bc59b7fe0d2d1beca82300347bc5b0ca96d59279b6c","first_seen":"2024-04-12T10:02:46Z","last_seen":"2026-06-06T14:40:04.384588Z","times_seen":238,"resource_available":false,"data":null}},"time_used":915,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":915,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sk-tk-mall.s3.amazonaws.com/type/2026-05-04/9e375960-9396-4d9d-a309-fea3315f68a5.png","fqdn":"sk-tk-mall.s3.amazonaws.com","domain":"sk-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /type/2026-05-04/9e375960-9396-4d9d-a309-fea3315f68a5.png HTTP/1.1\r\nHost: sk-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9SR90n29FB3FxImfmSojmbnFf3r7PkdQsLJfQAf//O3Y54AUCCJmwIRX7wT392OHrgsge4pkqz7hjcmS/a5ySPGqUHMzI6XV\r\nx-amz-request-id: X5T3B9JSDPM84S95\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Sun, 03 May 2026 20:24:28 GMT\r\nETag: \"d012a9b637c8b4e48954097cf00fe483\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 269679\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":269679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 400, 8-bit/color RGB, non-interlaced","md5":"d012a9b637c8b4e48954097cf00fe483","sha1":"a587740bae6fea8e3b7f5b6b43067ee43cead13e","sha256":"b8e91447edef4a176a671d071c84f4c1d78d7864d7d73a078d6d7c508eba21f8","sha512":"fdbc4f88f1e2e9ccfd5b14f7818c88d7c6f4349dcf804e85de48a035e8d3694ad99d8f53aca1a23bc8c4d31507e9563e57ed66f1fccb5817914b2c4e4f76735c","ssdeep":"6144:oSSUzrIAOSgUzjT9Om2y870E54jx7pDn5WR7EEw64CuwYTW:lSrAOhGjT9OHxl6Fn5wEj64CuwYy","tlshash":"014423340991aae270fe50b68f92437e1e54f18b69982f40237fdb1d13e98c56b0bac1","first_seen":"2026-05-17T02:11:28.60819Z","last_seen":"2026-05-17T02:11:28.60819Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3169,"timings":{"blocked":898,"dns":70,"connect":333,"send":0,"wait":367,"receive":1010,"ssl":487},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sk-tk-mall.s3.amazonaws.com/type/2026-05-04/b1847176-ce61-41ae-b011-66a69b1396d1.png","fqdn":"sk-tk-mall.s3.amazonaws.com","domain":"sk-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /type/2026-05-04/b1847176-ce61-41ae-b011-66a69b1396d1.png HTTP/1.1\r\nHost: sk-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ILxxN3ncHSh2E+5FVc0OXIUNiagGxqpWbmQ2oQY/cJ6T3p29ryAjdE2KbLfzTzn4M0nV41ZSUWtNaEaXM09x1xvxG7ktks5d\r\nx-amz-request-id: X5T6F3VRFR4R9HVM\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Sun, 03 May 2026 20:27:12 GMT\r\nETag: \"3e3274314098d5403aa48274be711240\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 275676\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":275676,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 400, 8-bit/color RGB, non-interlaced","md5":"3e3274314098d5403aa48274be711240","sha1":"dd3b85c762f1bf825ac8f8af8a7a7a3938251a31","sha256":"e52b9b14f144969bee6b1d469e600d66259061c5d3ef188d89f0a65136b94ffa","sha512":"343b0d481999f540be3bba1b9bd1d58fc5b4890f66e62eefdab0dd4e310f4c4a28188e71a8db0acd710ef2a5a323361970904d81d3b5c7f50bdcc57a1b050dd4","ssdeep":"6144:XZwPd1cSiAK+/nizLZxWVNji0OY7CrOmZXM9l2IdGHnQWKgD4tV:XZwlioiz1xWVNe0OY7CjN424GHV5DY","tlshash":"f34423a5af24601f9b350af45f8d72d7db88be42624357dbb1976cc2a89ac40393e109","first_seen":"2026-05-17T02:11:28.609114Z","last_seen":"2026-05-17T02:11:28.609114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3102,"timings":{"blocked":894,"dns":0,"connect":339,"send":0,"wait":362,"receive":1021,"ssl":482},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sk-tk-mall.s3.amazonaws.com/avatar/2026-05-04/37fe0636-7909-4846-9208-506fcd7b10c6.jpg","fqdn":"sk-tk-mall.s3.amazonaws.com","domain":"sk-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /avatar/2026-05-04/37fe0636-7909-4846-9208-506fcd7b10c6.jpg HTTP/1.1\r\nHost: sk-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: rV+CiF3IuEuU67u/TCKwp8DTn3NtDbB1yZNyuDkqu2ZPnav0UrJ90EYn3LxF3NYKH+KC1hVVHVIN4NtQjH2cXC8cGfsusTdf\r\nx-amz-request-id: Y6QBXDF7HM9DNDRB\r\nDate: Sun, 17 May 2026 02:10:31 GMT\r\nLast-Modified: Sun, 03 May 2026 19:20:14 GMT\r\nETag: \"51b9c49158abecc25aa7f751ca5bf9fd\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 94695\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":94695,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1017x1280, components 3","md5":"51b9c49158abecc25aa7f751ca5bf9fd","sha1":"289666759b50580f36fa6125cbe138957563184c","sha256":"d58756401e8a1368b3ae40a315adb56ada06e2c2f4c6c186de6c1367ec61cf93","sha512":"4583f4367e6966c83ddb511248e0a1d6fdaf7b7738d51d531ea724d8308057763d777a1a72ab5e2e6ca5cd84e9323244440133dd941a86630820e7aaa0819c7c","ssdeep":"1536:TDbRuSGC/Q89JUaS5zamX1LdBeojZXDwMiHi+T/Q4rgLN4BVeS:TDYSG1jNdBJZXfiC4OKB9","tlshash":"d79302320be883afd8aeb3750af6121559f9f060ef4d4c447ffda9b1748a950a4b54c8","first_seen":"2026-05-17T02:11:28.609905Z","last_seen":"2026-05-31T13:48:58.211346Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1843,"timings":{"blocked":1471,"dns":0,"connect":0,"send":0,"wait":369,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-2abf8681.4d7f7488.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:32.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-2abf8681.4d7f7488.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:33 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"8132-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xvzpdA8Jb0p8Ppo4R2cOWb6k2rxeBID9dhszjqtm%2BiyDzcwZxfzMXv08H%2BeL5QPjndfr9xA3jsE3L4QjGVvh7T6h9eOSqi9%2F3Snd841ogcerGh4BZzT%2BN2Tqu0ziOUPrMCQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf161bd942b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8132,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8132), with no line terminators","md5":"c1287bd007ff0b66b87a7e912ed23c7f","sha1":"2cbe09f6425748a57bf073b88becd518374a03de","sha256":"ce89f29d9a484d3dcb924dbc29a6cc09682a4f1c1ad0515f91fcec32d0137fc9","sha512":"e4a99a8be760296eb3a054893f9c45815d2adfef4d1704ff4ecbb5ee0ad7eb318e871c00173c17079aa8fd6a12af1584034e49dd440df30bb9300bcad9883748","ssdeep":"192:IzCQIXiDe53zb/UboRyRD5liqF6+llu1JfP5iFxWXo:iCQRDeBzT8lN9lc1JsFko","tlshash":"23f10aa7a0b2c4296b27f0a6b5a4d4f43444c622ed9782e5b7d47128ccc32e35366f4c","first_seen":"2024-02-19T23:01:30Z","last_seen":"2026-06-06T14:40:04.519789Z","times_seen":226,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-79bc161e.c3acef98.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:34.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-79bc161e.c3acef98.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:34 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"6834-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 7\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jygk9W22lCfi2RrAoRMknqzIwvYv92RblzwJYuJdVrB%2F1fTjClZn1YofU0pKZsoa4C2zfXTQ2XVK5aKiL7GjkhScRk6N1zKKeOxAWep7casmlQT26qM5BnI%2F1qKzO0HuanA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1624e986b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6834,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6834), with no line terminators","md5":"f7b1de25905c81c373dba149d03c31f9","sha1":"862e37406535632dfb53a15f6a89c16efb3c94df","sha256":"e75dbd8d3fa49fec96c2b893018aed78a616974cb812b015636553d832881751","sha512":"5a2f0034e39196a38ce44b9d9cc46301069bf252b4f092c46db65bcd45a55ed05a6b53bc8241f14a5f5390b530394bcfb0ffea60b21c9262d0b669e07fd1707d","ssdeep":"96:Zsivfdy8lOFD1vq80WV/LPxDmvo6SOwUu50NJj9MC2:Zz33lSD1v30I/LPxDWrhxuuz+","tlshash":"56e10ff2f231112f7426953be18389e8bc86b10dd3ffc656ff84b514daa9182063518e","first_seen":"2024-03-24T18:07:06Z","last_seen":"2026-07-20T07:32:07.99824Z","times_seen":2020,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/9f9c23cc-7abd-41ee-a116-01eed9d588a5.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/9f9c23cc-7abd-41ee-a116-01eed9d588a5.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 19s4eoi9TQ4hbe8mYuTw4vu5dntk+10jwpHqqtuJPb6JglI90vs/BLVpREZoF+lKy/KV4LVPSeBHT9JAqn6tYOMYcPPJ2t+c\r\nx-amz-request-id: X5T4H3KMEB8JNQSH\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"8d6323e7fdd7e06d404af122b2c85f3f\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 22652\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":22652,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3","md5":"8d6323e7fdd7e06d404af122b2c85f3f","sha1":"a5d01f7b4ad71db23c48fa3f117f7cfcc444e189","sha256":"8e2b0eddf8d540aaa3b2076eefe4ba494c7acabed1f15431bafffe5bd3513f72","sha512":"6fc93fb49c82210ca205c6d6dd0831f9016eb24e3a5fbd5072106d5f2b44adb98d39c7df922da930f53d2cbfc28176810e7f2692011d556155f4785c8b314c19","ssdeep":"384:g1oAebo8+5LM5Y3W9rtPwKbJO5Uq6/ECRgQPifCiN:g1o39+dMmKrtPwUqSyQPmCq","tlshash":"eea2be61f8803733c585636c4cbea112585584f288f9e8aba674cee9f2d4c879c49ce6","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-07-19T06:15:01.578911Z","times_seen":9843,"resource_available":false,"data":null}},"time_used":949,"timings":{"blocked":829,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/870f3a1f-2cff-4895-afba-06babb8940b4.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/870f3a1f-2cff-4895-afba-06babb8940b4.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: IMvmVUeZHSJvFa1GCWM0bF1PdYIOvruBytbPTtZBZ0PEDOCUPypOYhJ/FM8WU8rPPdWknrvJwMVlt6ImiTt/2aSdORX8jBV3\r\nx-amz-request-id: X5T1SNBYQ5EEY4CD\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:51:19 GMT\r\nETag: \"d783ac5ebb2af2ea175e69cbc08f8e6f\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 108731\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":108731,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x822, components 3","md5":"d783ac5ebb2af2ea175e69cbc08f8e6f","sha1":"fc050423641252ca73a3c31e6d2c7f89bd3d13d0","sha256":"928c8c32f6746bb54d5381b513e4ad6841690ed580d1e68302a392613e768097","sha512":"612d3841165d4b68816a16c9ca4943c61b1b3e7512620042a0e9ce85e58e23b90f4d236eec0c765bc3989671bd48913b8b9ca3c91aad9b372f0ada1609d5cd6c","ssdeep":"3072:umsrj+FYKU6+BpJ2H+8fJV5Ny8OO3V77cF:JSjBKUDpgbFOG7u","tlshash":"a5b312438a1450aae5ee8cb632203b2529077bed133952d4f762c853de2b4d25e48d7f","first_seen":"2024-11-27T11:57:05.301592Z","last_seen":"2026-06-22T12:09:53.835221Z","times_seen":123,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":504,"dns":0,"connect":0,"send":0,"wait":128,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/ec8f6024-57e1-47b5-9512-5b5cea6fadd2.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/ec8f6024-57e1-47b5-9512-5b5cea6fadd2.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: htRgBgfDiwtBqYAaRYHmMq8EbHDFkuQ9vFpyk31+I4N4FHsjud2eamN4vJ3vT/thplG5ha64RbNSyzn6/QIBDr3Dym+PTpYi\r\nx-amz-request-id: X5T67RDYH1CCSBK9\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:55:02 GMT\r\nETag: \"108c701e02e025f9be4a1eb6f5415cc7\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 126609\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":126609,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"108c701e02e025f9be4a1eb6f5415cc7","sha1":"48f605ed1c3a79d761ef694c8b09469959557fed","sha256":"97f06509fe2d979d7fd9ccdbd7c3f2194e6021201ed31f5f958dcc184bc61874","sha512":"38c6f11a935696db6242e40dcc807758b6ced61f0c168da3db7b02be1289ff34d0c43c18ed979cdd4816db9786072f76020dbcb0c8399ae607352da6fd57008f","ssdeep":"3072:FPt06ySyeyecy1KExmY/xWHzYV8l20Tn3TLTjaRlcY:jU2QEgwxWHWSHTePcY","tlshash":"f6c312894b016172edc348b86b2f98f4fb1067fa41a598392ad9c6b0047bf8c5d9cbd5","first_seen":"2024-10-11T08:20:49.589233Z","last_seen":"2026-05-31T13:48:58.305082Z","times_seen":5,"resource_available":false,"data":null}},"time_used":825,"timings":{"blocked":604,"dns":0,"connect":0,"send":0,"wait":125,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/ecbb53ba-d47d-4981-9d97-c0cf18e757b2.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/ecbb53ba-d47d-4981-9d97-c0cf18e757b2.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: S0zIT/JVZtTWCzpEBlyDlYP6AXOQnOMIiuAGevfXDiFxtkbTznpsf5A1JWV6llsY01vdw8/QvGBgSQIrjTsufkpMgIBDbNMs\r\nx-amz-request-id: X5T8APN33021N53F\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:55:03 GMT\r\nETag: \"36286290704efdd9f9e248e44a26294d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 83228\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":83228,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1160x1159, components 3","md5":"36286290704efdd9f9e248e44a26294d","sha1":"6357fd4053397ddd5f0d71bc358e183cfc2741c5","sha256":"2757d15da612784fda9bde19d6450615f50beeeaf78b34539895e457ea3f285d","sha512":"8931949711a58e790380a91b8e0e6258660ba8df955fbf314331c12a8ab51f86cdabb06aac8ccb58e4f605ec3a296f9b7c730bc5863fc1097002f6688a363a2e","ssdeep":"1536:TBrf40lBISIIHFgMmaxbB1Yla1MAv076JS8qwY+6ut/TMzec5/JmyH:TFfP39HFgMmaSiMAvOJ8ALSozectdH","tlshash":"a98302f1065f7503f38b9678832e6b6ac1124d31678ce6620754cf7ada23c2d8de868d","first_seen":"2026-05-17T02:11:28.614891Z","last_seen":"2026-05-31T13:48:58.322631Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1106,"timings":{"blocked":980,"dns":0,"connect":0,"send":0,"wait":124,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-7c918dfd.8fe95911.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:34.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-7c918dfd.8fe95911.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:35 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"1118-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hLN3chNoj0BrX%2B032grenrrrV8XWiJmwnq5%2BvN140DupwL8Gc4m0gYhbs4xfrMDgmD%2FNQVPGpSEbMDaHe22xdUqRInUAlIJrAl6vZsE7ad2lK4MKCDD1TG2VHvZI5Juz6us%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1626298eb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1118,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1118), with no line terminators","md5":"51469bb71eb3ad53d091813383d59f9f","sha1":"2dc9da09668fefdab35ccfe6c6a3ec5485ceea3d","sha256":"d9daa1e1faf153cb40d02fe3294adfbf28aeb622797e00cf94c101ccfcf0e073","sha512":"aba105e77a63de395ba92e7d7557d7b7ae209f72dfd735132a2b4d234f8ac75e09d4acbeee7b2cd6e25307285d4d3a4988e9b8b8758761b595c96d20994bfffa","ssdeep":"","tlshash":"d221cef1906510385aabe6b430f0a9b9705df145ea63199c5d6533ad49d378f02e02ce","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-06T14:40:04.435641Z","times_seen":5604,"resource_available":false,"data":null}},"time_used":700,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":700,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-058fa281.04c4edef.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:35.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-058fa281.04c4edef.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:36 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"28926-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0I8FVt9Zwue0MXhJkoiQ9HtrIOEB40cLSN6bXor4d%2FssKOQPdyZ%2F9L39MD1SC%2BnpV7198aOx1xK2QiVQwTx9ctJY9wewbbZoGfYVBMHVb9AnSAdHLRcjaZ86btnCDs5Mcr0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf162d79bab4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28926,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28476), with no line terminators","md5":"23ad550dce2f076c5c1890050adaed0a","sha1":"3e659b09ac83265fbbfbef2a98bc9adbbe9ae4ac","sha256":"74cf7680189424dd1ece322f6b92233b8a27a0d6a2ea21ed2c4880b1dab39d96","sha512":"f3b54472881eb72844ec7a9b1436979d7510af31a466f3dc3eb9b42fac7842cf538d9b7f310675a6c35ca9dee91e43cd7514865d6ac552834865e025d062de8f","ssdeep":"384:5Fym4ERqXFciulT32rRv+R1GNw3VrgPnk4d:zym4E1iulT2F2R1GNw3VrqT","tlshash":"f0d2c84e71a17c8e130b4261745f2651a22a6125740ea0dbb7bdccfdfa9cd241836ffa","first_seen":"2026-05-17T02:11:28.617182Z","last_seen":"2026-05-31T13:48:58.204266Z","times_seen":4,"resource_available":false,"data":null}},"time_used":713,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":713,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-21f21164.2011c704.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:36.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-21f21164.2011c704.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:36 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"12297-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A9110wpXH6jS1JYDThmax%2F%2BoQz7tCS01n9YBxer1pz1bHqYE2n%2FCXLvsFtrRQ%2FIBxpp%2BlNhU0Uyt0eFJfw1ZtcvgBJBfOcsak6636TG4lGFZmo816DGItNvnV6socblEu5M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf162f29c1b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12297,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12265), with no line terminators","md5":"d671effa00366c5014466e8958f70763","sha1":"67db18be91e8fb2756a2222917bd0a7e6adf5110","sha256":"71a93fe68007b617b01845c7de1d5512edf3831a2a49cdecf8c676350429223b","sha512":"9adac0cc164237efa309757781c188e3ebaac2ee8fc3acbe0d1112508f013cad7eb6d582db5c734573a11dfc44431024cdd07cef3392050b3dfaa3133ca8ea46","ssdeep":"192:UBl3gEnnMv9fnS9gHJJhDJ7fNcj1iXcFWq2I5eAW0Tu8M5hHBaSLob:MRnMv9Bp97fNcjVWfc05hq","tlshash":"2e42a60a7153b42e5c6b81a1300e7420b6743fe94805d08abab8ddf977d8c64732efa9","first_seen":"2025-04-08T11:27:57.643054Z","last_seen":"2026-05-31T13:48:58.204968Z","times_seen":97,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":253,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B08N1P37J3/61e2fhLaumL._AC_UL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B08N1P37J3/61e2fhLaumL._AC_UL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Mo6wh3P2/gkFlwuc0IHNdT/lHFrX/AJNnu67n/41yfHadx8cRTdhAl8QO512HhCKca9FuEq5z5ZXqg2qW8XlQKtcED1FBBwc\r\nx-amz-request-id: 49W2V2WZ4GQXPJDM\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Wed, 22 May 2024 04:11:26 GMT\r\nETag: \"58d03006178ec7d939e39866627b756d\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: de9588774fa73f7f6999da7928cd781f2c1be7aeb6019e0e08e9d26eb39b6f36\r\nx-amz-meta-s3b-last-modified: 20230721T122628Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 68709\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":68709,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1223x1500, components 3","md5":"58d03006178ec7d939e39866627b756d","sha1":"c6a3aa928e6f0827f6a26e363855043335d12ae9","sha256":"de9588774fa73f7f6999da7928cd781f2c1be7aeb6019e0e08e9d26eb39b6f36","sha512":"e82b31c36daa2c72bbe82a89fea2bae01b7e1cb7ac2189c0a33f3cc578c514a24a01bf9011a4388d002b7fc1baf8c64510c58cf20c07d22365101562bd417ec9","ssdeep":"1536:wkhFQ88vRM7KbIRSwXjA5Rh26xgKk7z1lcZUXGl5m:VnQ8rzRjjArh266bzfRG2","tlshash":"1363f29e92918781cf9760b6d8a939b02bc74631376db7d2ec7606020bf36a57c7f814","first_seen":"2024-12-07T19:06:39.3411Z","last_seen":"2026-05-31T13:48:58.193856Z","times_seen":50,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":295,"dns":0,"connect":0,"send":0,"wait":116,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/94401f81-f667-458e-9f7c-0ca8ef4403fa.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/94401f81-f667-458e-9f7c-0ca8ef4403fa.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: PUcJR3n13UwYtl01HGc1KaVXxYzJRByC+1W73gZspHUy1DVdURD483TIBA7W6KtQffQogMdL9WoEpMsoZ6ofNzY2/XJaR3Uj\r\nx-amz-request-id: X5T7PYX3AQDYGHR0\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:51:49 GMT\r\nETag: \"07276340a8d5d8d9978def78ac8f7c36\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 28802\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":28802,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 900x442, components 3","md5":"07276340a8d5d8d9978def78ac8f7c36","sha1":"4a451ae185d20320aea023dac33488c697ba1e03","sha256":"83c6e9310f5a0a995806f2478a5e023841c64065c25ca49809326ff624ed7d23","sha512":"3f4fc2d6645196acc52290b07a1d5d5123584de0e9256cdc4fb2fbb89d5c6efe67225878d33e5dd23cdc75e4144fb1a28c60afc4089ec7723e566cdd8a4c05ec","ssdeep":"768:1r8bPae7ReqktodsSE6sK/3wFZlNqmpjIGFD:x8PTyodZ/wFFD","tlshash":"add2d0173f6dd8b2cafe86364328df5d93b1872c53091c37208a0e8956eb05636e624f","first_seen":"2026-05-17T02:11:28.619908Z","last_seen":"2026-07-06T17:24:36.852397Z","times_seen":5,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":492,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-eca3e97c.8f13e302.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:38.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-eca3e97c.8f13e302.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"8120-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Bv%2FdBxwNgONNb%2BIHcXt6EBp%2FnJHM1zUZPN1KubAf6H1%2FuhfLO7ga7UlmDxIzraYpJejufQO17dBbei8%2BlGH2OM7z8HGkb4YWKlJIrG%2BwYrsQBCBFXAt6XxMatLpgmtcXfo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf16413a0eb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8120,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8120), with no line terminators","md5":"a37362755242bbd0d55a1ca6417b8da1","sha1":"72e24826e637d5e30426c051027c073b5b7305bb","sha256":"44b0ff72ee052976d3f4d0db34643ebab174e1da3f61038a27cc8df9997336e3","sha512":"f8ffadfcad522d96e622d5400fe1a684010815c59dac6235a690d40984a9229b4f58e4f5abba20f700d553dec01458295e09e90c972291207c9b27e33396c8d6","ssdeep":"192:riJzgOfNatB7ukUxcZ198zdvyvlcC0POa3Rx:CgOfNaD7uh8kf","tlshash":"adf197423019a55cca9ad023312599f4e3ae2bb0941158cfe33ecdb972dcc61774e779","first_seen":"2025-04-08T10:46:39.903132Z","last_seen":"2026-06-06T14:40:04.411845Z","times_seen":137,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":727,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-3fe0aac0.bbf1f88d.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:33.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-3fe0aac0.bbf1f88d.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:34 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"2267-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2Bx%2BgfEY%2BKeonojiZb3h9XYsbDDEY0yN6jf3JoEdnY735511gAZTY38ViGtCOUmU2OEIz1%2B4PgVtXXhdzNK%2BzVbcUGZ4ORqZHNYPhxUHeXu7doqaslS%2BfP2%2BglUJ05w2tWc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf161f195bb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2267,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2267), with no line terminators","md5":"8c6c2e32d246f43938c015ddcdeb69c0","sha1":"b6c0900796b2f918e95196d1deec6b6bb23de45c","sha256":"2286584045d499c3f6d7e0178051e8cee89b1e36412f7e91b095f677e1b46c73","sha512":"9bb9bf502e8cfe654b271eaa74dfbc90f633cc0ffc25cd2811f89643b603d79584fc1396ad80f23b84cf54beffa20f21ab81a34c3f799d0b7b6cda721418feab","ssdeep":"","tlshash":"5241c0737065617ad9b3e36972419ccc7a81f243e3b352f8fe95e43c89c2aa2193019d","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.440992Z","times_seen":6380,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":671,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-c842ca02.85ee17e2.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:35.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-c842ca02.85ee17e2.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:35 GMT\r\ncontent-type: text/css\r\npriority: u=4,i=?0\r\netag: W/\"410-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5jh6BSapyzGNouNpDoRkpOUPMScXt6wMTulwExJb5G7Syx45yIvtRoroLpuD%2BJcOzn%2FWL%2BfUUChi4qWdJbSPf8g7fgkQGjEUVf7HZGRDThv2IbyG00Z6bCxdH6KRFr3wihg%3D\"}]}\r\ncf-ray: 9fcf162999a2b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":410,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (410), with no line terminators","md5":"fc805b781c89c799b666c4fbc4aeb200","sha1":"fd06224fae1c2c2bde5a18ae89ad003e03d5fef3","sha256":"a69b97003c8dfe86e112829516ab7dd637a12b08508d6cb9049741ea93868576","sha512":"2c06b84040f5df4f5486d754fa36dc5acfd67741c94e929f9c94994c1e7e71898c1fb336dc6be4e8568c2bd0c449b0e34e8f392cee6452d08874382a90856bf6","ssdeep":"","tlshash":"09e0a942010a1e2b2563f42ad0820707b665fb37eb42d2409ee00a080f9b30a38383e6","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-06T14:40:04.364867Z","times_seen":6986,"resource_available":false,"data":null}},"time_used":683,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":683,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-f0130b90.c782d047.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:35.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-f0130b90.c782d047.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:35 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"3290-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqr3H5DwEFKhjySaEtmSjDnSUwuWfrN2YoeImIKwERybtZ01mzvvEdJK7FC6%2BFsc7VG1plO9bYNjZZvXns0XsETqPXI1FcWgWtcoh3VQrp%2BjCB5Zvf7SKvfqR%2BjZOoKsFtk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf162c19b2b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3290,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3290), with no line terminators","md5":"2f06748ac3f1235c97a4cb396a1e7a1b","sha1":"4823ff6c0a91a3656eedf994b38bc678ca1b1343","sha256":"7e82833d28b3db83afa9c628fa630038a05c4abcc4f9aff9ce93c2d1e6550f26","sha512":"9a67e6934ef4a0b1f1745f24cb28648c8cc3e7afa73e59a0542aa7dda86a65e4bf320e3ed8ec5494eeff62c4d11fa7adac854c5bd451394374ffa48a841c61da","ssdeep":"","tlshash":"1c61337122295a2e65b7f0ae61c015dc760ca336e792cbffdea1810a8dc93f35130b55","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-06T14:40:04.318125Z","times_seen":987,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-6f6da97b.246148bc.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:37.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-6f6da97b.246148bc.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:37 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"1968-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQ84kfJp2eF%2FpWpn9WRzO%2F9dq0JR7RHn9dXCnbb9jmUqJ4C6FamB1SqMi4f91Ct9KZuVw75C3IVFCbJiY7gG3%2BYgnJMKgsAPPKVpkCrzILiWxsxnofQ6InnBjp94n%2BpRUB8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf163869ebb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1968), with no line terminators","md5":"1208ffa48d331f25a83777fb559bfbd4","sha1":"a7bebd2b652b2bbc2b7f0eb0d4176f751d8e4942","sha256":"3306156b8f41a234a93659be2f2f9a57e76f0cab53ac5b1ca608e4303e122a9b","sha512":"1b26158b73d765db368d52e0333de2308b39dc0d3928f6c7103899bb9cc1be703eb6d0921e94b2b95b66af814d56733bdef493806cce797d752a7f0f3f2882e4","ssdeep":"","tlshash":"b24173df50a7fcaddadbb042112a1035b0623ec144468ca57bf4cd6085c4d945f1e68e","first_seen":"2025-04-08T10:46:39.889069Z","last_seen":"2026-06-06T14:40:04.375699Z","times_seen":153,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/d8d17705-42b6-4aa5-ae9c-82d7e8cc7bdd.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/d8d17705-42b6-4aa5-ae9c-82d7e8cc7bdd.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: knZvwJKuZ8RyOYKKGh0+/5IW6HZ8EpntMVM/RHzCVty7BPYUgX0f9c4TU+lKzGw9R8QLZGH0AxW1ZLgospcDTGfalwleAQ9V\r\nx-amz-request-id: X5T7TFW2Z9FV0QRW\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"1e463b0bfc58cbe93de38ad62f2ac7ee\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 21173\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21173,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3","md5":"1e463b0bfc58cbe93de38ad62f2ac7ee","sha1":"ae83334518cc12da8587ae98f78a5dd7de9b7a98","sha256":"de1fc345b3fe2ed5fbac321243e8814cd39a37a5554fa0d6b665284da90a6e28","sha512":"e29d51e79e7609dd12e1477a117b2af83259505557ba520681172019687275acc73b92129559a74a03b0f5fdd649c169f5301acbab3c599515ff1a89c1cc4afc","ssdeep":"384:ADUu/oKRfXu/25fNvZ4ZpZKbPzjApEZWZ7CJTa/kKfwu:96b9fNvZDfAEWjvou","tlshash":"0d92d01ded906352d745e472b7e7daae1d0c09d8a31c98286af1cc0b98363193f774c6","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-07-19T06:15:01.548038Z","times_seen":9470,"resource_available":false,"data":null}},"time_used":968,"timings":{"blocked":845,"dns":0,"connect":0,"send":0,"wait":122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/img/BankCard.fbf05593.png","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:27.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /img/BankCard.fbf05593.png HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"21369-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UaThewW2AKFl3zwwFmx%2Fj%2F1QHve0gvhjp9Q2suz2WklE9yD58kHKU8oOdWY60oRP98SwkvGpCzQgcX9KyRXviWayxCBmglfwgdkm5jjIdsIpBp56ZBWwYfHe35DDOXqUac0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15fb28aab4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21369,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 237 x 152, 8-bit colormap, non-interlaced","md5":"fbf055936bf1a8df746d4f5b92c1c636","sha1":"5fe69e70f57b80d589ed84108abeee1b5e53361d","sha256":"5ae6955ee19cc89def118b59308e87502ece7938f6883da58753cffe7d34f866","sha512":"02f001eb0aa7272e31fd8a615ec4c5f8275258d51b5ee46b75ead9b59e1b8dfecd02dfd9a44d1ba9053300bfc48a3cb384bf8e9c3cf1b23d2c59099495d3d3dc","ssdeep":"384:imq5rANLkQwbhEfdYVPqp2B3Mj+fPSVh3mf3XUMdVK94u0xXdt:+NA1kQDeVPE2XC7W8MdVuCdt","tlshash":"c6a2e1a61c990b508f5715242db3a6cc6c19a548f07fce16eb50bbf4d9660f9ceee403","first_seen":"2024-04-14T17:36:32Z","last_seen":"2026-05-31T13:48:58.251871Z","times_seen":144,"resource_available":false,"data":null}},"time_used":978,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":978,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B07HCQHPWG/51PwlF0w3KL._AC_UL1000_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.199.85","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B07HCQHPWG/51PwlF0w3KL._AC_UL1000_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: o1L//kRoRlowwircuvXPWDMJDqzdmPpoiwPHBtdbHkd0cRRz/VZsFgFC9gSRXHJzDKTPoUmz/ot/1KxvoamqYYMTecKn9lgG\r\nx-amz-request-id: X5T0AEY02W9VBD10\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 01:30:18 GMT\r\nETag: \"e29ddf6966065b6297bdaeda2fc895c5\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: a5a3c68a20f74cbb44ec1d0e9065fbd0dce5639ca79f53fffde989d6772ad6e1\r\nx-amz-meta-s3b-last-modified: 20230718T032207Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 38427\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":38427,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 758x1000, components 3","md5":"e29ddf6966065b6297bdaeda2fc895c5","sha1":"e75eab15d5c260fc5cc3237db5b8334615309ed3","sha256":"a5a3c68a20f74cbb44ec1d0e9065fbd0dce5639ca79f53fffde989d6772ad6e1","sha512":"d0062bf3e39e66e6d0658e1a0f6985d4975ebd0652c11d11338832e32f48387f576a353c9e91a1cfb0ea55cfcc5316718ad02a218257944f1c7c43ca764d83d8","ssdeep":"768:QnG8JKgRPhvvGE05rxnVicyk+dUoukL3FGE92TRain:j8Ug5hl05rxbykUUrkpGnsin","tlshash":"4403f1ec63972bb2d23f90f14dfd6d22be139a29868a514e7df48cc870252d3721625c","first_seen":"2026-05-17T02:11:28.626803Z","last_seen":"2026-05-31T13:48:58.200088Z","times_seen":4,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":643,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp910/B0982RFG3M/914FeA4h04L._AC_UL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:29.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp910/B0982RFG3M/914FeA4h04L._AC_UL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: sRBG8aO1wx/WfWgy8QPsxPpRjifCPKHKO4J/7i3rtW8bT96/qMq8Jfp06TOts01CzpEamqsHc853G+qEDQmyUOUpQQ+n5Pom\r\nx-amz-request-id: X5T5D89N90S5976T\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 14:01:06 GMT\r\nETag: \"2372b7f82a674e00cda1bd3e15da5fcd\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 251839\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":251839,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1194x1500, components 3","md5":"2372b7f82a674e00cda1bd3e15da5fcd","sha1":"9ceb7a142ef4d3c902afd7113ecf01aadfb0c2d2","sha256":"814d5b6d109c55a0914078aeef15daff5b9041e71de4584f1d2b5f643f7ec6ef","sha512":"21ec2a572ac03b8981845cb4e1c0526e7f707dd0f8e8e2a357f48e172209f1c933794e54ab22a2d65958c4b96c6181d087f72a2c48d5bb625dd90d5c5cbb10ec","ssdeep":"6144:OgJz6nZDOV5iOEEgdgCgEZhzIq0CdJVJZG/hu5X0ToLBdY:9B6oV45lHtLlBTahu+T7","tlshash":"6e3423685eee4e1cf9c570f7c45d64e19b30c8de1339a9681ca05420deaa9ce11fb39b","first_seen":"2026-05-17T02:11:28.627694Z","last_seen":"2026-05-31T13:48:58.300648Z","times_seen":4,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":388,"dns":0,"connect":0,"send":0,"wait":116,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-2fdca798.6015aaea.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:33.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-2fdca798.6015aaea.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:33 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"16022-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i6ybYDIy4ME5WXeuWMXH7zeCsfwPTiFUOY4t%2Fw%2BYj8MlnosBNWz70kmHG6Sxqb0C50f7NjgePvmt28w9L6BRFDHijObDfetn7sjmuMAuAB20K7VrdVuCoil1VfXOOYI25t0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf161d5954b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16022,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16022), with no line terminators","md5":"6301294b574a2297ea5bb8ebd51502fc","sha1":"2eaf83df4e82197b710dbe963f9e47e550e903ab","sha256":"07e22451bbdfaea2059e79dbc6dd3173d29b0049ab44d72093bc8d3a62e94722","sha512":"eb625eea493993fb48886af3abd22ed0b6ff2cde89c1557394d9705cace10140424ee12a6c3d4480edc0f5d4931d3651650e2b574605cf7d97f55ab8f947627b","ssdeep":"384:Ox2CQRDeBzT8lN9lc1tXCQRDeBzT8lN9lc1JsncjUdG:Ox2Te2lAFTe2lAJsncv","tlshash":"517218e5f234512e685264b661c0ddca7849f919e2f642e6ef86b929c0c76e3273c34c","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-06T14:40:04.357724Z","times_seen":394,"resource_available":false,"data":null}},"time_used":683,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":683,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-7ad50525.62f91600.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:38.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-7ad50525.62f91600.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"5317-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LVgAvGiXLqq%2BA3c4eV1KZV%2FiRTzbS4NZ2wo5pO7hQ4XgWIiqZZ00UNLAE1hlP49XMWkZA3DjDfmEEV1jAUgr9HZOkaHu4VTkNrxdVi4r1v%2BNcijNBAXrLxK%2FsXdIWcOJsRs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf163ba9f6b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5317,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5315), with no line terminators","md5":"24b1aa1d637ee80971d0d5d405a68ab7","sha1":"5e47c60ee23b178bb05a77aa17e0d1e5c44bdbdc","sha256":"b678955a8de297b97376c4e55fb84b3e3a09946547fd50e496cf6b5c337e84e1","sha512":"ab930027ad5e4c47b17b9d93c3eedb8d4e732a44b06e0260c8c75a0db476771bf32340b4d24db05a0dae4e6cf5639d226f535e449a32e70dc33a410778ab7adb","ssdeep":"48:lD58E7P2r0j+WWWgS10+u4jQAF2GB2N5YDWVET/KtLS1gRSpDzwZSkVxUiFN7YEq:l7j+WbsSBkLSoLVYIZ3mmJwQPit8F4R","tlshash":"7fb1c885b043706cc55ba422310e6a75f4a62fb0f401c8aef73ddce49984d14772ebb9","first_seen":"2025-04-08T10:46:39.919275Z","last_seen":"2026-06-06T14:40:04.524798Z","times_seen":151,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":721,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-7c918dfd.11c19d6c.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:38.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-7c918dfd.11c19d6c.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"11659-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sTLFYXJz9QXXFOpoVFlOA8TV7kqIQ3CtYlVQ%2BF9bMAJiNknUlYfe1fKzTDqDA9gqcpithuwr6YqrC7RCkMyqGslB31Fc5M0r62Tef8yAjO6lghYWYtjaJD25jp136ah1Zps%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf163bd9f9b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11659,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11617), with no line terminators","md5":"8fdf7a2947bb7e8a14b94c835330302e","sha1":"65e73addbf283b488697307b4a512356d3b82821","sha256":"19baa51b45557a87c644c86c68cb8de845812ca722ef9c820a25719c45c42e8e","sha512":"26e97423f7a35ed9cd45235478d82c61b68b6456238714c3b61351ae0442c6c4b1ef6dd2ac82551a71dfe5fa6247c7f94d0bedb270cb5df26d9a400902d7e641","ssdeep":"192:dBl3gH0tyB73Gm/zHfmA4WhyS7BaSLF6LDS3Q5:ZcAo72mjGWbFA5","tlshash":"7832e84c7283f8ad09a750b0704fb907f1a9695138099696f7b4caf539bcd0e6326f39","first_seen":"2025-04-08T10:46:39.860939Z","last_seen":"2026-06-06T14:40:04.358677Z","times_seen":151,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-9d964e9e.954da9a1.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:38.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-9d964e9e.954da9a1.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"11748-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LUI4NBq3F9axkt22LKLXwZPjGFgCAX7%2BrZF2RAnjYG8TlFD4wXlEvryb6uTNd8J64XBjFR4m4yeP%2BW0yC7ErI%2FsIKQmOYCwSEssEcE1rVJXTCi04NGCAPqTnvUlAVbgvZPE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf163fba05b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11748,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11718), with no line terminators","md5":"8f95927178d3bddbc93781c785dac00d","sha1":"1b5efd1bdb3d414a06104cc9afd623f5e9607d6a","sha256":"ebea2196a027832a57d109e3e8cd47018fba0ae0d068b99e8a0f8ae2854b43ab","sha512":"3b88d1acd84f41ddd8f1a2942f91a0eb4e9536b1aabc03081341ad61285a9a69ee4326f448dff96287818d2eccd14fc78bce583dcfdddd0b51fd3371fc0245dd","ssdeep":"192:rVthRrXBrmF0USsE/VnwkFiN3i2gv419Il15QtwyO/3a3O56QY3tO/sC4X/5m5Xt:rzX0aUSs8Vwiidgvg9IVt/156f3tO/sG","tlshash":"6932e78c3591bcd90a17b0f1b0ab7496b0968e92540d0542ebf488fa7ebbc5f571372b","first_seen":"2025-04-08T11:27:57.681667Z","last_seen":"2026-06-06T14:40:04.3732Z","times_seen":94,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/2df406e9-dc70-492e-a7d5-4db89889fe58.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/2df406e9-dc70-492e-a7d5-4db89889fe58.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 6WqyrmNlAkI8nkOyne2ANWUQFZFPXMZZaUIwkAeaxlO1V80hieYe2a1H3YsHdsNMhZaoLuJq4ito2GsE34lfnWcMD+aTUCIE\r\nx-amz-request-id: 49WDZMC6JST6P666\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"882acb8a590986400f716b14ce87dbd7\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 27557\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":27557,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"882acb8a590986400f716b14ce87dbd7","sha1":"69d9585cebff24ca05746278353d9723ac581960","sha256":"1c488a620a2342179fea9b5325ea4b5e0e450de64f3bc3383c67e3040242d1e0","sha512":"21cc314fbc6d011adc782475102dcc061e67ed01e1162a9046700b1375b1841701831af77286cc0fead58c997eeba79f5e1d141cdb124ed7881fbe71315c65a6","ssdeep":"768:GG5AJy9ToRwVbgiqHgdBAe9u4p58OsHIE7W6lWG:GGis9sRwVbgiBdieWHTlWG","tlshash":"40c27c039c854ad3b575c391ff468f6d3b8aaf08fc5672e710e11eda37a01424c9da6a","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-07-20T07:32:07.882464Z","times_seen":10056,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":592,"dns":0,"connect":0,"send":0,"wait":111,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sk-tk-mall.s3.amazonaws.com/selle/2026-05-04/e2c4fc99-10ba-41c6-bb49-a6d6307b9c4e.jpg","fqdn":"sk-tk-mall.s3.amazonaws.com","domain":"sk-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /selle/2026-05-04/e2c4fc99-10ba-41c6-bb49-a6d6307b9c4e.jpg HTTP/1.1\r\nHost: sk-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ff44ne65JTApg0l/mikNzHbhC70izRAwD/eQOeO644mElu27jlMT+L4zy/mXarbUaHSYUCeH6VOqesu/3X3BmRv45MZKx2qZ\r\nx-amz-request-id: S9WYWR4DEPDCZHGH\r\nDate: Sun, 17 May 2026 02:10:32 GMT\r\nLast-Modified: Sun, 03 May 2026 16:42:22 GMT\r\nETag: \"78d0eb9f4641c4fe27169d1b86e1f0b0\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 1385932\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1385932,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 5767x3845, components 3","md5":"73c7dab83e67a6a27272f65b237df195","sha1":"444536a8cd127fe23557ed26baa88c198838c68d","sha256":"fe438261872c098dda7ebb8530c06c682f4bec016a9f4d8854de43b04d352f57","sha512":"6ca90f5b8f7bbdedd9bf406eac540bc3ea2e06721ee5e1caa6d361b3bbc6118efbe050d7f998c7b337882336c9ca5124f14d71889b7d9b9625a257988d095cd9","ssdeep":"24576:kmWcqxZLBBGQMyasw1RSj9wrzsC4QK9BOesW70tt+AAcjjo1:k1c6ZLNxLMSqrQpQ2Bl78txjy","tlshash":"522533bfaf3112cbd0bc57bd22f7756b3b7161a8d0ba064a8a0c4db40da9707ad15c90","first_seen":"2026-02-15T21:26:57.605812Z","last_seen":"2026-05-31T13:48:58.306097Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2954,"timings":{"blocked":1898,"dns":0,"connect":0,"send":0,"wait":357,"receive":699,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-2bdc7c1c.b5ba7b7f.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:26.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-2bdc7c1c.b5ba7b7f.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:27 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"33190-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YS87I6NZlaqj3JrsEzsq6erzEq1etMoVvVOs1C%2BYr9%2Bhb%2Bj6QZY3zRpAYN2cEF4XpnbJm66aW%2F2Aw3BK8MRMQC2pkesYPqsKePmncK6pG39fG4qxgB%2FzmaEvdkBUKJTVQ6c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15f4685db4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33190,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33154), with no line terminators","md5":"44cee33451db802573f054731f83a9ce","sha1":"4779c42be7e25f6a87516e80943a9c28027aaead","sha256":"98c534485551816379ec54c3d0aa253d469a0f20b6ad3b97e53b9541a7111b50","sha512":"6e01a994eefd657558bfbdb6ef8198495ce93b0ea4fe5912c5b45e71bf735dcb976fb517c2a9a5e7465b5135b0c90d783f418cc4b6c3bc0103d51ffc3d56b1bb","ssdeep":"384:/XWsnfX8q8V8bTpAtlfs/0NbuGoalAu2bHz/jvMs4WvzsL5cU+18e:/pMqs7s/gbuG6T/AsMLDe","tlshash":"55e20a4ba4c2687d899a6159241b1658b8323fc5d041c8d6b63cfdf4e2f8e34772b76c","first_seen":"2026-05-17T02:11:28.633448Z","last_seen":"2026-05-31T13:48:58.235193Z","times_seen":4,"resource_available":true,"data":null}},"time_used":922,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":922,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/a8ed7145-c86e-4506-8da2-b8b27f610db4.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/a8ed7145-c86e-4506-8da2-b8b27f610db4.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: kATdwpIQNb681NUnk2FRA/yjTfZ5OpVQrypZb/MTWPLraZYgm5Ms/cmindCFnxGQ/T0035YRD+y1MjJr+e+Vvt1cU5cDJleh\r\nx-amz-request-id: X5T3JXTDJMR1DS5M\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"d88ae54a30fed8843621233e2c13698c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 20191\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":20191,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3","md5":"d88ae54a30fed8843621233e2c13698c","sha1":"9fa542e8677ab97712a7fdc7e1250e36536ec3a5","sha256":"dbe475f26aed9df934e9dca6ef2115b5d0968f312174dfecb9da3ddd3c9640bf","sha512":"606629525b62e056825a3dfbd8ca45e0f84740cad1cfa79ee8dc3e7a34658e951b3aa72bc8bdf276c294912a38d839dd6c2f864791c9038dc395b7d12d08385f","ssdeep":"384:EUsqD+1BG8DGQZl9Y4PyXpFmx82oEu1W3454xOKeq0ooJRImy+90lh:5V2G8RZHP9oEt3454heq0dRI1flh","tlshash":"fa92d1e1ad0a233de68685f6b7f6e2b304f412919bd19d3b53730c858d88261de396c4","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-07-19T06:15:01.577995Z","times_seen":9857,"resource_available":false,"data":null}},"time_used":911,"timings":{"blocked":794,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B09VB1WXG1/81oUXIlAvwL._AC_UL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B09VB1WXG1/81oUXIlAvwL._AC_UL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: eit2JvQ0QJjZXs2e89whVBmrQNIgCPqzNKgf3XBrjz3r0Nz4ZcnCNC3XyCENM+RsDsdW/Swl5YduUwknuyHPU7V7/XmQCVb3\r\nx-amz-request-id: X5T3Q8B0FQEHR4RH\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 07:08:31 GMT\r\nETag: \"82e16b4c134bfcba41678ecf1ca3860f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: afd14dd129b3bc3d0b8a95444ff6239aeab7faad80f63bdd5b3d75dca05479e3\r\nx-amz-meta-s3b-last-modified: 20230718T032218Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 341529\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":341529,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1231x1500, components 3","md5":"82e16b4c134bfcba41678ecf1ca3860f","sha1":"0c9e7bd704dc7d8b4a24ebd1a684e786f1e1a376","sha256":"afd14dd129b3bc3d0b8a95444ff6239aeab7faad80f63bdd5b3d75dca05479e3","sha512":"05450dc36c37f2149d6bbcc32e8f27384caf0af048f64839b95310b3c47f31cb7d748f0b7a3c859aa900db4f57bf45a21e0c9238e071f6854a21f98eff76edd1","ssdeep":"6144:HEnnaSCBXIDhgsPr4XX0Yvty6nt5dFT3Mi4goJCRUV4+DQPayirM2:HgZYQN4XX9XHMi4g+CX+DQwr/","tlshash":"957423d21b49ae97c98a1cb0557d349c3dead2203f8e4bfc18a7a9c4e1c2792194ddb1","first_seen":"2025-10-13T18:06:02.057497Z","last_seen":"2026-05-31T13:48:58.289279Z","times_seen":5,"resource_available":false,"data":null}},"time_used":879,"timings":{"blocked":743,"dns":0,"connect":0,"send":0,"wait":124,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-33a80e61.1cf6120e.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:36.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-33a80e61.1cf6120e.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:37 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"3902-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jELObWAn6BNk1TH2HqmJ3uJY8e0NxdUp0SJDRtFnbHAyf2%2FTWPDwpRVrB7IqV14wxvNoMKrWl0nLYk0sTSFoxVpOe8Zf8UDFbfGrX05ItKxvr3ADhDoY7t5TjYm7MUXhqbk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf163289d2b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3902,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3902), with no line terminators","md5":"67971703650007ec0553c105e24bb265","sha1":"4c8a1fcd9387e92a35946bd8562d87e640127012","sha256":"a12630d517277c5e8330b39148b76f7ac634f2309f87c7007b88f7f0c939450e","sha512":"28bba3d2a42ee03c9a59a098810a7d0adbc6c0f28b4e2842529a7e83e5df825ccba15fdba8ee6f9337da4c7709331c6054484955fd93d5b97b8cc1619e6c8349","ssdeep":"","tlshash":"8281702da056e4bc8d9ad052710eb231e1722fd6540089aab738deb492d4da5332b37d","first_seen":"2025-04-08T10:46:39.900715Z","last_seen":"2026-06-06T14:40:04.50671Z","times_seen":155,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":687,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/wap/api/category!recommend.action?\u0026pageSize=50\u0026pageNum=1\u0026lang=en","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:27.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"POST /wap/api/category!recommend.action?\u0026pageSize=50\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://www.mkwhcsq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3lfi%2BYAJ87k%2FRxnVSe1Yoslc89Xloxxg3nfLAB1K1xupCL1g3TKkKpf7KmcgtKJJcPeuZfRnFCFysVg2C7Jzj3qwXUNji0YbcOLfkqEtKXZecb0NuueIWuhOEghYJppeKN8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15fc08c3b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7436,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8a4ebb119a50060a0e01fb44e2dff29e","sha1":"4b254539b59f61b738c072a6afbbe4793351ef98","sha256":"db0507d8469606e31e38437d288b7ea5fc8652f369b048b8a7e247fd97d2c744","sha512":"b4127ab876bd72147f351ecb5875e9adbff4c8087f7377e02369cd50f0b1e3156b4061146c1a201605fead01cde85c287ef09245cdbc48804727261509c1bac1","ssdeep":"192:5VandzoHaIDsGJTN1o1xzvxVRbQKgDCU70NUbcxhYuI3PnU7xG60gkAxpHPUL4CU:5VeF4DBm1hvPQmU7YTxhKU7s60RAszUN","tlshash":"9ee174a9ffe83c6d4b8486d1168725cfe4a0e03b9fd70ec604fdde448aa676a057c164","first_seen":"2024-12-30T22:39:58.238079Z","last_seen":"2026-05-31T13:48:58.241696Z","times_seen":740,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/wap/api/sellerGoods!recommend_new.action?type=0\u0026pageSize=24\u0026pageNum=1\u0026lang=en","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:27.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=0\u0026pageSize=24\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://www.mkwhcsq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ua1GeixVrN7KFXbJbmS1NslNILUxAJ4fbG148WUVS%2BspSYVxpSwhXISb7HGbVJBXtIIzdFJ9BoPtQX0nLeTZl1wqHbSFH5Nr1uvvEpmON%2BDmAiirYP0PEcsej%2FKHAxoj0Jk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15fc18c4b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139258,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"176ae3ed4d62f20248a288a1d7f5f3e2","sha1":"cb44d15185512eed12a5a0b53a19e06ff6e3c8bf","sha256":"5117df4ac4ea12da678019dbc03e515e9c393e40c632e103e10225733e75b77d","sha512":"7adf4947b38d9cf5493071988e49ed2443a03b509d9e2dfca6a8cf4ce1d9f3230a8e0859ecd0c1ab375ca1a001281bfde82b525214df052c09069203f06c2481","ssdeep":"1536:GhWleercSfJT0Apx5s0Pd3zspPXzXfYLnX3lgCNWikg4zxTOmpp2:GgRcShTbx+6zGDXgLnnlgylkg4zMmpp2","tlshash":"ddd39682d398e7ae2a54015844267eab88fc9153dbb34f94ed1d9f34ae98cf2771d04c","first_seen":"2026-05-17T02:11:28.637272Z","last_seen":"2026-05-17T02:11:28.637272Z","times_seen":1,"resource_available":false,"data":null}},"time_used":704,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":704,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/d80b2606-3bc7-47a2-bee9-d040619a34a6.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/d80b2606-3bc7-47a2-bee9-d040619a34a6.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: kNV7PW5zLdZllkcu0Cv+UjwsXhh2blJNkqiE/utj3dg444p9QxlgHf4Q5m5IT8HRKFxAgt1F//9SxCwKCeCT+nVPeWgYzY9W\r\nx-amz-request-id: 49WC941QW8JY2239\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"ad3bb72e6cf979df37c56cc70e70710c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 46207\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":46207,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"ad3bb72e6cf979df37c56cc70e70710c","sha1":"f0bff01c9d923ad55250ef7de41afae41cbe3f90","sha256":"50294b071e29cc9e8afdac176dd2fbc62f4c36265d5f494d96a7ab2908c1a643","sha512":"1fc3e1b07a86c34fb8c9720f8ff8c2a584cfb6dfe7b4e34d53f2f0555e558fe95f5a62bad4a6874a64e081cddae0defe530870d76dcf1551ca45ee570b582ce8","ssdeep":"768:GOSu2YQp+gujkfsasYaYtu/tgiE/c1tcDkV2FynHs5d4RX3S6cqUrolLoDzT6S51:GOt2YQVujkfTJaYg/wU1SYSJ4JcrsLo/","tlshash":"4f23e09b86804fdbf03acbc53f272d985b41fa0944d0b4fbd1e986af1f65622285c48c","first_seen":"2023-11-07T02:37:44Z","last_seen":"2026-07-19T06:15:01.594085Z","times_seen":9893,"resource_available":false,"data":null}},"time_used":1039,"timings":{"blocked":399,"dns":48,"connect":96,"send":0,"wait":149,"receive":94,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B0C1RNVMP9/51MI9wQ95uL._AC_SL1024_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.199.85","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B0C1RNVMP9/51MI9wQ95uL._AC_SL1024_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: QbUM2D4O4/2dm3FoD5w0TnNWOprKFTLp/WhA1sJpHL8+GHH5NTYQRC2GhJlcjWUE2iHVUqVbfob8rnzMydU+0PxP3TQItjBv\r\nx-amz-request-id: X5T8JDRXQ8TA1B3G\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 10:24:51 GMT\r\nETag: \"8b7d3c53f28eeea285eafa89fcf0d221\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: c94d04262ce0bff197c194212c47492cdae3ecf7f24df79aaf222919a271c190\r\nx-amz-meta-s3b-last-modified: 20230717T144911Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 63457\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":63457,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"8b7d3c53f28eeea285eafa89fcf0d221","sha1":"b75b39d056e3b99d0bcd434fdb3ebdda7903b511","sha256":"c94d04262ce0bff197c194212c47492cdae3ecf7f24df79aaf222919a271c190","sha512":"df8f4bac6464f1bf9a0d9e26dc4c47694f4cb3c21ae401c01ecba0deef205f1f87d61c955da10b616f1a47af69a7479a18d93a80fcf443b5a6eb29e41c98fd7e","ssdeep":"1536:T0Pb+3eZIS2ToTN2c6NgDcGq9QD52tMiVy9lGLNN+dAfDZOwWw:TkKOZL+I2c6NgDpq9MTYIyFWw","tlshash":"eb53f1a650caf6d7c5b61f35329b4b054a50ca823146ffc768d0fc78c870724bed6a56","first_seen":"2026-05-17T02:11:28.63874Z","last_seen":"2026-05-31T13:48:58.293907Z","times_seen":4,"resource_available":false,"data":null}},"time_used":953,"timings":{"blocked":826,"dns":0,"connect":0,"send":0,"wait":124,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-17508bb2.b2e5197a.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:32.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-17508bb2.b2e5197a.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:33 GMT\r\ncontent-type: text/css\r\npriority: u=4,i=?0\r\netag: W/\"447-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KR5C%2FvDXiHILk7O1IApJ9AL34OaJpve1U1uTOEQb%2FTiGztqr83cnf1HAITOQ8hJH%2Fwl6wysftNCamTupc6M2G7ESittS6Cn1SPGOsaup4Rjr8uqS%2B7wVRdjKvhgr8xwZBHM%3D\"}]}\r\ncf-ray: 9fcf161a492bb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":447,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"921bce4f483b1f08e93b4216d27b47de","sha1":"b4a29f334d7440c5b2f40841216224b72c6fcde9","sha256":"66b6628c502e0ea0445dc0ae31e229f358bd8a58aaf06e4eb525757fea64d439","sha512":"44e70871a7b43d640237f9f6f070c10a7bed3b3256e548f42488214ac6cd1421ae2209822abbb46e4940081e816f71e92ba2e6a658d1118cf5e3a9f8e7537240","ssdeep":"","tlshash":"f6f0ec012cbd95a15837c53df1c233b42e20369f0206c7a2ac44ac54c68ba613a14201","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-06T14:40:04.334237Z","times_seen":7244,"resource_available":false,"data":null}},"time_used":686,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":686,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-3a3912c7.03a92544.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:37.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-3a3912c7.03a92544.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:37 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"10213-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8zjRbEI2WIAoW721AGoP4tdYzROvs8HqgxK7g5jdVdvCwCWUZkmIlYaDEEzgC3eG7B%2FTSVnFG7SOByYsg%2Bs8NBPyjt0ajWC2ROTdD13Rj8KRfATUAN62kwtT2iyrvKBh0RE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf163569ddb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10213,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10061), with no line terminators","md5":"7a8dc290452bde6fd47e35490d6d97bb","sha1":"0d2fa734d5402e4481f5080c033888b7f2d7fab2","sha256":"4dc6f918b31c9fb6951bb74e318118f3d61ac3e917509fcd8358a38b7dba7d05","sha512":"1479362816b7b3c9232df4e125238e1aa7ce534d37780d831e3fe2bfd4a39c721776cb72a3296ba15df08db469edd0722dc583ead9f1aa6f837a683626a5c236","ssdeep":"192:XfbfNheZyL9Ks6+F1mW2gK2YG6N28BrFR+2aa2vdozPPfIVYldAN:XfbfNhGyR36212gK2YG6N2GrFR+Y22ze","tlshash":"1e2208c877d0b465565761b2a03f208eb3b719881f0f1c90c264d9e479b1929b37bfac","first_seen":"2025-04-08T10:46:39.849299Z","last_seen":"2026-06-06T14:40:04.415076Z","times_seen":152,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/img/banner_02.eb3e4878.png","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:27.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /img/banner_02.eb3e4878.png HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"20448-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WcWxzxvdKfmgO%2Fx8l436NmYn4Ti8ew4Gr5iaeRCnZZmCbylSZ1jRxYRsqrwnVRN3C4addAu%2Ff%2FQ9a8h58j%2F%2FxqhoehbK0Vljq%2FAwvHVvfUsdOeJ4qUz07fgVGJ1lPoHhXZM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15fb48adb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20448,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 297, 8-bit colormap, non-interlaced","md5":"eb3e48786358c2c5c1686aea78ec7e6f","sha1":"fa65e2adaaa137d2becf62337ac1cab4339fe28c","sha256":"4860d957ed1ef802a37e402893cd4a8734b498832906b986b4dbdbcc632ef870","sha512":"c2c0f3935f901fbf7b56ddc16ad72b4ca8582bb01c4825569a34a30e299f8c51c00e7b253a5dd5c666e56eb16843363760bb1b4bda37c99f2373ec826549128d","ssdeep":"384:9wLMKWoMjvwmrXJxI/vlPvanoXTurZzmo8NC49PvRd1mncOrhOAr0fx0czVxflQ0:gMbNrzglPinQTurZzm9dPdrO30fx0czl","tlshash":"9692d088c8dfcda8d50188b79536145f8bf38f9cb4b2d90c9a2281e1e6f9344827b5b4","first_seen":"2024-02-19T23:01:27Z","last_seen":"2026-07-09T07:07:04.464275Z","times_seen":231,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":876,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B08ZSKV2GZ/61U68Pkv9zL._AC_UL1100_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B08ZSKV2GZ/61U68Pkv9zL._AC_UL1100_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: LD5GLFCJYF40c74asPyinlf0kljCqg4vJvfRMnMA//X9hk5UxlnmYVGJF9izrXTDDAIE9oVMuEBaLxKeCjnMXXwQxrcLopXM\r\nx-amz-request-id: X5TCZJDN2SVR9BSN\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 04:55:54 GMT\r\nETag: \"3b314bb7bf2d9af4604d4a2068d01c55\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: d3cf16cee8318f44fa4bc2557658ec0651d3f918666eec214202c2537afe0e0c\r\nx-amz-meta-s3b-last-modified: 20230718T032215Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 154081\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":154081,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1100x1093, components 3","md5":"3b314bb7bf2d9af4604d4a2068d01c55","sha1":"2d39e895ec12e1dee8d00e8e228bdece81fc00e3","sha256":"d3cf16cee8318f44fa4bc2557658ec0651d3f918666eec214202c2537afe0e0c","sha512":"75a17bee8d2458dd7adaf969a4f758bbeae188d7637f96ac503c24fdebb662be734500a548b5043840d1678b34dcf88595a8dbb082c54da554be02fb6f849f39","ssdeep":"3072:6cg7pw+EdH1vw+/+nwgiyCmI8ZeRQwKFcZ1QHXBYeqJ+PN6YhhbLP46:6pw+E3vAnoB8Ze+VFckq85hhbLP46","tlshash":"0fe312f34e7c52a1db70627e1250472177a85d68a197889ac16d9af2deccf26f03f780","first_seen":"2024-08-19T16:11:59.67209Z","last_seen":"2026-05-31T13:48:58.349845Z","times_seen":98,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":682,"dns":0,"connect":0,"send":0,"wait":117,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pachong/gaoqing/B09NWDCDC5/71pH7g-JaXL._SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pachong/gaoqing/B09NWDCDC5/71pH7g-JaXL._SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: yD0HJ84F5i4vxu9EMhSOVOZfCp7eWN+DloV1xc0nyDvJMY85/XHQ3AtO1GB8Vb3FAt8g07CQ7+/2wep5WAkSTbSSpiRyLRni\r\nx-amz-request-id: X5T487P1P89CEE09\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Tue, 21 May 2024 22:07:26 GMT\r\nETag: \"9478ca4d3cf00df83003c1897b2aeaea\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: b6aa9b1dcafcdc42136fcadc7a0740407e1075030a9d3634627df13642e4d2ad\r\nx-amz-meta-s3b-last-modified: 20230419T152910Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 184959\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":184959,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"9478ca4d3cf00df83003c1897b2aeaea","sha1":"374df724024a427c95cfa9a1bea11294c0433464","sha256":"b6aa9b1dcafcdc42136fcadc7a0740407e1075030a9d3634627df13642e4d2ad","sha512":"e41036e5646385b5c0165167471a30b6a78f68001c538403ba34d58a901d00936ead754137b5fd4027b261f72ed330df321751b16688c52d9e6810be9bb4ed2c","ssdeep":"3072:hO43+6C5lefyZnokFmvTW3bqPYnhsHvzaS7mdRxgJcFF7UKziH+7P3TH6Vbloy:h2vnREcbGY2LlWgyFnziaP3k","tlshash":"d704235667f63cd8cae8b1b050c364b34eca9d37edaca6c79692fe080109d1c7816277","first_seen":"2026-05-17T02:11:28.642709Z","last_seen":"2026-05-31T13:48:58.299604Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1116,"timings":{"blocked":966,"dns":0,"connect":0,"send":0,"wait":143,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp910/B08FCHGB96/81vBZybKegL._AC_UL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:29.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp910/B08FCHGB96/81vBZybKegL._AC_UL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: jT3NfgkdKGGZ6dnk2gKMoUR8ezcb9CxcLH1dbaihqNzMo1nhiSRLgZA6Y2HWTUYqQBgH7aHIN5eb1dLWQ2m/DwPdciOPLHn/\r\nx-amz-request-id: X5TD06RCM9M7ZPNA\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 13:50:33 GMT\r\nETag: \"d4621b17b8f137d84b770b6c7615db04\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 175543\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":175543,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1409, components 3","md5":"d4621b17b8f137d84b770b6c7615db04","sha1":"5a42b291f2c82a84fa559f4c469fb25ed7199fa7","sha256":"d5786ae0cd18c19fdc8b486bae8c3fcb80e5cdfcc2121009da5757d22c01b118","sha512":"d66bd83163cb36609772c0f2b18829fa4b274898df4fc71c68b3d355bb959eda215b3546351af7984a855313e5f95da40fd3cdfb843b251bfe2d5d2c091a9faa","ssdeep":"3072:Qw+eJAWZ1xADJcvW63ebaOe+1bf+jjHo6IiMUo8owGxgoiTi2rVEaSW2GuA:UlqT+1KvdIxwDoimDZA","tlshash":"ae04224473f476f2f74d9c786300a6f82b07d50baaa96387e1a83d258421b43b7b417b","first_seen":"2026-05-17T02:11:28.64362Z","last_seen":"2026-05-31T13:48:58.211946Z","times_seen":4,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":369,"dns":0,"connect":0,"send":0,"wait":124,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-08bbc53e.70d0b01b.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:35.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-08bbc53e.70d0b01b.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:36 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"17487-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2pon0uk3mKQlVhr8EOxjUUMQrCJLegpMeZA7tat6i4fA37f%2FOItxmzexO%2F88m3PeHK%2BBfI2uACPyP1Qnc%2B%2BYRB%2BEqjykOdIxa3oXh%2BJHZEf49m3L66UqY%2FlMEc8ofyl4Kyg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf162dc9beb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17487,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17479), with no line terminators","md5":"df7b2c6baa98d4748c13f827936c2c47","sha1":"f5fa7e5c16ccd9b01004199d1716a2f326266175","sha256":"921647bd8952cfec5f84b44dba07386590f747c72b3bd1736900aabe8177fe7a","sha512":"4b9f7a22f8d461be8881263066f1a5ec843a2af8356a08a627640823e0bf631a6792f7df29f5b8bb6477f632a195000a6743e0c2d0a18a87ce0785a9d4fe78e5","ssdeep":"192:Sl8rBcVzhJgFaz9Y7zcqv0Q5zd0z4uzUhHYk8GhPdt3eQOkOVNC5l:SirBc9hJgICcqvPo4uL+lTOg","tlshash":"1c725c53b60df45d4e379991363e39a5a2832664b00865dbf77eccfa13c8c24391ab39","first_seen":"2025-04-08T11:27:57.690087Z","last_seen":"2026-06-06T14:40:04.391006Z","times_seen":98,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sk-tk-mall.s3.amazonaws.com/selle/2026-05-04/f35743d9-47f4-4718-a322-0626ac0d6564.jpg","fqdn":"sk-tk-mall.s3.amazonaws.com","domain":"sk-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /selle/2026-05-04/f35743d9-47f4-4718-a322-0626ac0d6564.jpg HTTP/1.1\r\nHost: sk-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ncOwsVPJjL4r4Uj4tpcljTrZk22SnrCcU6ZRDqhvnicKD4y28q6IVoveMPXVJ5id4NR9W0/Qpsgh+IEGVlAgY4l7fM8AX02o\r\nx-amz-request-id: S9WHMGG27ZXSR8HF\r\nDate: Sun, 17 May 2026 02:10:32 GMT\r\nLast-Modified: Sun, 03 May 2026 16:35:59 GMT\r\nETag: \"508ed507b7ee382d6d09682d42f46942\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 129404\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":129404,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1350, components 3","md5":"508ed507b7ee382d6d09682d42f46942","sha1":"25405667939e0812e74248685042105e815f320c","sha256":"003d59d283fb3074eb38f77e5e700c1a727a8f57c97ec80cc5e8a9f24f7a1cb5","sha512":"19545a6a3352110a97ec2ed4dd5e9522de6d91d141957e49a5a72ffa2c882b927846b60dddb4e5052b39b80d6b8a3c63839e962d58d606116011b26833f60e75","ssdeep":"3072:EDSE0klAutUsBhpqNw2CJzl2gw5HQxyoWttsy4r9t2/pFJl0:40qPhpqm2C5gwxBFys9ypFk","tlshash":"c0c31230a7b198b6fd534874c4f2db36974ac0402a956a7aa64036b6ffe7af44148f4c","first_seen":"2026-05-17T02:11:28.644978Z","last_seen":"2026-05-31T13:48:58.327642Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2293,"timings":{"blocked":1930,"dns":0,"connect":0,"send":0,"wait":360,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/app.b8f67cc8.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:23.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/app.b8f67cc8.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:24 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"1443394-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bQxax4c9tiNYEeUVXtsIJv0bW8gvxLdwaynsS7U82pK6ae2wkKQmqGu2uPOgeeIMvJ%2FIJshktQ6Rve7XrP6CZJD2YinnWwqe3NjYeKdhc5gRZTntcIkW1%2BMq4pw4Tv%2BIfrg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15e17fc6b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1443394,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64302), with no line terminators","md5":"bd93f1074315b4859c1a414e1fd1ddc2","sha1":"3543bf946453019f4964f75d07f582e8c293ab8b","sha256":"4b125dfbd4c3727bbe63d43bef8ce9c55bee3a2481cfe44009b10e9016dcc10b","sha512":"1a975d65905ce13749f0ef02cfa4b9847ce957aec549c458ac4bdc6d35b04201b7ae1f9a6073e0aaef428768511c0de109cd24f1970b7d9651a7024bafe65f45","ssdeep":"24576:1OaWKohfqnz9HPMHD4+tLz29HxNUCOE3Nkxp5R+4t69uE9s1B9Lfbzxg7BuiVXnc:1OxKohfyBPohtm9Hb59dWf+83+2B9rfn","tlshash":"8b657d5a97d6b3a80ee43742700b367126688cfbfbfea0d909dcf21511f9d40921ab75","first_seen":"2026-05-17T02:11:28.645787Z","last_seen":"2026-05-17T02:11:28.645787Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":923,"receive":908,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sk-tk-mall.s3.amazonaws.com/avatar/2026-05-09/06813777-ea0b-4f3e-a06f-aa6ac36a5e2e.jpeg","fqdn":"sk-tk-mall.s3.amazonaws.com","domain":"sk-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /avatar/2026-05-09/06813777-ea0b-4f3e-a06f-aa6ac36a5e2e.jpeg HTTP/1.1\r\nHost: sk-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: zpJcorYhXOfMP3HtOjiyW3bGTfYdIQtF7xfyIkEH06JnRDKaIZoUUcLem6gPBrHYYZot94Ab8brBMTAjzA6OAQ0y6m5No/P+\r\nx-amz-request-id: Y6QAKFYJPEMHXYFV\r\nDate: Sun, 17 May 2026 02:10:31 GMT\r\nLast-Modified: Sat, 09 May 2026 16:23:22 GMT\r\nETag: \"e5b5d2806d6db9d19f6267052d7c7a35\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 372498\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":372498,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1200, components 3","md5":"e5b5d2806d6db9d19f6267052d7c7a35","sha1":"6e9a94102f671b1638c77c784da0c47b27df81d6","sha256":"c632a6870a01beaa5377b86a8da09ec3d4e27566b0a76d66add6ee1495269866","sha512":"a956774a0c8172a7da469ed2a589eda7715707b17f4ddeb0b5eea336e3b761661101f248c1a5d01210f172fcd3f63fc7949b94b75455250c2fd8ac3be8398686","ssdeep":"6144:qEgsoOgGlSWHCbUKm3Wb1FIFcrSezyPi7o+lLsmPJOV+DNSZeuZoL5q4T6soaNEw:osvgGlV9d3C1U4PWPihm+DNSZeuZ4vTb","tlshash":"1c84238496b57290590343cffd1c328d68b58f762afe46095f996638092cace16ddccf","first_seen":"2026-05-17T02:11:28.647154Z","last_seen":"2026-05-31T13:48:58.334605Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2136,"timings":{"blocked":1441,"dns":0,"connect":0,"send":0,"wait":355,"receive":340,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-8ac79d50.badabe5f.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:35.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-8ac79d50.badabe5f.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:35 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"6412-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5HA9LyuzmrnPZ8L7VhH7gg2yLzlAYIiLwUAfw7BS%2BdKPxf5%2FrwrFI5UYqBDG%2FvC%2Frk%2BPhWTWrqEE7Aayywg8Cbr1ub4EpnHUKoTCzaMM9fjFI%2FVujMqlOPdB75MZJbbhIc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1628f99cb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6412,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6412), with no line terminators","md5":"0633ee4661855b6bbe621c11916c84cc","sha1":"4c0a2a81e69522697b1cbaa7338158639c4aa12c","sha256":"fac6b26cf761221c13291fbb469530d8d6caecfc22f09faa1a9e562bf15ad127","sha512":"b2441da78e3cf4a5c847805eac6921d852bd2f17db15b012485357a438eb0d41d84c853e8ca0784803fefd8a7315d0426b19bc78f310cb23ca2a9818fa232830","ssdeep":"96:+jWBPlmQKmYqqxrnY1vfqQrFvniDypkpNhD93JlyIqdUPY8:+jGPlmQKd1b8vfqQZiepkpNhh+IqdUg8","tlshash":"90d161b2b5b5426a7d3fe3b822d4e4ac75049551e8629be6fed4d028cbc2ff35410b08","first_seen":"2024-02-11T04:26:50Z","last_seen":"2026-06-06T14:40:04.50503Z","times_seen":5236,"resource_available":false,"data":null}},"time_used":713,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":713,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-2abf8681.b6c4472e.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:36.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-2abf8681.b6c4472e.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:36 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"14180-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CiutVDmeHk82c0HTIXOzIuUap22uLl7k4leAXZ5VO9fQNQsgkbHj2plTVAHQ%2BanLmTAUrNc%2BRBy8d41YfublhllpekUU6cT0z88NNRKqh%2FDLKzk8jRr%2FbCcjheis8ncEcz8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf162f49c3b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14180,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14180), with no line terminators","md5":"5ac350012d9fbb0232fa0113b4f68458","sha1":"bc8fee522d5271b10882ce03e567bac5a132d2b5","sha256":"2a43f065ffdcdd2f9dea7b9b396d9d02638871bba0efee9cf62abb6f097a724a","sha512":"d66d86a4dd3a237030cd6776fcda5388955b6961ba2b3321daaeb761472f33380d913103327cb28d9c1a221f8ed79847491c53c9e33051a70bd7227ed53aa980","ssdeep":"192:/gCjSKwrD2R/LIT4Ev/sODCMSXc6GqgCI9pn5VsFyeyVu+4ceV6IrI3Up:Fd5LITnXsAKXj782yD4+4ceVZp","tlshash":"8452e85e70bdedf8859a60227016227871712bd0f5094cd8b7bccdf44589ea8a32f67d","first_seen":"2026-05-17T02:11:28.648689Z","last_seen":"2026-05-31T13:48:58.205502Z","times_seen":4,"resource_available":false,"data":null}},"time_used":688,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":688,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-373439d1.2159a2d7.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:36.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-373439d1.2159a2d7.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:37 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"25162-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZtX968q7S4LYmfMOONSTo%2B8HBON7o%2FjZXsDVz2IGxJeZsstUdUj88ygGYm%2Bq7g%2BwtDJbhU1fJeA%2FQ6%2Br6JSFs57rEXb8zvVOKGbWZb0xAVwZpFoF%2FPlkATgEtteUjxSmeNc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1633a9d7b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25162,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25161), with no line terminators","md5":"2f4b36ce4aa479df10d0891a4166f77d","sha1":"237ef6ae4679e3b23db24e9bc76099dfd100e370","sha256":"f67b9a5cd311a9cf099691be424f52958566d2609fd83c9464636a5bbdf2134f","sha512":"dba8f1a54f964aa0ce6ce57c8036736963bd128f11c95e36788f618e76803525ed484490d233c0d290ab30f1e1eb1528114e629b611d2b51d407429431435fef","ssdeep":"384:MY8191Ag35rkpz1rXtpdbLkrTUAAIH/3tEM+DU7d9a8:MYkqMYpTLEhT/WYN","tlshash":"1bb207dc74e1f0ad42f334e000aba443b27b5a1aa84c1825e355d8d47836aded77bf69","first_seen":"2024-10-08T03:40:27Z","last_seen":"2026-06-06T14:40:04.299129Z","times_seen":285,"resource_available":false,"data":null}},"time_used":992,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":992,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/wap/api/syspara!getSyspara.action?code=show_video\u0026lang=en","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:26.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"POST /wap/api/syspara!getSyspara.action?code=show_video\u0026lang=en HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://www.mkwhcsq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:26 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3NjSXI7vpO6j402RsRVWSD%2F5AfD%2F74t0I2zRWY4DXqXCqrQ%2FPRQMAi3KXBgwljMjwhFHCk1N8Vgj4KubsTrkp0324zY%2B%2FNABAARW7Sl83pxEJsxFnt7TMN06jd5FdlixuCI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15f4785eb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"33878fb83944a3d98e0ae8fbb3688401","sha1":"95cddb60c569b28c039a3982e1a593a9c9b75411","sha256":"05ed22d88cd80fb42cb476b3e2826110e2d9c377c9104929b9b5ee381971db57","sha512":"91c65dedfad117e4715750c3696fe2a76e51de20406b1314da92f025f323586806c7467c01ff03e092e4cf9bba824e57487f9cc9608feb66018c29f5aea10dcc","ssdeep":"","tlshash":"2790220000080832000380283c0c3200808c0003008083088c080a2000ec0a00220028","first_seen":"2025-07-21T20:07:50.133523Z","last_seen":"2026-07-08T12:05:04.891992Z","times_seen":67,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B09BZ1Z4WL/51gTdsdIaaL._AC_UL1200_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B09BZ1Z4WL/51gTdsdIaaL._AC_UL1200_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: QiiIWzQsiA20gmRkDUj+1Pf2NqppnONoH9m02beQfYRW2IvrpOv+bfcQ9RDIY184DopjcHNI/QfmNstx9x+gE8dnO7icPKH9\r\nx-amz-request-id: X5TEMFZJR0V1GNXF\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 05:51:04 GMT\r\nETag: \"5a736f697ae91f241f674be75d50d84e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: da4cd1a7f90f07565119b9e09d785bdae519b983dadd06d30e05f361b074af37\r\nx-amz-meta-s3b-last-modified: 20230718T032223Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 84344\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":84344,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 676x1200, components 3","md5":"5a736f697ae91f241f674be75d50d84e","sha1":"2a78daa29ba47c738c8a58d27d0c1cd6d94f786b","sha256":"da4cd1a7f90f07565119b9e09d785bdae519b983dadd06d30e05f361b074af37","sha512":"7b563b18e150a9a34e839389d80e5030e480d49db66c5db488b232d81b76b0f7a9a04db59305082e90b20137238956d4d3be80ecdceaeac2c8c418a8ee17cd53","ssdeep":"1536:FmOUfbdRH0hyKyFKZCom+WL1FTrO0+vaF9XxmHr1FH88ADTGa5/Ch72V1U:zQbfZfF4fgFTyW9XxuJQDTGaJU2s","tlshash":"b08312d4c2ce7097c6acb67ab35720c57eb4491ffceaf60644412d08b1231e517a677a","first_seen":"2024-07-21T11:34:14Z","last_seen":"2026-05-31T13:48:58.323206Z","times_seen":16,"resource_available":false,"data":null}},"time_used":925,"timings":{"blocked":712,"dns":0,"connect":0,"send":0,"wait":113,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp910/B09VT1Q2YT/51FBRSf1nNL._AC_UL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.199.85","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp910/B09VT1Q2YT/51FBRSf1nNL._AC_UL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: a3p7ieNShbhbY+h577r9PjoujyxUGD2amYwFx6yJJ0WQ4eNvyaC8inIHB8IAojcLuvcHLSXEzLytfdwLJhauWHRFxFveywG9\r\nx-amz-request-id: X5T7C0QAEBMCFFDB\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 14:10:10 GMT\r\nETag: \"db8cc5be01c6804c2021947a9c689849\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 44428\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":44428,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1289, components 3","md5":"db8cc5be01c6804c2021947a9c689849","sha1":"117b9d2f06a0163e3eba0be89a55728b79f9197a","sha256":"6cadb9e777cd7dcc75b4e2c99275d4e7cd9a4119017790850323e3083505cce2","sha512":"79e2df5b7d3c22a2441ce6f12bb956beb7c63ce4225e90b0dabdbd13838058980b3bd927a05cf460bbf2686e9d82616993a495cae63fc3f46543d09d86def39f","ssdeep":"768:11u6GjuRN6Yhf961zML5R4VCtbmuiHC9aXkOFttRdVkpoowfmP4zwHzGI7xx6elm:zu6iczhQ1zMeCtbm/HCIXkOPZVkwjKG1","tlshash":"e113f1a4a5e308c1fc7c3e780bf28e34afd095d9e8904f355ea3510c4daa35e9c17684","first_seen":"2026-05-17T02:11:28.656294Z","last_seen":"2026-05-31T13:48:58.260464Z","times_seen":4,"resource_available":false,"data":null}},"time_used":840,"timings":{"blocked":721,"dns":0,"connect":0,"send":0,"wait":117,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B093C7SDYG/61dbX9wsj1S._AC_UL1200_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B093C7SDYG/61dbX9wsj1S._AC_UL1200_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 5VblD6LPjCeoaFelQdwu0bP7G6w3rmx6usnpleQoj6II5qIrZrvULYwZg205XXBSx2PqzxsuFFiEBUn/56Wb3oC9nCWy833r\r\nx-amz-request-id: X5T95BFTBYERNDJN\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 05:08:58 GMT\r\nETag: \"4b3f0f78daf66bb92c950ad731cca16e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 0be60a871265f5b085555dab27dc111b746f92e8cbb4d833e5a647813f03c5da\r\nx-amz-meta-s3b-last-modified: 20230718T074856Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 166464\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":166464,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 806x1200, components 3","md5":"4b3f0f78daf66bb92c950ad731cca16e","sha1":"00d61c99ec8e754e9ed92c5ddce7570164e517f8","sha256":"0be60a871265f5b085555dab27dc111b746f92e8cbb4d833e5a647813f03c5da","sha512":"2978b4c673f92a38b35a1e67812ba035b193d7ec00aa12341e505e05df430437d56e9b47ea07d8f0b6cd0e4cd852a1a5d4c28c144b9dfea0237fe3c5460aa044","ssdeep":"3072:aGLHBYGVS5imK3hvh7m7zePANwuE1L50kbYALuDPT9HiE2QbEDRj1YGGQ3c:n85imMvhS7z2z158JDPZUx1YE3c","tlshash":"62f312e8b55a4977e12b793ec058b39da907abd9c7c0935321a88c4f22c3ddbdb5c106","first_seen":"2024-11-30T19:22:18.5956Z","last_seen":"2026-05-31T13:48:58.262937Z","times_seen":6,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":773,"dns":0,"connect":0,"send":0,"wait":137,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B0BX2XP5HJ/61xiGBWoRGL._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B0BX2XP5HJ/61xiGBWoRGL._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: vWVAXBoA3S050I8GDkUEZ8+5ShjJZMmlDBX+ynbZ2vTs8mql0/3emJfLqBZwyqqwMcsToY6jMiPNOGpAqJ0++liCb/hp5giK\r\nx-amz-request-id: X5T712C85SQ47WZV\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 10:09:17 GMT\r\nETag: \"b5732dbd5fec977bdd73eaddb82936a3\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 522c1e836eaf5c294e19b2cbb77b8e1c8c69c6879be0d45f991cf3af6012d8c9\r\nx-amz-meta-s3b-last-modified: 20230717T144827Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 84627\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":84627,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1456x1070, components 3","md5":"b5732dbd5fec977bdd73eaddb82936a3","sha1":"557f5ff49175881ab94920e9f4c10a024ce7ad5c","sha256":"522c1e836eaf5c294e19b2cbb77b8e1c8c69c6879be0d45f991cf3af6012d8c9","sha512":"b48801396f79ea62c57bfdcf9cbdfc254fbef580cbbc69e7a670a2343995e236aeb778bc454e92dae423c992303e445465d95a6608a9920394aba4e6ade9c46f","ssdeep":"1536:PTn8NmUVFIu6QlZ3cB2G6mKHJZC5BNWHZYm72nwdpCWHtdL4UIN6/8Mc:PEmUVFIu6guDGCXkam7PES4V2lc","tlshash":"d28302aefef84b65fc332f3664e90e250385587c1906aaf385f14f3592599863f3814a","first_seen":"2024-10-04T10:30:02.620173Z","last_seen":"2026-05-31T13:48:58.304172Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1085,"timings":{"blocked":961,"dns":0,"connect":0,"send":0,"wait":121,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B07MMMK3CV/71Yw2dkBpML._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:29.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B07MMMK3CV/71Yw2dkBpML._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 0fiV7eNDhD5wHihMcreek6hTFIhiQzgD0ySKqnLvwRTe+gVVeyBp4/3eilg8ITv+n9iXUo8fVz5XLipu2ygSFfmbwYn8P8fo\r\nx-amz-request-id: X5TAE722B7P0EDY6\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 01:46:39 GMT\r\nETag: \"ecbc914c889422eb61f57e5ab225794c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: f9ef7476b80df04e8771e0abde94789df07073d64ac46f977d8fc28ca54d7fe3\r\nx-amz-meta-s3b-last-modified: 20230718T032154Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 209237\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":209237,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x997, components 3","md5":"ecbc914c889422eb61f57e5ab225794c","sha1":"b9a1bcb2902ad498f418f6d713ebfaa5f97866f7","sha256":"f9ef7476b80df04e8771e0abde94789df07073d64ac46f977d8fc28ca54d7fe3","sha512":"44f73daf9475c8563ea51d115dbc9fcaf99ee3d5df13c5ed9a949e737c055233060c65a7d5f74d0d78c92508d38115abc7a15e6afa56ca49b62477663f48b5e8","ssdeep":"6144:JZ5Kx+Ce99pw40srtlmbJM53wqz/yHFbbkyW:qDe9E4XmbymSKH5kyW","tlshash":"6114235e637a2b8dde961fbb37288d6026fe4e2db45fd8d20e0948e4d10b0dc5e54702","first_seen":"2025-05-13T12:39:36.207203Z","last_seen":"2026-05-31T13:48:58.335373Z","times_seen":8,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":393,"dns":0,"connect":0,"send":0,"wait":116,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-058fa281.0daa9b11.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:32.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-058fa281.0daa9b11.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:33 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"1374-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YDFTK18G32RRoOeujCR6E1CkbkdXes6CRnHBTz41RySYO%2FuZDdkOJzg9Ng3%2BlPacx7iwZmxNHNjbgniEr8AE5iiAUxXudgu0zm9ZbUAnJnos11FUj5PTGWoXNjJvVNtWGks%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf161a4927b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1374,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1374), with no line terminators","md5":"7a0ea81bab09a5e259ac1884d3f72012","sha1":"d87441160241af9deea25169e8fb52a8537929e3","sha256":"b2217a779e1c0810181c9c1cc122bbd3ff1ce69d94164bf7b1e308cceb93e2c6","sha512":"a0d4c2bd68e73bc95ebe419ae4fa1a9210de9ff9e75bb7c3694bffa92fffb77dd7373bc7c3585ba1a9a67b9a3d0207afd87e34d630ba821177a70512c061bb98","ssdeep":"","tlshash":"e3215b00355e673edd37e67e64805abd6900e26bc453e227b9889405cecaa572813ed3","first_seen":"2024-02-19T23:01:30Z","last_seen":"2026-06-06T14:40:04.393299Z","times_seen":5043,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-20104f2a.0f594967.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:32.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-20104f2a.0f594967.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:33 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"2488-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QFjE6IAw93O%2Buw4EVjxikpmXHCqpJk4rbBNPTRHPXxJQhJCTIaiHPh8zs%2B7NrmyorkZ2DpaspjiJDeFyLS%2FqVDazd551iofMWODFW9G%2Fsndb3zSKuFXtNgPDoluE%2Fp3NKFI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf161a492db4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2488,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2488), with no line terminators","md5":"4890366680b9e8d4c468a8489db5d4ac","sha1":"d23b2634a28b365388c81e06d4489149c75500a7","sha256":"0b9eaa9bf0012af1f82493c9cf550761f87f87c3a793be2c3c5484aa44cab4ba","sha512":"98d5ae88c2f3052aab4a1139d61329c29395cb24e33e9cb8313ecf136874191df1c32ee68db83dc7d28029a49c8a0c25cd49f02e27e4c6fdb368628d782af404","ssdeep":"","tlshash":"235158712490297457fefa2a9c8676ab3103fd93e61150cd7847871e8cdafd228e1768","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-06T14:40:04.501354Z","times_seen":2074,"resource_available":false,"data":null}},"time_used":757,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":757,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/vendors~app.de839525.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:23.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/vendors~app.de839525.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:24 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"3579712-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FCThnoDq%2FuxIK99WmWsNhGti%2FOVefhWxtfjNpIPISVfJaapCtm%2FP13tQunB3%2BYZ5hr4SnNYXi6psig2LWQ%2B8McVb623JPG8Daj3j4BkchhSvEMyRTvyzc3tnrmNH54jze4U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15e17fc7b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3579712,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26457)","md5":"7a5edc297ec7708982f091968154f282","sha1":"805500b99fd9d1028cc288afa0f18f4130d4fa22","sha256":"febd75149834dd78869c002fdea9e03acfad28e6126b9f936c18d23ee6c5bde9","sha512":"8f491549adba769b29ccb17a896aecd188db985c37d60aaf5dd78c0c23803ed202ea16c646d5d4d30223b02a1948aa9c89f715900571efe7d2923f1d49cbae63","ssdeep":"6144:lwkguzp5Xgydmac/tDGnij3zp7KeY25LtpHUM2i:qCzp5QydmaOdoijjpEU5p0M2i","tlshash":"ad2548282a5af344e409c0dbea373c84c59de18aa40b64d15f7557b30bb2797ebacd13","first_seen":"2025-08-05T12:35:10.021438Z","last_seen":"2026-06-06T14:40:04.383642Z","times_seen":48,"resource_available":false,"data":null}},"time_used":2210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":967,"receive":1243,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/wap/api/activity/lottery!getCurrentActivity.action?lang=en","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:26.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /wap/api/activity/lottery!getCurrentActivity.action?lang=en HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:27 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yph9bKVv8CJd1aI55bgHz7tXSfOOQUEpiGbcUkRkhZ12evn1rQj0DwaF%2Fe47762T7zjvZz4OK0oQn8N1%2FeDNKzAyNWOa2Ol5Q09kV%2F7jGLU4kBa4noZOR7l5FnTRZDUa7DU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15f61877b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5b85c39fb769eb183b6e5b8519ec3a00","sha1":"ae8be787b4c0500a7125bd129f660d18541d9da9","sha256":"ba3dc3cf6e634921eb9eed57e39334b4517b5b8b09327a935ff0d5546802c12f","sha512":"68d10a3cc895858d8bfabcd41db64466b2ce4907d7844dd0f69c6a4b83344aa7b3cda0ba2accbd5e81a925652b4a7dd2580316c1d0b30379f80a10ff687fd176","ssdeep":"","tlshash":"d2800000280e2c8b0803a088a88c3a0080ac22a308c0cb200e8cab3880ae2b22000830","first_seen":"2024-02-19T23:01:27Z","last_seen":"2026-07-21T20:31:55.995474Z","times_seen":3126,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/wap/api/syspara!getSyspara.action?code=mall_max_goods_number_in_order\u0026lang=en","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:27.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"POST /wap/api/syspara!getSyspara.action?code=mall_max_goods_number_in_order\u0026lang=en HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://www.mkwhcsq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hWzjsoy%2F71WCRdkQIJw8spBgHuLzsZgsGtagyoI50kLHb66BK6f7A3SSaKrqmYhsPr4JS1TK2ZL2qEqu925ab2CV%2BjkMBTw16yCXtWxKacsCR98xGipFQhdWTNFuv27DLj0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15fc28cbb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7c4654fa4ff81d11b3c8d322ec628880","sha1":"080c15bfaa6d03e4ccdd092630344aaf1f003c47","sha256":"1f9573c145cceac2e7ec7273293953edd53fd282aca6e50acd9334f59f34a5fa","sha512":"61d2d5a60435f554ef05dcb0e1b1c47875ac6610289e4d3ea66013244a25a7b1b720d3927649ce420575cc00929d9350f519524350066508593ad659aacb79ed","ssdeep":"","tlshash":"b9a012009c155c150c03c244a84d260641c8210246404e180d041928017d43c21000b0","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-19T16:24:13.449709Z","times_seen":5734,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B07DKZWC87/71A3vT-pERS._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B07DKZWC87/71A3vT-pERS._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: u/PRl2GJZWJGYmUPUWc9hzT4AjaYBLDLxZRecJVquVtWlmgbkJNYSCqnglwkRS5a6zP68zQd5XhKXZ68ZvIbR9kzkio+Pz7s\r\nx-amz-request-id: 49W6AXERBXVBAFSQ\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Wed, 22 May 2024 01:16:01 GMT\r\nETag: \"e07c0952316acbb3c44c8ae5179d916b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 95ef3607893071db3e81259af3ef34e59971dc4b455c49d64bc000c9cc632a7f\r\nx-amz-meta-s3b-last-modified: 20231026T124635Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 152237\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":152237,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1383x904, components 3","md5":"e07c0952316acbb3c44c8ae5179d916b","sha1":"0d4788c3d374cd1d67e0bd10260828c8372bc7d8","sha256":"95ef3607893071db3e81259af3ef34e59971dc4b455c49d64bc000c9cc632a7f","sha512":"aeb9aab7199fbdfd3e5b7d324cad77adeecd1da40411314ffd57b30380a7dd337783b9f819dbdd0ca07b1a196576cee35a0448f921a75bcb6bc7c3fa04a4a33c","ssdeep":"3072:O5MctNFa+2eqQYe+VDK0PVPs+KYD5BQYT8d/DEyLYB5dHKPvnhVgegX+H:Bc/Fa+uQV2DKEPzHDHQn9DEiYBnHKxFH","tlshash":"76e31228081835ebc7207d3e70a5fed4bd1921fdb106f8557b457be9804ea394a3179e","first_seen":"2026-05-17T02:11:28.673548Z","last_seen":"2026-05-31T13:48:58.259746Z","times_seen":4,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":193,"dns":1,"connect":94,"send":0,"wait":128,"receive":190,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp910/B08H5KFPVR/81JzbxYXHzL._AC_UL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.199.85","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:29.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp910/B08H5KFPVR/81JzbxYXHzL._AC_UL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: tc4KeboC1kTt0sboKKg1UMiNXCRSsl22ch9hN6tyI3/3xt+nXi8Jy63yy8U3UW9fbAM5KLlVoONkbgLATllHNbHU/853W3y4\r\nx-amz-request-id: X5T388RSAT9WY0SY\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 13:51:05 GMT\r\nETag: \"42f9cc7f1f12ef4a4b0a76ce87ebaec2\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 246120\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":246120,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 838x1500, components 3","md5":"42f9cc7f1f12ef4a4b0a76ce87ebaec2","sha1":"df13e2861ba5da51129cd2af7fc82f67aa3818fa","sha256":"c70a5795a08deb66c105e3ff48049261b3dfaa1bc163cbb1ee8556d608e3dd6b","sha512":"9e34478ab252059a9d10f30131ee5a6f1670ac804f195dd9cda71dc8d9c086db0c23014464454eedd81b71417a7329031e136b97cdc5ffc8856468372d6e1607","ssdeep":"6144:/iAGb3OeZiTJNvsoeM3qClmeqThoRANDafueNeVR:1a3O9T7EAqnT9ND2BNeVR","tlshash":"ef3423d798841e92e9697a20d723e203dee1c1395583f1c79062f3494a5fcf948dbed8","first_seen":"2026-05-17T02:11:28.674617Z","last_seen":"2026-05-31T13:48:58.254609Z","times_seen":4,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":407,"dns":0,"connect":0,"send":0,"wait":113,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-07/08f79ab6-15a2-4e3b-a519-30b4ebfbcff9.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:29.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-07/08f79ab6-15a2-4e3b-a519-30b4ebfbcff9.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ex+osrOCqBgG5ZJDsDmljDgCXS9ZDJLDvk+NmkdiwW5d1yRDwPFGg1mHgJ7o+Z2zpPpu/AYc9ZZtIl198KzcMZwO7dSNsATk\r\nx-amz-request-id: X5T1YXCBH55YSNNK\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Thu, 23 May 2024 01:45:40 GMT\r\nETag: \"af3d655629c57fd331e00e1b0f5854b6\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 47959\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":47959,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1179x1500, components 3","md5":"af3d655629c57fd331e00e1b0f5854b6","sha1":"b1edfc81b823a390d522f9991c27270068662caa","sha256":"72c2dde070f382254f70b610f028cfe3a75742901e0df27430f7dea03d3180d0","sha512":"1b92ad46eb50716a68a27a6b5afc5ec362f671a165ebe6367b8ee76d3c94e1c0d78e0c59eb22488409f359ad3eca6dae505c27974547941b667b5612b877722e","ssdeep":"768:187BGnpNiNFob2mozYvorUKPQniGxIITx9nAhUSaTYBLWc9s1A3iZkI:iwaF0c/IniGyITxuqSq2Rs0AL","tlshash":"2023f27026abdc64e4ed55381ed73f26e20bd902b79a9f2d993040b6d6301edc058ccb","first_seen":"2025-07-09T14:21:55.74838Z","last_seen":"2026-05-31T13:48:58.252906Z","times_seen":208,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-7537f99d.002d2e5c.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:34.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-7537f99d.002d2e5c.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:34 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"6996-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2bEZ0VXkvvaTXPnQnfmK4B61qsWL6iHH2OLTze1lWgv88LEIlXIUddicy2dXDbZ%2B5pRvMTILD3tUCU%2FfL4um91Idlz9eDh00nYCT3ARiBInyjMV7Riltvn0CCjgIMw07GLs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1624b982b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6996,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6996), with no line terminators","md5":"e47703f5ce5dd5a2d872fbf35e5278f7","sha1":"f7f09df63c98e908e2e973e0fbbf1349e3ea00fc","sha256":"d27113c9c0119132a51da268c25bd538d520f967ebf3953c2857ac815c07d5c1","sha512":"475b0b00e5ae76bfe8e85995145e09758369034e0682e64d5c1d08a3ae34e1c32c9d12b9c8a31349b1d04cd1933a75c82ef5893b31197de9b52a44f9cf8e691d","ssdeep":"192:cXzCQIXiDe53zb/UboRyRD5liqF6+llu1JfkXH:cDCQRDeBzT8lN9lc1JkH","tlshash":"bfe14cf6d1768025af36e1a670e0a8e53824c922ecd742e973547518ccc35e3172bb4d","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-06T14:40:04.297658Z","times_seen":225,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/img/right4.c4ebbaa9.jpeg","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /img/right4.c4ebbaa9.jpeg HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:29 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"4704-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MKddlqdWWgWfyXtObc3o4B9sHOCJf%2Fmv9%2FE1wT3IFsWvJ4l8iMX3hZDpgGyPjyNMc93bEVrKoObCrT7OfUM5zfJOJdaWQSP4zFblOmlB%2B%2F7WTuMCkGeKyW3fqen%2FJaz1jRw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1602b8dfb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4704,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"c4ebbaa9596cefc52a8ef83be74bddd0","sha1":"c9096ba4316dfecd3256cad10bc3433d830e2891","sha256":"a157b8c76a2827e6e363e939d4ca8fb9766460eddc3e78cdbd6e63bccdd1ebd0","sha512":"d2241a4f50814ec3579576085c9086059508f6b04dea353e9c00ff44168e820cb7f02d967a992f84de12caab31ee46d94509be798bca0d7f4d3be8f9fe81a4ee","ssdeep":"96:Wh+tAid+HAua4Aqt9u4F3DRBfO18AB/x0qaZIPdwR3ODcpOfxukRbnCRTVMfn:E+tJ+gBvEwgRyHSIPmR3OD485hn66","tlshash":"59a17e9bcffa688bff121f7bb124245975810e036a01eaf344014d7ab927c718743596","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-16T09:25:40.617542Z","times_seen":418,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=0\u0026lang=en","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"POST /wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=0\u0026lang=en HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://www.mkwhcsq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2n4Hz%2FTLI9MD9EVv0AtBm35ekMLgi7v5Aq1ImLOQpJXrgFfKlUg%2FNaNeFwbPm09WZUj0MFJ5pjJkOPWph40VopDU0OHoYYxIh5XGFEgewE96DBne2TOcf7ixRAPWo48OlXg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15fdc8d0b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f2982955040e03da061e625bb0bf375c","sha1":"20181528c67d8f347372b93f90d96e7d6c3cfd0b","sha256":"aa16d955b045de5c2728a37653d3f51d5f24f6e43879c0214e7b015079356608","sha512":"503575abcbe6db127825c8225d96bc0142d885aa83f74e8b5558ede44b0668ea953ffe7d3087c4d55b98b8550f776ebce4c989e93d571590ed8aa03789e88bb0","ssdeep":"","tlshash":"b49004403c0d1c17040fd545f44c3540455c315307d4c7300d4c5730415f1753d04570","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-21T20:31:55.998313Z","times_seen":7364,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/97f3899d-51d4-4cd2-9720-0af99206dabb.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/97f3899d-51d4-4cd2-9720-0af99206dabb.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: S9mcoubsYgdmFbjRQz52K1jElj+5BVmZn+DDe0Fv/ChOv8gqydtKXvANv3+57wc0ZlJAvs0BGk/WazP6U7Q3+cQmn/okHhe9\r\nx-amz-request-id: 49W09W2HNVX0EB1K\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"74ce2539c3d1d018eb92f94dd3b9bd23\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 40407\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":40407,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"74ce2539c3d1d018eb92f94dd3b9bd23","sha1":"1ed07808d60d8ff4965899591136f4f1ccc880e3","sha256":"5a3f2be7dd8069790a3bb5098aa704996a51c1c689459abf286b29a0a99a3d26","sha512":"2b962643ae9c9c3aec2caae066500f422473d23eab84cd3dbf14dab1b1bcd25fa0cbf8914f6a540b724b78fef89f4c952873cc2de3e733886f9fe03a57aa3fec","ssdeep":"768:G26vbkDR8P2NFi0uyoJ6TlcoZVJixSS/+Q1irAGMk8P2x9rzcXyz:G2kQM8Fi1yZTlZVMxSmwXM5gcCz","tlshash":"a203e027dd508ec7b10dd3fc7faa7db8839d5a01a58473de20f51c96332584a4e6b458","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-07-19T06:15:01.601417Z","times_seen":9893,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":596,"dns":0,"connect":0,"send":0,"wait":125,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/d2355e87-0f42-48d3-9924-966b9fd8d2e0.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/d2355e87-0f42-48d3-9924-966b9fd8d2e0.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: XJQ5fKZlbckb6ng9fN8KNeHVX2R71gl8WWmctZj7CS6UH/nS92l5VjzcKBFphqDlCDecEh50QXzOuoTh9aX4Xvb7KyiaDeo9\r\nx-amz-request-id: 49W7ZNKM9ZKQBF07\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"3fb702f913ff64c272d67742c3fade6d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 28164\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":28164,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"3fb702f913ff64c272d67742c3fade6d","sha1":"9d59af9b1418caaf57ed3f938074958affbdbf5c","sha256":"effe7b76be1c47da3ab9aaf81e6542743506dc40affd341687094417a4feea49","sha512":"1be15380d11c4c57f3ac922aa8d945afa256b4fda813b5254fe3ec2fd8b01fc242c8f9faf79a25245626438240e63d8c68bc1e3dc6c8ae1569b363e28f99c817","ssdeep":"768:GkLEEqGMducsX2FbPZlrPr0YFveH2fzquxgfI:GZXvducmObPZlrPoYkH27hl","tlshash":"3bc2278b59484ed3a46d93e5be970e9c6f453b4ce88229ff10924fd77f202664c4d02b","first_seen":"2023-11-07T02:37:44Z","last_seen":"2026-07-19T06:15:01.487667Z","times_seen":9903,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":708,"dns":0,"connect":0,"send":0,"wait":125,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp11245/B089YV4YYK/71dJoqNFTFL._SL1364_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.199.85","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp11245/B089YV4YYK/71dJoqNFTFL._SL1364_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: yJHd/mjmlZfp0+nmcczrQqV2U3RzzPYIrQka1Hs5ey/yV6AuTYcH5T8lAvGuUrlDzX5TQYE8IATFfySzrAFTe39bQV1WK3/O\r\nx-amz-request-id: 49W5HGAMZ3GFAP19\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Wed, 22 May 2024 11:30:38 GMT\r\nETag: \"92470523265b57d122f486e9f8f17ca3\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 211025\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":211025,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1300x1364, components 3","md5":"92470523265b57d122f486e9f8f17ca3","sha1":"9d832a0a53d5ef9e4127292f6869be4517f21da5","sha256":"88187511aee8dd97168b7c55b311e6b7d21d8e1a780048a8eb88026159eb2201","sha512":"e05c44067b59bde966f5ab1e2ddf6458df01bac9d0eaf6576e4a3fa94c3b5f5c30a9d1dc273dcdb10950b380d0faff9463523a511615a7b621b151d914cc65e5","ssdeep":"6144:HStwtWamz6Yrlw/NE2sEuqdRhhNcNeDanSxBE:ytc7K6Yr2jeqr2e4SxBE","tlshash":"11249f079c19db83a46c97e8bd434dac6f0a6b1ce8827efb41660ecb3d201165dde46d","first_seen":"2026-05-17T02:11:28.681907Z","last_seen":"2026-05-31T13:48:58.271021Z","times_seen":4,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":206,"dns":15,"connect":92,"send":0,"wait":124,"receive":281,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/db9e4213-1cf1-476e-9409-d380a78c60eb.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/db9e4213-1cf1-476e-9409-d380a78c60eb.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: cKU1fR16pnkLfg/8QKJhEmC4XMZ5KSmlmCWQuKL4fHqjU/y5wLX8Xg0MlSM5esA2IYJ7rDTRIG/0D0hCnt/gHlfVEb/npp3U\r\nx-amz-request-id: X5T6S2QRRTPBXHEJ\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:54:25 GMT\r\nETag: \"b81a3b92e5f4028acbe7721d185b680d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 72818\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":72818,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 850x900, components 3","md5":"b81a3b92e5f4028acbe7721d185b680d","sha1":"4aeff772249b1e9edd26268ab1a11ff241f04e6a","sha256":"f0d3d3cac6010ed08a0922f3206dbe01911d1cad95062f2aafe9eaba025d162e","sha512":"5dce0478a72a353b110038cd9c5ef85af99343be5a392d2219e954c0373b7443e74150707fde7ba2bb82f20a7dde00a16fc61b3043d65f44f4ced7ebb2a950f6","ssdeep":"1536:0RjUX3pWPcsmjSbh5UjdL1S1G6W6QbpJTu235qJl10Be:CgJscs+R1SEF6u1u234R0Be","tlshash":"486301a77bcac564f7391df5395ef1382b3fde60a7a82e600832687058967c0a48553f","first_seen":"2026-05-17T02:11:28.682987Z","last_seen":"2026-07-06T17:24:36.8337Z","times_seen":5,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":493,"dns":0,"connect":0,"send":0,"wait":117,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-2bdc7c1c.b5ba7b7f.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:36.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-2bdc7c1c.b5ba7b7f.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:36 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"33190-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 8\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JJ0KN%2FG1uAHNE54poxmW3PZktGBsikW3chNpK4MIYyNH3gdpLIP2OOKX9Kk8W0lA%2FvDynabKkCuJ4bySgZZvWvNvFp%2FOmOMNYiMf65mI9xk1BkPzaJD41u0GKUS7DZG9yDs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf162f59c4b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33190,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33154), with no line terminators","md5":"44cee33451db802573f054731f83a9ce","sha1":"4779c42be7e25f6a87516e80943a9c28027aaead","sha256":"98c534485551816379ec54c3d0aa253d469a0f20b6ad3b97e53b9541a7111b50","sha512":"6e01a994eefd657558bfbdb6ef8198495ce93b0ea4fe5912c5b45e71bf735dcb976fb517c2a9a5e7465b5135b0c90d783f418cc4b6c3bc0103d51ffc3d56b1bb","ssdeep":"384:/XWsnfX8q8V8bTpAtlfs/0NbuGoalAu2bHz/jvMs4WvzsL5cU+18e:/pMqs7s/gbuG6T/AsMLDe","tlshash":"55e20a4ba4c2687d899a6159241b1658b8323fc5d041c8d6b63cfdf4e2f8e34772b76c","first_seen":"2026-05-17T02:11:28.633448Z","last_seen":"2026-05-31T13:48:58.235193Z","times_seen":4,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B0B8B9Y3VJ/81gUcZP8nnL._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B0B8B9Y3VJ/81gUcZP8nnL._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: DMJWEymg3duOCv9ShDwNjyu9kj3Sm14zAbc4iy1y6B8feMhQ2tFbZzWKlTwzUNig/R01git70Jv4y8X5/ibzSzLl1yUnDmbW\r\nx-amz-request-id: X5TE9QDZ87NXD1WR\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 08:28:09 GMT\r\nETag: \"e3ddbda4bccd8ef82a599ee6b5d17c46\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: c81e0836765ab24647d6535d07273352173353899c62e491f07363deb0f0e8dd\r\nx-amz-meta-s3b-last-modified: 20230718T032202Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 232872\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":232872,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 948x1500, components 3","md5":"e3ddbda4bccd8ef82a599ee6b5d17c46","sha1":"e5bdc2f0d3ade5e16a6a8569b5765ac82d6102a3","sha256":"c81e0836765ab24647d6535d07273352173353899c62e491f07363deb0f0e8dd","sha512":"050718ffcaa15afa9b7b4878df3c1e6396eadd5eb150b8bd8135a96c9a192ee3b8082e6435bca40fc49494e57018b51113cf270808404f6895d52b9173cea24b","ssdeep":"6144:MXNwDyv0Rk2fCf4+I5wEE2XIr3HkEerCMRphyeGo:M9wDyv0la4+D2XaHkEe/RXV","tlshash":"933413160b4620b7d5554e7690095b9bcb01f0afc36ee4abf222dd477d3be30ab49622","first_seen":"2024-07-21T11:25:49Z","last_seen":"2026-07-16T06:00:37.078391Z","times_seen":394,"resource_available":false,"data":null}},"time_used":995,"timings":{"blocked":869,"dns":0,"connect":0,"send":0,"wait":117,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/e9170b2d-a57b-4220-aad0-d890c3b1018e.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/e9170b2d-a57b-4220-aad0-d890c3b1018e.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ZtF5gUspDIYCYqqpxbj63UAXLTvqOyiMzNkHvmG2wqi+oU9/BgpfeGRIQVG6JFB5KMY62/BuaO0T3UvEQ0VTHbHPI87RQItH\r\nx-amz-request-id: X5T4MHV835JKTD26\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:54:55 GMT\r\nETag: \"094db3721615ded6dcd79364282f9846\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 111382\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":111382,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"094db3721615ded6dcd79364282f9846","sha1":"ff68e2b3c9807a2c8a96e3fce824c746ac86c71d","sha256":"c5d080283268fcadc9e4c66daef306bc17e8091c00959ce0a00ade099e693ead","sha512":"5a2051d35a767c2138deeee1f54d1c0a38ca36c129745e906cd672c49eadefbd46a7bd85087472b1eb0978ceab866b04497e6dcadef30e6fb324eecc0c2a99f9","ssdeep":"3072:i7TyS5VRXbNbwsmYhgRoNNjflF1S+ZagSMoPApq:i7Ty0lbNfKYBtbSEpq","tlshash":"adb312601b315fc6f39e85b5caffa5514632b283264e4f6bf4c2812405ab0edf987b25","first_seen":"2026-05-17T02:11:28.68474Z","last_seen":"2026-05-31T13:48:58.25399Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1148,"timings":{"blocked":1014,"dns":0,"connect":0,"send":0,"wait":131,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/img/shoplogo.52117751.png","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:27.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /img/shoplogo.52117751.png HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"45214-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=25%2BXyVT5mFwsneQqDRHoiTxRacdiDcZuw6oQxZuLNYr8b5AazPuh2jheuPA3UMia69yktNLEVJd0wpwo1YxrZy%2B8L3mHNQcnMfFfULUXiubtpfA36j7mfZkxr44BpihAe4s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15fa58a2b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45214,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 867 x 288, 8-bit colormap, non-interlaced","md5":"5211775113d6646eb5dafa76a9afcb26","sha1":"2f77f8c4a12d74775cd62964d3a32832ec2a5ff7","sha256":"e7b3372a5e9e994212c5315a2919bbf45bfd188941bfaf8f5751c625dced6cdd","sha512":"24e5cab7a6537e0d1f9f6ea78ac1a90c1957ff94c42de45fd1b7386dab0c8185f32c6e8341cdec755f8b4f05f93c115342974e33f580eba8fa553afc2be51d4c","ssdeep":"768:Ks4PPrg4+bzg9pW5SaWzbxhP1NtNb1VqqnHz2bu7al4Z7iktircP5bPOaB+H:KsCgdcWEbr1NvDz2bu7i4Z7iktirSJGD","tlshash":"b713016071c1276c75488ff93909200a9e9f6a24c360cd7159f13f1216bbf3ae68e99f","first_seen":"2026-05-17T02:11:28.686123Z","last_seen":"2026-05-31T13:48:58.19255Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":936,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=1\u0026lang=en","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:27.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"POST /wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=1\u0026lang=en HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://www.mkwhcsq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VwbYJbEjeW0LBmIV8X2k7aXVTT9hBMOFJuKdtizCmlz%2FJ4QvN9%2BG6AcWHOSRTEe3pPFN5gN9RverxJncn5%2Fr7%2BaZfnHCzzlTX%2B1Kri9uKHo6PFB9q2VDBvwMdcdcCugD%2FGU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15fc08c2b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":835,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"116eb57ec983f2812406ad1ea6432e1d","sha1":"048ec5bcc15ab70ec18731c8b30c54f78f89a981","sha256":"a408e41a93cab2fddc5f603914acddd03497fc1f212b410ff4a717e4b1a84d54","sha512":"74281b006605ec84bc144b44c0bd0e3afe72adef222bc6eb8a931b2c909da87504c4286dcbd490e761358922229aa1245057468d9c6bed499f3a4b0d227df47c","ssdeep":"","tlshash":"f001ce662bb4c4490944b781cacebdc5e5ec735a9cf8ca4ac96eee8c5916f30251d323","first_seen":"2026-05-17T02:11:28.687213Z","last_seen":"2026-05-17T02:11:28.687213Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sk-tk-mall.s3.amazonaws.com/type/2026-05-04/78c8c4ee-b079-4ac1-9811-9e74dc4ec1cb.png","fqdn":"sk-tk-mall.s3.amazonaws.com","domain":"sk-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /type/2026-05-04/78c8c4ee-b079-4ac1-9811-9e74dc4ec1cb.png HTTP/1.1\r\nHost: sk-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: hAqaxmrUO4QJZdrx+LF4gDB0p31XM+5venfQdoHn5OMRbOp2sIywsd9JsHzu7R3K7QDXYbhgZi08WaOEKoL9Fe5qQjybseKq\r\nx-amz-request-id: X5TFR7JSV66WHBSD\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Sun, 03 May 2026 20:24:54 GMT\r\nETag: \"8f6cb11f5d237ad799fa43632e417bb1\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 205470\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":205470,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 400, 8-bit/color RGBA, non-interlaced","md5":"8f6cb11f5d237ad799fa43632e417bb1","sha1":"f72f976607442f471e028a25b0c8573aef60cb1a","sha256":"8f8df67a34bb8fc5b9ac15bc6e3b09195c44b14bb5022923f16a111885294eed","sha512":"dd6c68d4d1623925f0e7d0399653aa2f35b526658ec6a8197422789ab13e640a9e5395013761b5f52ee2fd314330aca9b56b1d9a4a17d2ce24214fba51ba2a26","ssdeep":"3072:zs39k6DDuzBe43UFMtrYK4IIxLI+pY659ahpaKGXEnWecxNkXtYkTzKJmWDe2:Gku0B3IMtrv4I8u67ahcKGXEOxNkX8X","tlshash":"f5142362a40a5d011f1867f5b15e889911204dd4baf28c938ef9aaf7931d5ff17f03e2","first_seen":"2026-05-17T02:11:28.689204Z","last_seen":"2026-05-17T02:11:28.689204Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3199,"timings":{"blocked":895,"dns":71,"connect":345,"send":0,"wait":369,"receive":1040,"ssl":476},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/06f91542-f535-445e-b3aa-04e3fb05fe8a.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/06f91542-f535-445e-b3aa-04e3fb05fe8a.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: JnIFr8QWAXdO+O7VLm816XCo5ylpLZzwuGDNDy+q9VvvnQEqzlYVQHguR5tUKhxKedtx+2UieA8w9sdY5Q6rOpbBytEIZ2TW\r\nx-amz-request-id: 49WCC5ZKG9ERFJAZ\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:17 GMT\r\nETag: \"1b8714109ac1c300a6848b18f4b10531\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 27057\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":27057,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"1b8714109ac1c300a6848b18f4b10531","sha1":"1c40a9917624327dcad395e8d0a9a204e24d73d0","sha256":"952d26075b0ffa3fd64c6add8791e566a5d7010f52382b468a3f1672c5496320","sha512":"4a5388c14a734141ce576fb7e988c90418774f74d2641dfda2714951ce30264714baaa6338374f69d053de8e232efa6e658ff156ac04412adcfa3d6c41a3b94c","ssdeep":"768:G7DH6SIfn5ChIqflgQY2z+CR8hUywK3cD:GRIRCm3QY2z+nCywKE","tlshash":"2ac29d5348089fc7b13ac361bf031e6daf96bf09d495beeb10920ac7bb34655ac4d128","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-07-19T06:15:01.60211Z","times_seen":9714,"resource_available":false,"data":null}},"time_used":850,"timings":{"blocked":718,"dns":0,"connect":0,"send":0,"wait":125,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/9e07ba42-24f3-42d2-8ae2-75ae7168f546.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/9e07ba42-24f3-42d2-8ae2-75ae7168f546.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 0cSO+GN+KvtBErFDTOhHDhtEJ6oRoIphvLKcKfTekbY79MwHkmN6MUmVba8C4M6jAxg8zELWF8WQJnXd398kZlgdo71WIV0P\r\nx-amz-request-id: X5T8B3C1Q3HF9ZR5\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:52:10 GMT\r\nETag: \"17ee90bc60e54b220465839c34bf508e\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 95410\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":95410,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"17ee90bc60e54b220465839c34bf508e","sha1":"6931e23a9565e0d7e7b41edebd3df467b49f31c7","sha256":"1c1e16219110f8162ee977c6bdafce9bdd82d054b3964ab2b4fcfdd5d469aeb5","sha512":"84d61defd1f9f3cf96c7c5c0e58c587f4c46d583b3a1ed9ed5749bcbd1f1d21ab52326d19e6ce5f07991675f9c83cd946552f73a4b6e93468509b0f0662da225","ssdeep":"1536:lG8kSc2soUvC3bQHOW6nKQt9v+dmFLCLNcEfRl+tzZwDT5p4qdmM/dF5cxfch8OC:lfkSRso8wbu36n7Tv+dmFL18l+vO4eFI","tlshash":"679302a21e110897deeaa72ffdfa5b80db379756e700934c686d746330535f09e15093","first_seen":"2026-05-17T02:11:28.690846Z","last_seen":"2026-05-31T13:48:58.311133Z","times_seen":4,"resource_available":false,"data":null}},"time_used":692,"timings":{"blocked":573,"dns":0,"connect":0,"send":0,"wait":116,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B0B5L736MQ/91gA6pAmj5L._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B0B5L736MQ/91gA6pAmj5L._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: dPOMr9b6yNv8itNTwAidANA4s00bSHy79eJiRhXujEUBGhy7+/XdikpSvcQHchDeYPGZyR09jBRIXWobjDkuyJxAYjU4aZc/\r\nx-amz-request-id: X5T37Y865CRK44ST\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 08:12:47 GMT\r\nETag: \"b9c45b5043578f9fee9a761b3b9e35cb\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: b82c231fb7fbf7866385fad17c1f9d09aa7d7c01c7804994968a1e4f81221eb3\r\nx-amz-meta-s3b-last-modified: 20230717T144737Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 355356\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":355356,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1172, components 3","md5":"b9c45b5043578f9fee9a761b3b9e35cb","sha1":"3b9ec2b09894900b4a3e1180c1cb3cdc2ed20ad1","sha256":"b82c231fb7fbf7866385fad17c1f9d09aa7d7c01c7804994968a1e4f81221eb3","sha512":"b883625daff27bb6107112c0bc895dc7204113cd473cc344c1a5d68fab3b8f3a08120631e88f676467f4ac120039e5db2ba24e36fc2b520ec18c51990f0097a6","ssdeep":"6144:SAOBQ95uTGtqjmEf83DNblsv1lD67M6/IAkT97gHid+z7czSjdIC6SxsRCGAR4kU:SAOBQ9E5835mH67nBkpgHBnMgpJxlGAi","tlshash":"347423e34d967166c1af007861250204f6d8c6be71349ff74acba9d2b9e1742c4fae92","first_seen":"2026-05-17T02:11:28.692419Z","last_seen":"2026-05-31T13:48:58.236633Z","times_seen":4,"resource_available":false,"data":null}},"time_used":980,"timings":{"blocked":758,"dns":0,"connect":0,"send":0,"wait":122,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp11245/B07T7ZTRPH/51uSxtvvm1L._AC_UL1024_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp11245/B07T7ZTRPH/51uSxtvvm1L._AC_UL1024_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9a7+4VrRWh4Eqx+z/hr9ywVQOzt1uQRGb9gt3dAGqSvszll8f0H+HLfv81Xu3Q9gGXTXcstc8cwpYpDHAod+C/gv2AL95HPR\r\nx-amz-request-id: X5T5P0EW8V1QMJMG\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 11:27:20 GMT\r\nETag: \"7dbc8b758c5d01a9fd414b9858f38e59\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 26901\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":26901,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x638, components 3","md5":"7dbc8b758c5d01a9fd414b9858f38e59","sha1":"adb4c8e4edf5c04780c8212f0c793fdc26e7f964","sha256":"eef1faacb94b024c1d301634b2702112b9e3ca4f50c64eac3d1d383470c36b6e","sha512":"f8600083faebdd0b1448414ae7ae567ea3a0e2108c7a48191abd0fe1e8444e04b2ec5241463a42e943e57363eae2e747458393e426ac1b8c39454e307985f9fe","ssdeep":"768:196twwfuBd0+/ouZ0793pogbedWlMjtZF:36twQUi/793p/qdWlMxZF","tlshash":"59c2d1015539501bef76b7f4092d73a80327271b3285e67226d5e4448dff3cbb5a06da","first_seen":"2026-05-17T02:11:28.693468Z","last_seen":"2026-05-31T13:48:58.261011Z","times_seen":4,"resource_available":false,"data":null}},"time_used":985,"timings":{"blocked":867,"dns":0,"connect":0,"send":0,"wait":117,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/img/right2.25e8da4c.jpeg","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /img/right2.25e8da4c.jpeg HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:29 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"6980-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NR4klPq7U%2F14%2Bx4nTEkcaUugJEuRawLEMDsC2MZOMH7XszoyTJUbQ7YyDvsVeP521nwfauTSqBk7e%2FKD37HJ1%2BVACtN8xJb8fg7pZ7qcRG80OPdtYfw8Ko0YVXclK%2BvOkbw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1602a8ddb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6980,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"25e8da4c4b1263171fbf7413200e71bc","sha1":"3e1fb68f1cf14cbf55be70f0e6dc594dbf65329d","sha256":"3ebc5071b1ab7f3a8af777c3bafc8f92199e1a4a3371089479f6a309c64ee09f","sha512":"da4e8bcb866441475ac17723ca3c9aa8ce2be55120f65fc1b49ddcf5d1372c361496dae3ef874f2a8c26e050f64d62a6cf1c29d41cb3e6bc688b3fad293c8af5","ssdeep":"192:EGIAChhHACQc4X2g7B0WiYHgv+YLX8RrI9GMftmR:4ACPHACQcBg7BUYHgv/Qt","tlshash":"0ee1adacdfc4a976df2da13f45613a1a36236b0bbfd39bbb65486d20dc55cb012d0050","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-16T09:25:40.625627Z","times_seen":412,"resource_available":false,"data":null}},"time_used":772,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":772,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/img/right8.5abff5d8.jpeg","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /img/right8.5abff5d8.jpeg HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:29 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"4947-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nq6eHl5efR6NlvHVZztNl4CACqhHmr%2BWfN4AblSETd2%2BhI5lZfmgSmN4lFCxkHCp9VtrVzW0Ql9BY0BOdEPl5uDXgxGFiaYbtqJoetxQL%2FVps5jKgxwCt6SyY%2F2tFTB46d4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1602b8e2b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4947,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"5abff5d8ec10911dc3627af31bb816f6","sha1":"78f48e00671ae49cb966becdca71bc72d787958b","sha256":"8a4272a1d4acd3ddbe78a4f4fa3ce3a10b5b2768e06fbee04a70a0597b65eea1","sha512":"7b72c1c7ddf2338a698f0b98ed72712cc83ae066e97339ebe4fa192bc6f60042d07b450547f9945a4b43244622bae0bd4d7b3df1c97686c62c83fa495887e9d1","ssdeep":"96:Wh2/Ha1ZcZNczzMAMmrGxCMpAdWWxzq/SVbFNXJakuuHcPL8z1UlmXexHgvMjH:E2/0ZNMYMpfWZbFNJuu8PYz1LOxHMoH","tlshash":"7aa16dcdbe242d3bef1181b2b946172b1a68093468a8c77d219d3e28691fd710e79c66","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-07-16T09:25:40.618066Z","times_seen":415,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":714,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/vendors~app.38d4edbf.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:23.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/vendors~app.38d4edbf.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:24 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"248173-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rnhhmSzk4QIDwOxZuaJyG%2F8Bx3hdydU6uJkY6c5b7CXJ%2FdzNIrjeF0vfZB2ZMg0R8R%2BrPDkjBCKxYuaVDD2wv8YFxwleexAo7hSxP8%2B2qbz0VLWZoeJm3zbXJVHDp8Dpj1o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15e16fc5b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":248173,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7e2c553a0ebf6e3a82ae07ec78c9a275","sha1":"579d69c6381a05da2c87a55d88301788536820dc","sha256":"28d5dd7be3b9ecdecae26c5c84811a181f5eb03df646096eca8171b5ab6f9f5b","sha512":"b82a19b7b473a320b1a3f99db0badecef4ad997d367d1138bd2adfa6b97268f906a688be68b6455a0b48c1c724907e7489bc30c1a48ceeb180174abe973de7f1","ssdeep":"1536:O28Y7SrW3YeWXA1u9w4HCe/l4JrgW9cMERw4B78O6iZkJgYu8e210kSDDvIc/ehG:TtKw/27eDLL6ob6v7f65WCXkb","tlshash":"ae34b6109b17203bb22bda6d74d0ba892f25c313d8334b7afe95790cc6d64991263e5f","first_seen":"2024-04-14T17:36:31Z","last_seen":"2026-07-09T07:07:04.491643Z","times_seen":218,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":911,"receive":222,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B0BZ7C2CGR/515FJhTOd7L._AC_SL1024_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B0BZ7C2CGR/515FJhTOd7L._AC_SL1024_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 7baxvZtNvsEif7DxXEFlHuOeTZQRggXY1ly/OztRR+KGqA/J5ZK33+7F8tfKMIRBtxwgDWwm6IrllshPdN4SU4fetP4gkyBz\r\nx-amz-request-id: 49W2N479V040WE9A\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Wed, 22 May 2024 10:17:03 GMT\r\nETag: \"e0c7c243a190cfc9d9b3d518b890ed9f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 47045c897f5e2c142907345d96bfff11a8be1551e99a06ba7f5a22efd1bab71c\r\nx-amz-meta-s3b-last-modified: 20230717T144834Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 50044\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":50044,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 847x853, components 3","md5":"e0c7c243a190cfc9d9b3d518b890ed9f","sha1":"db17e7028b0817c1545e7f8a670cf5f6d51fac94","sha256":"47045c897f5e2c142907345d96bfff11a8be1551e99a06ba7f5a22efd1bab71c","sha512":"645165544adbf92521ffc53db7e565bd28806e0e420ea7ca132c8fa2e2cb5e07064516d94747e9aaca5236f26860b7229874f15a2b73721e51cc4581bdb46001","ssdeep":"1536:5qtWdvgVgpKdQJ7/YYqaSKIaHCZl8E1kYClQ8:5nogpKdQJ7/NZQ1ulQ8","tlshash":"fc23021f4c843336d536a83c94c0d54d5b2bbe2194c501cef6e689b12eae13d97ee4e5","first_seen":"2025-10-09T07:52:32.254604Z","last_seen":"2026-05-31T13:48:58.262321Z","times_seen":6,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":2,"connect":93,"send":0,"wait":120,"receive":94,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B08ZHNDB1Z/31Bn40NqcdL._AC_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B08ZHNDB1Z/31Bn40NqcdL._AC_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: iSVC/eDfRAbtYUYsgCwEAMvg484qULBTRnnhhHu81OngvCU9xnrWvZTamh/osjhwdq19ZNxXIhZ5VDmcWdKklQTsjSZFmifT\r\nx-amz-request-id: 49WCQ1T566JNE00X\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Wed, 22 May 2024 04:55:20 GMT\r\nETag: \"63fa13fe158374b53859dbe768ea8736\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 7c614566c4243e4a97fa04776cb8b37bad6a3e9b38faf252b94f353aec0278bf\r\nx-amz-meta-s3b-last-modified: 20230718T032152Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 10596\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10596,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 335x158, components 3","md5":"63fa13fe158374b53859dbe768ea8736","sha1":"b12ab79a962d9aa9894b56268a02b6f547aec36c","sha256":"7c614566c4243e4a97fa04776cb8b37bad6a3e9b38faf252b94f353aec0278bf","sha512":"3f656292c1e46e75485d9803f223a0dcb38bf54be973af5b10b1696f2452f4620fad7f012bfdb4cd6a3f6fc84d1379dcaff8ba258775304b5cc8b7a9f7dcbc92","ssdeep":"192:RXdIhLH6AtUPMHL9pC1sFTUDo77BB83jCCsBp3gkevDEtoBpm:4hbpUUHL9pCUUDS83jQBKvYQpm","tlshash":"3b22afa27b6506cfc058b075ddeac30877f295ab3b43a796a983172095271b02f85338","first_seen":"2024-08-20T03:01:10.741553Z","last_seen":"2026-05-31T13:48:58.358786Z","times_seen":205,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":394,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/img/banner_01.f68b4caf.png","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /img/banner_01.f68b4caf.png HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"91520-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BOkDnC0u2XQw90nBUT5XrdTTS0GwhK6JAvYcQ3k3WhnQQ%2B2U51wq7GGvlSPmwpeyfJRWmboAQ8GSBCI%2F68B4%2BTGS2KyjFTWKqOdNANpor4AurpwBh%2F%2BI6mHl%2BEUlTgf9fvA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf160078d6b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91520,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 352, 8-bit colormap, non-interlaced","md5":"f68b4caf26d9bba7119274424075bb2f","sha1":"a303a85f922aa99f31e1303f45ea5caae3a954ed","sha256":"32a406c113955820bf69f8def7caa84b3436c8f81f4040f4d415f4b51ebfcf59","sha512":"6ece800a2efcc355c1c3a214bd27f28859c7f02f9ef9afd5cb662aff87047a0353fdff2c43a5bcdbd3f6b8de1b08d5defb9c1afcd50430487385a944f32cffe7","ssdeep":"1536:jADy/0wycEblpfJ2vWFTjh4tLf8ltr1jZAoUdpxAMzk:j5GDhhfeLf8ltR+p+/","tlshash":"dd9312e10f0a616585118552389cf93274e40bbaef7323cfaede06527714ae86eddd8c","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-09T07:07:04.485839Z","times_seen":356,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B08JWF99P7/71EbBUkBPAL._AC_UL1200_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B08JWF99P7/71EbBUkBPAL._AC_UL1200_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: PCpGogyFNg1pQ8KT24KFalfzfLZjdk+W0jCYRz5ggBP56ZVbsvQ4wnwM73N5Uva13bI+ygwyR8WkNe5h7ntEs8pNT+RrUuyc\r\nx-amz-request-id: X5TCP55AXS00QTTV\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 03:57:45 GMT\r\nETag: \"2f5c619bd2bbdd2433d0929caf904fcc\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 2343e32b32a2b7188569c6354589dc1e5df20e2beddde184c7956fdcdcc84523\r\nx-amz-meta-s3b-last-modified: 20230718T032220Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 271782\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":271782,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x994, components 3","md5":"2f5c619bd2bbdd2433d0929caf904fcc","sha1":"72c2f4641c51a52ccca427afe5849c023174a0cd","sha256":"2343e32b32a2b7188569c6354589dc1e5df20e2beddde184c7956fdcdcc84523","sha512":"708dbc7a74aabe15e5c2ecedb91a140ae005e363be2bedb8112dc92e14c49fb53c239d095b8c4a1833d701f9fb22ccb99da59b38ca3fef924511ab2d9ade41ae","ssdeep":"6144:SzRLh2JvUQMYDcpNpcDONXnvWDW77MT9ekPTXoVDunuO8XOOcIdJCSc/6GP:SNh8LYpNptNXnvWHTI02uWZANV","tlshash":"31442352c99b8fe4ed06d6f20636e9531c2a7438542a7375f2ce87513b0d19c3ebc988","first_seen":"2024-11-30T19:22:18.646593Z","last_seen":"2026-05-31T13:48:58.194579Z","times_seen":8,"resource_available":false,"data":null}},"time_used":921,"timings":{"blocked":713,"dns":0,"connect":0,"send":0,"wait":110,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/img/logo.52117751.png","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:27.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /img/logo.52117751.png HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"45214-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LEqSj%2Bcy70MGYLEYpASVxc1WVPoEBwzTZHtzBAZnfaavIvFpJd%2FYiVjj8GsRonjGcJj07jiFYO6CF6waUQnV7yrNEfs4gRj5oh2L4piWmx6hl2X3hCIE%2BrB2Gq%2FgHeLB9iM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15fae8a3b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45214,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 867 x 288, 8-bit colormap, non-interlaced","md5":"5211775113d6646eb5dafa76a9afcb26","sha1":"2f77f8c4a12d74775cd62964d3a32832ec2a5ff7","sha256":"e7b3372a5e9e994212c5315a2919bbf45bfd188941bfaf8f5751c625dced6cdd","sha512":"24e5cab7a6537e0d1f9f6ea78ac1a90c1957ff94c42de45fd1b7386dab0c8185f32c6e8341cdec755f8b4f05f93c115342974e33f580eba8fa553afc2be51d4c","ssdeep":"768:Ks4PPrg4+bzg9pW5SaWzbxhP1NtNb1VqqnHz2bu7al4Z7iktircP5bPOaB+H:KsCgdcWEbr1NvDz2bu7i4Z7iktirSJGD","tlshash":"b713016071c1276c75488ff93909200a9e9f6a24c360cd7159f13f1216bbf3ae68e99f","first_seen":"2026-05-17T02:11:28.686123Z","last_seen":"2026-05-31T13:48:58.19255Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":937,"receive":230,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B07KVWX711/61HFi3GNqTL._AC_UL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B07KVWX711/61HFi3GNqTL._AC_UL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ubKX0tAFKsNBjZrzoCRGbGsWDGK62s+zumQteFPaptxJVsspn8TvFr0LvsPmRZV5ArusZkqSQq8fwgmdQW3USGt79xMeP5VZ\r\nx-amz-request-id: 49WFBR23GBBSE0CS\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Wed, 22 May 2024 01:40:45 GMT\r\nETag: \"b3ae1021e401e7907b379ed26e4e979b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 2a754b2acb0ef1d017846c8d73dd4066916f7585c721587b0560894832d016cf\r\nx-amz-meta-s3b-last-modified: 20230718T074924Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 169305\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":169305,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 879x1500, components 3","md5":"b3ae1021e401e7907b379ed26e4e979b","sha1":"10860b9e21f176ce1fc7b132aae0fadda92ac9d2","sha256":"2a754b2acb0ef1d017846c8d73dd4066916f7585c721587b0560894832d016cf","sha512":"23395db37dbfedb621a114b8f94391ef97e6d6b7dba67729cc50eca1f0419f37b6945b10f081c609944786ced4d091b0329805ec58bd1001383d89a20a08ef67","ssdeep":"3072:y4hquHtF1e9HoksQheBDg5io2mSP611FBqazVcVGexvEo+DyGT7vSXG0xsZg:qgF1e9H/2FDPqdqazCdb+DyGCW3Zg","tlshash":"23f312b2f309d0e9c68154342f3747e58398ced099633e9173e32669d42a6bc75fc98a","first_seen":"2025-01-28T14:33:39.346908Z","last_seen":"2026-05-31T13:48:58.238826Z","times_seen":25,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":94,"send":0,"wait":128,"receive":284,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-2d2212c4.0ac19f58.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:32.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-2d2212c4.0ac19f58.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:33 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"7020-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TDYkP1psS7HtWQeI24eo%2FoyJhCX9ENVEsi4fp%2B4zO8U9WzqnF1rsPOmj98obarrZ8ngHFZ2KRqFSeX8Lz8RY8SEOzZHOMery993%2FDq7Bx4sXPZZ8YTSctDsUaXiDa9bjrG4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf161be944b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7020,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7020), with no line terminators","md5":"3ff63057d453e7905816d415bb041db8","sha1":"f4f4d9466e57dbcdcc27f85955f6d5739d531111","sha256":"f3218c20f75db6879f1a8122333e30a7a9d8b4eccd9e8b4653a13ecb75e4b14f","sha512":"cb8bdf7bd90ea453555f77338d6b061ac65a08342fc665a8fe8c7eb16ebd18b3e37ba599126c7d5de0633585760ca46b80ead813303761b14a37d73ceb7a7a91","ssdeep":"192:IzCQIXiDe53zb/UboRyRD5liqF6+llu1JfSt5Xe:iCQRDeBzT8lN9lc1JK7e","tlshash":"18e13bf5e076d025ab3bd1a6b0e0a8e53814c923ec9742e57754761cccc36a32766b4c","first_seen":"2024-02-19T23:01:30Z","last_seen":"2026-06-06T14:40:04.518082Z","times_seen":220,"resource_available":false,"data":null}},"time_used":688,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":688,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-39678b28.410c36ca.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:33.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-39678b28.410c36ca.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:33 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"11900-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UpieT0RQGPLnSMOsY3E5%2F9DG7Knq705%2BBHuYV7yZcxEu85v%2Ba8260YjTCfEGqWEomAExdn9bOvHTGVRe1PZZqo6uaX0EgLDOfOoiQYGVqaZboTm4KptFFknJ%2FszH4YxzvQM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf161ec958b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11900,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11900), with no line terminators","md5":"1fdfaae17b229f449b5bd9e4f1437459","sha1":"e3ffd116dac11f7adb268079fb755db7fc4f2410","sha256":"cfc882d2f62064f4f7ee6bb7fc56a18469494c61feb485c2d03aa6e5666baf4e","sha512":"e7f6bb0843d4f5b8c9121de80bfed974dfa5ea74cc40c10007fe2db07a726d1ce77b8c3445685d2f99365ce5d11e1b6e2866e579b5436d9e605722e201330a8c","ssdeep":"192:IzCQIXiDe53zb/UboRyRD5liqF6+llu1JfOxoi7k2Xer4p412QRAelWklFbaiWsX:iCQRDeBzT8lN9lc1JWxoi7kGerMscKY4","tlshash":"5732f96290b2933dad23e1a57098ace83544d526dd5343eeb7507438cccb2e32632f5c","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-06T14:40:04.394881Z","times_seen":172,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-47e41fee.0e701f5c.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:33.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-47e41fee.0e701f5c.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:34 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"2911-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SJLiqPVCG7boMJBzoziNUg2x0pmia1PT%2F912kkGL2s0i43sbSh5UcYeZVcsbcBBIyFKfbQH%2BceT5Fpy7pIlpaHJRwRcBr2JMmy%2B%2FLs1zj8ks9KHJcCbT5EqHsnFuYilQAoo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf16203962b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2911,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2911), with no line terminators","md5":"ccea655bea4bc170e3aaa0f2f26510ee","sha1":"1259c05c03dfc98dc7f24d470689316ce0bd9141","sha256":"0417838141e75f770427672acfbbaf935e495175cc8431d1a95ff1853902dcf7","sha512":"861aaec4e19464a7f373e1627ff2e2e21060a291d64b39290946344f1ddd72d89cbfcec2245f553ff1933023db5dc0d95c6374859c8eb768c69e9a3220c8afff","ssdeep":"","tlshash":"e851d0523a4d7619913bf2a8f5c1bd8c32a0b1679353d2079ecf5c199cabfc2352da48","first_seen":"2024-03-15T18:45:47Z","last_seen":"2026-06-06T14:40:04.504296Z","times_seen":1032,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-6ae12620.b30d78dd.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:34.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-6ae12620.b30d78dd.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:34 GMT\r\ncontent-type: text/css\r\npriority: u=4,i=?0\r\netag: W/\"340-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kWKw7NjLTF5qjhYAT3p8BESRIi0IYOzgaOylY3UOPIfJR0MvUhbaX%2Bhv5alT5YvDz%2F%2BcZha3LjiJlV%2BfHT6UgXeVPB%2BL3UJWfJIKYZoIUWEoO54dMGBMqcnYHNBIdA1wvCw%3D\"}]}\r\ncf-ray: 9fcf16233978b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":340,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (340), with no line terminators","md5":"7de78efe8bf09e10f280567a395d6b1b","sha1":"a84403256fb9c265c757c632def2bf3681d921e3","sha256":"3c64df4c1120ae8af09b2670ec78de64165c17cfe281e9fd19d9a55277f38b77","sha512":"575e2e01d3b715fc66a4de91cbe6cde658c2d3953445a92f711f396196fe921f1ff198fa691271c8670688cac8b445a52076248bc01382ffdd4b6956c1137eb5","ssdeep":"","tlshash":"f6e020708b561089952be1438b034cda2af9e663d16395855fa3d03dd46704f2e2a785","first_seen":"2024-02-11T04:26:48Z","last_seen":"2026-06-06T14:40:04.395716Z","times_seen":7633,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/bfa34439-cd8b-4b7c-b849-8cd85c7b6a33.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/bfa34439-cd8b-4b7c-b849-8cd85c7b6a33.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: sWVZrFKNOdbSpnA+INdB6El3p2/aPgMMQ7OXzllGbi4n0oNZYY/uFXJgutdPLI42PCDFhr99Q/Ui322YQMtaT6fsCln7bo/c\r\nx-amz-request-id: 49W1M9DBYG66V889\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"46155632d481869cb9c3e853c7832bea\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 39527\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":39527,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"46155632d481869cb9c3e853c7832bea","sha1":"988a2fdc538ca57eadd8730f028800f736e1ee86","sha256":"1e4dba5d9d5fae2a3aafe91ae59ff2f9f938229ee17b6af825d3d7ae78a93913","sha512":"6a93dfe70a2ee1089d7a1137043494795f98bab7533792b6e736c25439b4c871437a83103e1f02c58b32e7af94aa20e67db51929d945869cff4485b6840c2255","ssdeep":"768:G2faHY+HPhvSyz/eZculI+Pl9UTnIbrimLDGEFK6hbrysiU1JL4:GogPUGkymLDGExSsiE4","tlshash":"af03d0472804ef4b762ce2727e9b1f681f819b4ca8c672cc4a530dafaf657b9491c41c","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-07-19T06:15:01.517344Z","times_seen":9955,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":39,"connect":95,"send":0,"wait":118,"receive":99,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B00ILJC8FW/61zmDN9oR4L._AC_UL1001_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B00ILJC8FW/61zmDN9oR4L._AC_UL1001_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 2+4G/m6aMlWfBeCspSD0MuBeu5oBSAlzi2xg9YaP9xlAgIn6qmJuXwCNWYa3OnvuwoL0pqjFZkmMUBuWsJnf8nITEUH9Ullz\r\nx-amz-request-id: X5T8K43DNXGVSJKK\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 03:09:15 GMT\r\nETag: \"9c26eeb5b061175365a19a9aed3b1ecf\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: ff124d87fb58cc85d0901be172d8ef76116cd1dd0ded735defedff67575feea9\r\nx-amz-meta-s3b-last-modified: 20230721T122530Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 87075\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":87075,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1001x750, components 3","md5":"9c26eeb5b061175365a19a9aed3b1ecf","sha1":"5b0f280221bf33c89835f36ff08259f4b5b82219","sha256":"ff124d87fb58cc85d0901be172d8ef76116cd1dd0ded735defedff67575feea9","sha512":"f62849aec4a990505ebb8c697da2d4fb6dad40560e88ac08f0493881fbe0b979d33bdbcc664a02b2d15ee887468749c285d1bf6b62c616f4e4750213cefdbd06","ssdeep":"1536:M8b21bfJ7t7aToUNkSdpREFACj5cJsvUiXTOCdmUif7Yt2oO++GCYul/gwyUmk:Mj1bfBtGToykmzeOJFiXT7iD8C+lREo8","tlshash":"d08312d2aa6015b1dcf86eb96b115f786945837c7f8f6f98fc08a3d06414e1c2fe4941","first_seen":"2025-06-08T12:34:52.334579Z","last_seen":"2026-05-31T13:48:58.314233Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1199,"timings":{"blocked":1078,"dns":0,"connect":0,"send":0,"wait":116,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/db7ed710-71d3-4c75-ba45-cbbaca576a5c.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/db7ed710-71d3-4c75-ba45-cbbaca576a5c.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: WrLaf3cnzkI7VTSCYnnSsu7pIJwgLf1o9HKqWzWfNkP8+vd3i5GvgSpwidhByvDbFmlM6p6k73LFM/ahHZbEGcYPw+A6rtFJ\r\nx-amz-request-id: X5T552RVXGV6P27Y\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:54:25 GMT\r\nETag: \"258b7008a91b132e3fb2ff44e9137a41\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 212270\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":212270,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1021x1500, components 3","md5":"258b7008a91b132e3fb2ff44e9137a41","sha1":"15f7f5265d0dc227a18ca733d572014f16e7d5f9","sha256":"3e03a1047caa2814d3d1d38f411905bf599602513fcd6c7942506236310ab9fb","sha512":"4de3f8fa938b35f0daaeeab00a631ad59baa3af6483ac0f8fd544467cdc9d536f5dc58c0a2a5558164ba95eb223ab7a5e9ad2ac26353e09280de10b8d720b7ed","ssdeep":"6144:Q/0XxRDwhFKd1s09vVyKu6k2pq9LZQX6/g98:QJhFDoIKuUpq9WX6/gS","tlshash":"662413f9e2a4de33d14447308370f3822ac63d54e5198df753c5942bd664ae68a27fca","first_seen":"2025-07-06T13:23:11.660533Z","last_seen":"2026-05-31T13:48:58.239334Z","times_seen":12,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":577,"dns":0,"connect":0,"send":0,"wait":116,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/img/right3.7d93ea42.jpeg","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /img/right3.7d93ea42.jpeg HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:29 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"5498-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jd%2Fx7Iid%2FOF9fDl7EhmqRYbaPVux%2Bc9KfQXEHn%2B7Mj6BPwiZP7qt1VnOOdrUUiAsFbxBZwxYHNdEl6e5n1QG7EUXnFkZ66SmqOl%2FCciRu2ZpWvg1X6Iz3tQ1v1GfmoS98Ng%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1602b8deb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5498,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"7d93ea42b0f3ec512403c4f5978e034e","sha1":"81ce6087a121e350ec95dab1e386f3804b83cbe1","sha256":"e854f7ceccd5259b486859db7cc270805b11a1762a11f1a74ca43a02bfd2fac9","sha512":"925345e3c5175fbf16314f08470e1191eb4d4a7c33aa15c20ed8d9b78d370effcd49c53f7144b4e0b2428bd0509ca05c83009c41bb42ace995857808ee10415a","ssdeep":"96:Wh4GDfN2qrFHk8A3CrwfOIngvJlMde582vqxe2CjEploBUs3:EZ7XFHk8A39QhDQVoBX","tlshash":"d0b18e9fb6cb3d90f766043be4ca1d5922d67b0614d067fc80a87a0f98bbc714e10868","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-16T09:25:40.646007Z","times_seen":412,"resource_available":false,"data":null}},"time_used":741,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":741,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/wap/api/sellerGoods!recommend_new.action?type=2\u0026pageSize=24\u0026lang=en","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=2\u0026pageSize=24\u0026lang=en HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://www.mkwhcsq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oYHCMSzd7W5cA3TqfxMCGrZFx12Tw0BmG9xlLHxiSZDPavVajYBK%2FcRWk0s6Gpj%2BAxyrOyB9qM0Ak69T%2F%2FmUalD5%2Ftd5Mk3uSE4tWg9rpJ2bAWtdvPmm6nCc7WlL2A28Lds%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf160318e3b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119779,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0afe17182b1301ac42cb0a15ca1ce97f","sha1":"c0fc9de292ce14f8d7e2268aa4f94784e64610ba","sha256":"bcc630e84709291b30bba4501974cbecf52b589286d6f79974647d445502fd3f","sha512":"4e3930f55930cad9428c875654fefe495fa084d01be90a02c63b6097f96488bba8267662910df5f781b7e9fb04c15131fe694fb156859fa8b3cc6d71f77ce364","ssdeep":"3072:aLHFgRcTrVrQ1CiH26CrTb0q7jS+bD/2Dymw:tMrQ1CiH1NEz","tlshash":"3ec3f892d7a892391f24019544623a9ed4fd821bef734f95ea2cde347baccf63a1504c","first_seen":"2026-05-17T02:11:28.713633Z","last_seen":"2026-05-17T02:11:28.713633Z","times_seen":1,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-33a80e61.b6b151df.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:33.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-33a80e61.b6b151df.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:34 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"6025-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HXw%2FMkXgS4b2BzUFREsmEHBDbVPOjYBt%2BKDavFJ4UEwhqPbLkH5qqt58oZNhq%2Bd1y2zjxuLe1nbQSSCNQLj9U%2BTyQC%2FQ8PynNciIPZQ9fj%2FwkM1aszHTfxIkXJi96FUIiUc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf161ea957b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6025,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6025), with no line terminators","md5":"9dbc3890536da05df7626187689522c0","sha1":"41190d802a43a8a1396a981238ad7f907b4a39a7","sha256":"67546016c75035383b17a6d9da587a56dbf6068e1ba53e3cf2c724ee24daf795","sha512":"987a60a2dc3866237901524b293ebb5d95e97f447f3afe8c01dfe27bd93d9ccc9ba38f2cf815f69eca1dbe849973f6f8e706118155c47db3556891b5ff32adfe","ssdeep":"96:VTdRiowyLNQRLCQzpE85mAIJ75iEOOOOOOOOOOOoMSh53zb7DHHnUboUINlSzNDU:VTdoJaQwQzCQIXiDe53zb/UboRyRD5l4","tlshash":"81c1f66920485c354abaf55a98933ec3b007e833c51940e93b41b79dccd7fd66ab83ad","first_seen":"2024-02-19T23:01:30Z","last_seen":"2026-06-06T14:40:04.51612Z","times_seen":177,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":720,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/selle/2023-12-01/0b121c30-4d55-46df-92cd-e7e79fed7a83.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /selle/2023-12-01/0b121c30-4d55-46df-92cd-e7e79fed7a83.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: oAASdF3JljQcTy/16YXptwSZ5Vf8hD6BHeQNNxD42hMOjNDAj9XwyJiIgiOQjE7Ol6MuyO4UBz7vudyRZyG5+O1tspPX7Uri\r\nx-amz-request-id: X5TER5086K1Y5K91\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Thu, 23 May 2024 01:44:49 GMT\r\nETag: \"097d83a8f1d7e6cddb5185b4a4ba2535\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 268274\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":268274,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 960x1280, components 3","md5":"097d83a8f1d7e6cddb5185b4a4ba2535","sha1":"ab81671e01e6eba67a4a834fa72186151180e0c5","sha256":"0ebd81023c36c931438eae38509e5b57f99193ae7b3441fc53f4001596980a4a","sha512":"c42e6a86e572eda0c00d6aa31142246d151b0e43748c4854f1cee9b6b492a38d5a982b841afde99c97dd641846fdb8333c355929821e5cd41cb4d62829f5c854","ssdeep":"6144:0AX0jPj12+Y21EFnxnB/NZZ85wy7z2pTEabsv:0AX0jb8r2mnxBVZZawy7zoTEabsv","tlshash":"7f44235a4bc2f0a0ee7eb221cc58d94d32c7f8bca05e985917461c6cfac90dc5a5366b","first_seen":"2024-05-25T22:56:10Z","last_seen":"2026-07-21T20:31:55.977229Z","times_seen":951,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":168,"dns":0,"connect":0,"send":0,"wait":111,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-4c0f0b53.7da50378.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:33.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-4c0f0b53.7da50378.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:34 GMT\r\ncontent-type: text/css\r\npriority: u=4,i=?0\r\netag: W/\"971-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qWk%2FRyrHIjTSQBeqyhau7pFr3g5OdzPmpdC7f3DL2i9yae6yQbDEqFJV5ewGP%2BI8dSMH%2FwQs94QZ2YmQs9RkswEwEawYMadJ%2FePiKKZ2pfhWY6TBciWnyjsLrfqUUVwwAmo%3D\"}]}\r\ncf-ray: 9fcf16204963b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":971,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (971), with no line terminators","md5":"364b94b45eaf72b8e38bf5dc4b2348f9","sha1":"869691808bc786803fba4730ffaecb8c2c95a975","sha256":"2da93f714bc866a0e4f302d78c7e5d14d291c27551b29d27969cb57089a191d4","sha512":"a33a5504a3284c5c20c32c7385f61833fada6b1d13e575231c0153a9fdf87d61b7a62caf829e6a22187ec6c8699b87ed13dec945c814e12be7034015716509a0","ssdeep":"","tlshash":"ca119bf151081435b867f26475d055fe316ef343a233446daea4b3a6ce93a9b12212ce","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-06T14:40:04.434707Z","times_seen":7560,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":676,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-6f6da97b.ba19ca45.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:34.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-6f6da97b.ba19ca45.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:34 GMT\r\ncontent-type: text/css\r\npriority: u=4,i=?0\r\netag: W/\"922-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=81DaZMchcYRLbn3v9sTbc4kF2zIQD75q1CpnwdQn4rAKbxaqGTsmnTxwQoLpsq0v0v3LOHxZozUsL0UXkur5JY3pqV2TeCg5GkamQ1Hnp4SVqlMOmpjn7lhac5bjShwupV0%3D\"}]}\r\ncf-ray: 9fcf16234979b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":922,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (922), with no line terminators","md5":"3701036a35bcea856e89f00d36781e8f","sha1":"b63d63b209ccc2d1402c31a15d1d83edfe17d7c9","sha256":"a1e235f84b6314672b83a7044c2002663ee3a911f57b6d40232c5a0677b4bc32","sha512":"704ff416fa3d339a2677f78c0648d1991b282fd126cf410e760f7268dcdcadd45e77cc9fddd37352fbd6bfec16b25b97fa60c12c3a07bff3d1bca84c13f91903","ssdeep":"","tlshash":"04119e73a125d932e9332d77674494def19188e2e6428739bee7690cc08eb539621304","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-06T14:40:04.321503Z","times_seen":2105,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-7ad50525.45f75ffc.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:34.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-7ad50525.45f75ffc.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:35 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"4759-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YVEIdYLqtbsdXws7LMJANqCGiebznc4aB7JSmBRnZbEbEPAhra865Ti2HesqwQW31U20783A6S2novi9B0xKACGJTUVahTh9H3hpAqQSCV029Gm5Kl%2FaJ8NFWS6crfYx%2FHw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf16250987b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4759,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4759), with no line terminators","md5":"50b67c1e36297b1843f24dadece451cb","sha1":"aab4395d6d74d3e50d7016a544f7709a601343a2","sha256":"6310619d584f66c72ad89a3e491fcd0100f459bbb6c9d49d92843f464fcf51d5","sha512":"4dfc42a95a7a19d045ca233519f6f1c6fbd5446b344a059b1a5f691e916a5191b0121a7ba61619722cb7989a175982917bdf4e6359cfa4920d9f1e4b3ae2f29b","ssdeep":"96:2oxsUQOwXVcjglPJiA8J+eCkGCaCR4CRjpClCucCOCTpCHC9C3C9CtACbCUCtCcJ:2oxsUQOwXVcjQPJiA80eCkGCaCqCTClX","tlshash":"35a11297311f133d68b7e1571981a86d7878efc2c1322211fc27aa18c8db6977a3724d","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.336196Z","times_seen":5412,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":718,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-2d0daea6.7dc15874.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:36.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-2d0daea6.7dc15874.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:36 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"89104-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qf2cSoP2%2B4XfxVDeRdTcpM%2Fk4qRFy9qnE7HyxifFUqfKJFC%2Fbo5fpWYm86yRpPbGZS5PRe7fAbZY8N3mPTmGKEmJHBh%2Be%2FQGIorkMpMcNwknzQ27lBeXtRokZvGZR6PAL7s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf162f69c5b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89104,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54758)","md5":"64fd3bd032d776ea4973fc22409c4943","sha1":"f0390cc463b3bc5e9616933f1c46a0731fc67798","sha256":"53e06698cba5db96fa5574765ab68e2f1d31d6752e19ada8e905269b1d23f70a","sha512":"1da51fd74c1855a318d9bb770cebdf6cabcd67a7c3092b26eecdacc05a3b02251dc6dc5626c4e40b6e791dad72d2f88614eb10cc34906e8af837d8bd14ac39e3","ssdeep":"1536:KVpb5uz9we4EPsStPHXannPzQY2Y2eN8ce9PNoZAlE2f:KJ3qHrY2g+ce9PNo2lx","tlshash":"18931a88f2d5b17603a355e0442f140bf176a929a84988a8f734d4e1bdf4ecea47bf74","first_seen":"2024-04-14T17:36:32Z","last_seen":"2026-06-06T14:40:04.332698Z","times_seen":639,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-2d216070.6f18bc8a.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:36.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-2d216070.6f18bc8a.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:37 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\netag: W/\"371-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U39ruE44A431bUpLrffF9hQmr6OVhidfQOlZA1Z7xxEgnTEHRdgFnJRVKWWfM7HYw8I2ljzHzylhWbt5Bb4kKFJx8%2FgMt5ikcy5spLerJKRpalkmbvM0AWLLSybOniJlQ0Y%3D\"}]}\r\ncf-ray: 9fcf1630d9c8b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":371,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (371), with no line terminators","md5":"7669c29098998eb84edefdc24294f960","sha1":"26cc7266d1f0c666a252628498f3ec292234f1a3","sha256":"df12a06d14739404cd7eb88cb43de5628268cd5bfd982ae24001ea699ce071aa","sha512":"3f6a111ca2b6b22d451f182f47878fd9302c9bae2528d2829c55f1e9752a51b6cc87a4ee17c63ad2908aa2c08d9191435d162f160c77ac8c8516d87cbbd4a550","ssdeep":"","tlshash":"a3e0c07820537ebc435c30ce227f5593c85b1c090ed754e12ed0c499a27561f4520b99","first_seen":"2024-09-28T07:44:49.473991Z","last_seen":"2026-06-06T14:40:04.509104Z","times_seen":152,"resource_available":false,"data":null}},"time_used":723,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":721,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-3fe0aac0.43d82c52.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:37.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-3fe0aac0.43d82c52.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:37 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"3421-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YvkfUel6f4VR644rlkwFNdPJySScgdAHwQvL7fvaZJcJTecR9XHzF%2F3o0Ypcd0Aw0EnkIr1gZzzOVaUQfr1pMNHBSiB6MwpMziV%2FnJM7izS41IIgmf4FcVC%2F%2FQHFPFNZJc4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf163649deb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3421,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3421), with no line terminators","md5":"b91061303183079af6d1c176a51454f5","sha1":"873ff083b0a3d3265bdd9344f2726ba96ccc6a55","sha256":"f21c36c73bec53215b9e2811f1eb4079300991a73742a0910a7a957a63d22f4d","sha512":"0d03e4c1381a14a079356c05497fb5deda4426490ce6bab984504220da2cd46fa0f28b87131d081fcd1c7489769584d5aed8159f7670a9f6c6c8d0a3eb2caeb7","ssdeep":"","tlshash":"1d61520d9443787eac6e4016b11979a8a0722fe6c841c4e7fa3ccda993d0d74332e7e9","first_seen":"2025-04-08T10:46:39.897425Z","last_seen":"2026-06-06T14:40:04.447253Z","times_seen":153,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-47e41fee.4525c280.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:37.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-47e41fee.4525c280.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:37 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"8030-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tt4Zlj6FSbcUB7B9k5h4KXnkoJ3Ky4gg%2Bl3j%2FIexqmA31DEqikpU6qmlpkxsB%2B5z3uYVRMSNBhnft9k68htdrH%2FXqxKVIBDn5N36to5zgvMxvZfrGNLxVMTDkR2FiYfcjWY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1636d9e0b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8030,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8006), with no line terminators","md5":"66cf19031fe0c0fcd0226b1671a867d5","sha1":"67dcb3513c892f9218a1b9b368b6d919c422366b","sha256":"318485b99afdc47b5bd8baf7525475544a79876e235d5b3b96b341953538f717","sha512":"2e8c9e1bc17dd77ce2663bcd200b16be93e9c7d605c8f2be562338429929d01e7a2406cfda4e2cab0953d22832f1c0c7965adc43e1023f172c698d89abbe1224","ssdeep":"96:sZdoIsZ5c9nl0UxLenJbGpiel4jEiq15zRbWVNifXZsSLyYiGcMpzqZG/zMQEUKN:4je5cFLeJbu5BfzAV6qgqIwhXC3b3k","tlshash":"59f1e845900178a4cf6f5181601a7bb8a4a53de1e806dc9ff7b8dcec91e9a66320f33d","first_seen":"2025-04-08T11:27:57.680869Z","last_seen":"2026-06-06T14:40:04.374965Z","times_seen":96,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/fonts/iconfont.0080bb9b.woff2","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:27.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /fonts/iconfont.0080bb9b.woff2 HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mkwhcsq.com/css/app.ff94b4c1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 5212\r\netag: W/\"5212-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dtTmnyychc7rD5miGNRAWXbIt1I5U5l%2F4DncErF59V6zwPbQRBGkvU0N8hotHuiD5ewVmxVcT4DZQC5TLDSiWqblH0VoUGJggiwQp5zT6eGLMUoUNDBmEP1J1VnG%2FdrErg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fcf15fb58b3b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5212,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5212, version 1.0","md5":"0080bb9b021fc0823608910adc2e5fdb","sha1":"b03c86fc4fb5e0542122925d2eb2468cdc842dd3","sha256":"a72e9b48fd851011d2e52a77ae7f72b6de42e4647182c7bae3ca49edf3347af4","sha512":"aa68b80986d5ebce07a92a36839e2b7f4365932ac12c992864ebb4a4e49ab9964e39464d9da1b79a0f963947a669176c3f65b23ef4e4203e520a790bfe6b0756","ssdeep":"96:vSvxwJyBbfhD1WrBqAFtlzkqV4tQWGRGQX/rZHhxm9Sy4kUf6:vS5H1p4FtlwqV4tOGQXtBxm9SpkUi","tlshash":"94b18f888c661528cf387a353840367dc9a3130db636e49acae41f1b57ab78a0159761","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-07-21T20:31:56.037751Z","times_seen":8133,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":735,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/e1158c3f-a786-4374-aab7-3f4dac76589d.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/e1158c3f-a786-4374-aab7-3f4dac76589d.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9egaXSHANtrVnj0J4p4jkMfrLNlMqLxDWBZgG4h9nvbXV1zE1p/cg8x9wcR/AjAPyfwqh1fA0DB95W7Ev6/h5RwGHIkLeAnp\r\nx-amz-request-id: 49W9ZE31HJMZBXKH\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"dbb5460537325e381060d6a696bdabba\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 66319\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":66319,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"dbb5460537325e381060d6a696bdabba","sha1":"852c6ea174a0fcdd7e7351b5bc5c1ddc309d87a1","sha256":"3ff029feb7f2d1b0a7bffa8d5060030474f569524abd014585f373a17fc09695","sha512":"404f949ebbad69f94ae8b173c2c1d8807599df69c51675e3b0e06bc0953f94f95a51914abd77bf684dc3c5ff42249defe6152bf148f4aa8c1515fb8d29879374","ssdeep":"1536:Gi+tPxNX6ucnz4Zw7vPYpNuirA5gmQGo1CISuKbKNiI:F+tHKucnz4Zw7vPYxUpPHIS7KNh","tlshash":"cc53d0a31a450fd35629e3e67f0799284fc65b8d94e039ee11d358e37ba13b3680e11e","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-07-19T06:15:01.477612Z","times_seen":9910,"resource_available":false,"data":null}},"time_used":938,"timings":{"blocked":728,"dns":0,"connect":0,"send":0,"wait":121,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-11-01/b1365176-2126-4b52-893a-d823ba7fa752.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-11-01/b1365176-2126-4b52-893a-d823ba7fa752.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 5/E9wY/9ZalASHKzU36IduiL/YWF7N0WiMqcvZjLEsJ8tgGKtx7JDmLqnL4eSGqS4dhJl6YO69FgHUYX8vUOAeaBzKOiXlLt\r\nx-amz-request-id: X5TEKDVW971P1JNM\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:36 GMT\r\nETag: \"57fc8f526d4275ea03d2bdbdc5576892\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 170933\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":170933,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"57fc8f526d4275ea03d2bdbdc5576892","sha1":"648d7e45b5f40cefb1d18bb9c726fa2194627313","sha256":"5b08dd67e7ff0eb29804f686a825a0607fcfad5e509780a30adfea265bc26d6d","sha512":"046bbf2c489dd817458bb078c2a21eee87949f983e0924087800414acb782c41e1e777873e9bf43ad90c456a764044b9a142646b88ca61a2589c90e0a31b860b","ssdeep":"3072:uZZZCa4TScGLIk8FhGOovWdjezklGcjjltrXy2zm423z7LOOCAr:u3knH9GOusjezklGGltri2zm3fLNr","tlshash":"a1f31238ed7ef755a4fad15f910cada0a0f877204832a5813e37d7d437c98a192eb249","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-16T09:25:40.650815Z","times_seen":2495,"resource_available":false,"data":null}},"time_used":1107,"timings":{"blocked":900,"dns":0,"connect":0,"send":0,"wait":110,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/20a7dcb0-4ecb-43d4-bfe4-e7b16a8d6d70.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/20a7dcb0-4ecb-43d4-bfe4-e7b16a8d6d70.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: GdGn3LiKD3PDzErelm554hmCgZ3WAyzgta+gmribxi+YAfKlxSTzga4f/GTdALayJe9EUwMYIKDBkUTR8r2z1L3spMYs+rR0\r\nx-amz-request-id: 49WB7M7A6RR1VE9B\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:47:36 GMT\r\nETag: \"0cb226a4c24b62a8027c524333a66d1a\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 9972\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":9972,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x1500, components 3","md5":"0cb226a4c24b62a8027c524333a66d1a","sha1":"bcd930afabd37e41dbff70ff18d3164036810ea3","sha256":"cae70bc988ba3c3472e4161ca54422d0e54923f5b26ee7e7e34716c90c97c2aa","sha512":"0182b799ed0ad9230c5713f54e77dec912e6873d55c491d41e30db98575b93ece455e58effcf4b52a2f1e5ec5638fa27ac16d8319119f1aa3ff0f1fce499789f","ssdeep":"192:1I49RvIJWdElnZFHjjtCcYjtGDCRxXEZJHMcf:1IKRvAZFDj0cOt4CR9EZJf","tlshash":"3f221ae391d3585f9838efdb9b5886e7d82ac355df6a3102204b030677e9f50ce3945a","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-07-20T07:32:07.977026Z","times_seen":2509,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":186,"dns":1,"connect":93,"send":0,"wait":119,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/9a07eb15-3e3e-4285-afcd-0ef02390fff7.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:29.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/9a07eb15-3e3e-4285-afcd-0ef02390fff7.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: yf3iK1GwfKMg2MwGVANmbIuVzKQvKfnvHq4W7Or1M7OZVnpEcraX1+d9kwTZic7APj7vTH+cw/m41vgx8SzSx0ONNZfSgKFd\r\nx-amz-request-id: X5T4634D4QHS51DP\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:52:01 GMT\r\nETag: \"3e5e5f4087f7697ca2dd2bc01538d329\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 88320\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":88320,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1490x1185, components 3","md5":"3e5e5f4087f7697ca2dd2bc01538d329","sha1":"4ec9ebd1d163bf76f62864b739d546dcafa7b53a","sha256":"5fb4ebb4da32a598d63904bc43852698b9a685d93bfc6b818b714c92b12c2170","sha512":"20e57d558b810baf1df1ea6425bbda98ed2bff02f4f5de3cf02fad66224fdcf845c0db8def08e71f6ad262dd5ac94b111e366f331004d124f51c1beb84d7e0f6","ssdeep":"1536:yCAZVJzfMpCqlO6krVUgfR+Gb8p7H5ygAxp0qv8/gMrmchSl2bdHgenU+i:yCUVBfaCqlt6Ug5+oiz8gAxS+lchSEdC","tlshash":"8883028a4f766997d3a82c732616d7efb6e47736f64906c642828db43033c01325a76e","first_seen":"2025-07-06T15:13:24.720676Z","last_seen":"2026-07-06T17:24:36.870398Z","times_seen":7,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":384,"dns":0,"connect":0,"send":0,"wait":115,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-6140a976.2a03d5d6.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:37.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-6140a976.2a03d5d6.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:37 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"9708-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TqohbCB%2F1TVilK0aKH2pHRTaqEN0AI%2FmkNzO3PGsEcApReRTgokGey3KuX%2BMKwxcIKZ3lrRphlxlFIEaRy3B8NYaVthkm%2F61R8RKEJ0aN2jNLMsC90C5jSesLsQSl4oTaOA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf163709e3b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9708,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9674), with no line terminators","md5":"f43a113153ccd5bfe841fbac87f747cc","sha1":"0abdb9d883fa8ca19bc2a66c5289912e4ca08835","sha256":"68d94d02fd5941d400bba0b721b47689397757812d2eef4f61ebbb2d0b33c355","sha512":"2f41b7be730abda76186993a6bbdc7c119f99b21a8cbc5d4df28c42cf03090ed7b70884f352cf75c15a6c0539916dc9ec1fa755b2b651aeb5c61409ff2fcfe3a","ssdeep":"192:KDREKpbpvwCW5acMPcPL6VHPqRLp5Zt09iI6KKo:Ktjpbpv45RsHy9F6kno","tlshash":"c112d98dbb92f8ae8b6761d4716fb417f19626107c0d12d2e2788cf63a68c1c6253736","first_seen":"2025-04-08T10:46:39.892489Z","last_seen":"2026-06-06T14:40:04.37243Z","times_seen":153,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":719,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-758a1bbc.903c7c6f.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:37.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-758a1bbc.903c7c6f.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"59863-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kl54DzQsJ2JGOjle8uJ%2FGEfZzDtBfan4p1qjOgKAQonBtCd%2F9pPwe%2BQhcel07chCV2%2BXcg7cDHm9dP%2FWzpquqMixDEcvsj8dMB3nhvrXPz9Bu1Eom05nTLPzZmwIS7bi%2BSM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf163b49f3b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59863,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (59863), with no line terminators","md5":"c024624a2623578b81a4eb0cf8fd29ae","sha1":"eca0a1f9be31b28d1909d1a7b0845fe10a63fab4","sha256":"1c51bec7c4da46240530912c798587b226cfe8874a089217bc893e91cee4e1f3","sha512":"04c3cf7d1806bb40caed82405d77b51b53f6fc14499e726faff489092d3d94df676f417ef7dfcccef5e76ad21bfbe1ea0e0415f486f64f697120c06bd8c1e81f","ssdeep":"1536:EiLFJc8jJyHnJWwOOYvpRyhAe3+afqtls6rpDZPUSRQWaM:JdUHnJWSiw+rlJNDZPFyM","tlshash":"ac43e126a0e394969f678091930b7c5c8c124befd1dbc586bb78bd51cc98ef9262707c","first_seen":"2026-05-17T02:11:28.746009Z","last_seen":"2026-05-31T13:48:58.250369Z","times_seen":4,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-7829c5cc.1001dc9c.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:38.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-7829c5cc.1001dc9c.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"9702-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jdC1pCVU49V99a6vaekfNuEhxjcbc7sOXZHBiG163Xh0VXA7NB3KoCeUspumOHzoM%2BTnxpHx38f81BoXw%2FpO8KQMXsJW2H6zU4eCzefKvQq%2Bt7fyKXXtkLZ%2F%2FOPzxQQBqq0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf163b99f4b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9702,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9552), with no line terminators","md5":"c572811c027ef8b8b559a4ccd33f77f6","sha1":"82eef2523734ba1db4572c79b76e24e6118021ea","sha256":"76ac7efd28f4eb61fe7446791e250dd0cfa5030443a26e6da04d35ca3cbf4fcf","sha512":"5967c640c9c0f4d1a40bd4193e44a092bc264cb99815840e29cbd82d163640d51d220c8e51d71939c28de852fbf74664b7105be8afceb9e0b0784f2d2ce7139e","ssdeep":"96:Z7HSwIt2klMoS6UDERryOur95qpOVMbRn/X61kFGZFSho0dvZTxQ4fApxYD+Q:csqpEERr5up55VMbh/YkFGZFSrdvr7Mi","tlshash":"9c12f98dba51f8de076760da706fb016f29212657c0d1592f2b688f739add1c232372a","first_seen":"2025-04-08T10:46:39.914891Z","last_seen":"2026-06-06T14:40:04.356635Z","times_seen":151,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":720,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/app.ff94b4c1.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:23.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/app.ff94b4c1.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:24 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"237339-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ol31dabJXYWurBVmhyLM02QF2lEvMuTFrQ2BwFG0YErfe8ayYxRnsxFP3HxbcDPn7k6V3um88AU8O406q%2FJxwwCtGEZrPvBbWBhq46PsFlfImtkOPT6Q5iY4TX9Qk9u5O00%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15e16fc4b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":237339,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5ded07875f5dea2fafca7e6e825a3273","sha1":"05bc013715834f0ed81d3fadb960996598659bff","sha256":"2b66cb790e3a4f7b876922f7724d7d198ba880d76f4810fe3a978011c9475ca4","sha512":"859d629f11cdc1fbe6d5a906acf6f6636fdfbc42cbfff29efe20eede9df11c1917d57d2c298b0055bc9e7ae40d7da48c1ff665ae72ad2ed4232f0f297d91a9e0","ssdeep":"1536:XSdgXC6l3028Y7SrW3YeWXA1u9w4HCe/l4RdgW9cMEcWAp7KO6iZkJgYu8e0r8k0:PdFJWTPL4Q+05q2pe","tlshash":"8934b610db17217b222be66d75c0ba886f28c323d9725b7bfd95741ccae64891163e0f","first_seen":"2026-05-17T02:11:28.748954Z","last_seen":"2026-05-31T13:48:58.288259Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":970,"receive":237,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/d29f0843-33ad-4b3f-8a90-b56fc21b0e77.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/d29f0843-33ad-4b3f-8a90-b56fc21b0e77.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: UG4lfvvo5iMcxC8FvK2DZ1hD/n1f1RIzkK35FzT8T25iAUB5ow+VWheeR4hE3waHGUQHZ4mk2Ub8AaA0560XzLjxp/QoJNe1\r\nx-amz-request-id: 49W8MJ4F20D1DSRW\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"6a85f34af56b3c034d5137d4ec807895\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 49034\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":49034,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"6a85f34af56b3c034d5137d4ec807895","sha1":"75fd4cec7f44e8b8f20655dfdb165720d7223bd6","sha256":"67488643bc9d3ae11bd5cababff694c1f7a131c289d81eb79e25576f78dd4fa8","sha512":"d827fa0cf605ede5b060c72333d4552c1a930b0d8eec8052ba78949ea5e54a58bf0addbef05e024159a196589abbadef866f8c4d5f3c34722ebe1d9757563f9c","ssdeep":"768:G6O88eZQudaEcS6tJCXfvmmxmxwc3ndr/8wP/x49gE3bjt1Txv7ZJ:G6OYAESJCnm2IF3t/8wB49giPdFJ","tlshash":"5523e18725805ee3352fe3f6ff065ae80f088f64d1263edb21e54f98b312a238595428","first_seen":"2023-11-07T02:37:44Z","last_seen":"2026-07-20T07:32:07.902779Z","times_seen":10040,"resource_available":false,"data":null}},"time_used":911,"timings":{"blocked":699,"dns":0,"connect":0,"send":0,"wait":118,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-3a3912c7.b488a9b3.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:33.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-3a3912c7.b488a9b3.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:33 GMT\r\ncontent-type: text/css\r\npriority: u=4,i=?0\r\netag: W/\"455-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2DYGVfnmNw2WNU%2FGrzLMZ7heu6N4YRGzuKtrgoUjgpEaNHyJrGlXUSbSAz1gdmECjokXzZTcC4atYdcPO1%2BA2C80ax0TVWfAZYMEIQeVfAo%2Fef150mq9NVqzi%2FGksmY0vYo%3D\"}]}\r\ncf-ray: 9fcf161ec959b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":455,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (455), with no line terminators","md5":"349139296c5738f2fbacd031343b6bff","sha1":"db2e6346f94985d180c7081db376465748e60841","sha256":"d7ce0fa60daadd138b9d842897feceaba382258f85832df2680ce83f43f0cf4d","sha512":"066cef44f8abb789338e33e9adfa7983344be69f276be860abeac2f458d3993eb3e6180547d19487e037f186631c9477d0cbe3c907371d9facfea31cbbf86fd0","ssdeep":"","tlshash":"ddf05c562b1a61baf8f3c02f20420aeb7117cb4f531bc07957a2e631c947a8b6f71460","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-06T14:40:04.480411Z","times_seen":2110,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-8574639a.7840c12a.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:34.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-8574639a.7840c12a.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:35 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"1392-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ytmBHRzgmlVJ%2F6xTftutZdHrD2u%2FGHschHyqXq%2FbsegQsFL8GgIQFNl1%2BViT5WHAGRpTUuteUWmu%2B%2FIyf%2FOG4qBDoUyKY4n5UJhi41Oad94D%2BkRIyo49x%2BRWz17FXE7hWjg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1627d999b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1392,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1392), with no line terminators","md5":"eddc635fcf3cb8f345a6c8bbcc9b6036","sha1":"7a3f2d798cb53dffe7cf6c52e071c865d5523bf9","sha256":"e77e73c25992fab28ae631f7d15520056b9106d43b95f0e07d73c49f5b89d984","sha512":"43c604de6411e0e4f6bc49e2bbd34338ebbb33d4b57be4b8f6707e35c5f31ec387c53308175d54075b64d61c6f10261c1b2ed4b4bda60af37255c2887cd02fdf","ssdeep":"","tlshash":"dc21f4f86136523660f3b437286142e67aa8faef51e1a10d6e8a504c9467f025f33c46","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-06T14:40:04.483586Z","times_seen":1365,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-f12f1418.190a6d02.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:35.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-f12f1418.190a6d02.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:35 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"5629-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2Fq5ISvNivLsRszS2pq86g2iix84%2FULQwjtbA7icNMNxExGY0XFiNnalMZN%2FLPyvSMYZs3aZnFhwgOt7au%2B%2Fw8J1FbPtpEdC%2BzbfwEjKIuldp%2F4HKzkVI7oSzN2b5uAbbV0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf162c69b5b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5629,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5629), with no line terminators","md5":"87bcaba95fd3b86a38d6208dbc93b658","sha1":"58d58c63dd9dc96e89cc040839a7c108ab2c04bb","sha256":"e2a324832d33c0bd9e3ec1123e5e8096ba0c745821d60056456f67298d4970a1","sha512":"c125c6410b061f56fa109edf7e7a2a29aefa2aa2f8b6b0a8e89c343f1327faa696301f7e10165b1bf0e78e539f8f1091d21c5b95d24d4bd295897c543bdd1476","ssdeep":"96:GXzpE85mAIJ75iEOOOOOOOOOOOoMSh53zb7DHHnUboUINlSzNDYcIGlwNqftSiYo:IzCQIXiDe53zb/UboRyRD5liqF6+lluQ","tlshash":"d4c15b59e53990297c2114b7b1811cc2bc25c82ae65e45b2b756bb18c8c34e32b3d79d","first_seen":"2024-04-14T17:36:32Z","last_seen":"2026-06-06T14:40:04.505636Z","times_seen":345,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-17508bb2.6a745edc.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:35.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-17508bb2.6a745edc.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:36 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\netag: W/\"828-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2B8HrXCMdUJjRWxOR3qx1hOnr4bwHi6wZeJPG37b3xgc%2FYiKaOJ4k7d1bi4bQlC5ZoPEg2zx4CP2VC%2FBWEllx0DJgvQRGF4gOM6L%2FGOF9RbD1F5pHFsyAUqkTrFrHYGzcsM%3D\"}]}\r\ncf-ray: 9fcf162de9bfb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":828,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (828), with no line terminators","md5":"cc63af8d654f64e08fcd420dbab2392f","sha1":"283fdf51eb68d372d5781b1894cf1ceb9a4d4646","sha256":"4a555d60677d67f70d34c369fc938f9ed1601a9c90b55ca903617abc26c5bfdc","sha512":"90d5a52ef4cc55039dc03300cdd5afe52b59306d50ac98a31e5d579171d2cfef4c75d086189467abe778d9854a1a5db9ce2fd6836f86c0cbaa7df69d4de59f36","ssdeep":"","tlshash":"3a01af5c79e1f05b090678f4802f95d6612b28bd0deeb813eaf090d41e3086e513ae8c","first_seen":"2025-04-08T11:27:57.661421Z","last_seen":"2026-06-06T14:40:04.506222Z","times_seen":98,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":712,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-2fdca798.3ea25d6b.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:36.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-2fdca798.3ea25d6b.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:37 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"21077-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2Fvg3dxOidSPUM18SXBnI1FrPKJnJDeaAkL8hCi6HuUOUN3Zs09QOOIWLZDD2dgy%2B%2Bl7AP%2F%2FB1lpbtiBjWQpI%2BOkx6oQJy0YfpJkkAQJNTMAVcAt0SNCOjUZRPkyoMZBZak%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf163289d1b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21077,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21019), with no line terminators","md5":"533f9dcf216a1961abdbbb2f120d4ea7","sha1":"da38cf77b33e21e549c166b0dad6ef5842a187d3","sha256":"b0e5b368d882a98d2a7d6b8274fca446d1761bfd319d04cf0c1ab039eae9c8d2","sha512":"fdb780145ce418eb73eeb13bf9fda1a1846489020970ab18c1884db9beab818e2595b3d02d7d1455d22fe730445c90b6b9706d9ba8e747556ac3728bd0967fa5","ssdeep":"384:Fy6sASXL78r+DXbyuetIAwXs3iX775b/2MnnVbk7wK6ENN:S77m+D3eOrdb/2MnVbk7wK3","tlshash":"b992c88ae072a8fc855b6261351ab3b4b6712b94a040d459fa3cdcbc25d9d64333fb7c","first_seen":"2026-05-17T02:11:28.756397Z","last_seen":"2026-05-31T13:48:58.209073Z","times_seen":4,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-8501b9c2.42c4b419.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:38.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-8501b9c2.42c4b419.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"15251-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M79PQJKGuoQrlx9ROQQHmWIeZoCoMdeOE17UfLWUmz%2Fzff7rs04q1fmRr%2FyJ4aOT46kmykvvhmHU43Wri%2BUHUNnjNgaRa%2FAWYVwkbmGZ8zS0uhAuyltiNJ2Tg%2Fjs0dL6QHw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf163d69fcb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15251,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15221), with no line terminators","md5":"ec24e9293ae90f5c7b0fb7e96d9af7c8","sha1":"1ccf9c0ee5087b726a206ee9ca9a35086fe6c453","sha256":"2cf25f44b3a8651ff3ff19e921bb0ca98095656c9e8d55fba734cfb230e39ed5","sha512":"816b79bdabcd9498ad488721d2e0f41f573fb4b046beea15b33eb2361051e8c1e40f2b24d2c69306c5fa9fe29e91f6ac0875897f6cb533375a86782272598b06","ssdeep":"384:XX12CRrgwJ3INfAKA5kzqXbFk56MoswPW:XX12CRVIOk5iW","tlshash":"d96218122185b44e9b7641b2316621a1716639c6d40df0abb778edfe32d9c18372fb2f","first_seen":"2026-05-17T02:11:28.759568Z","last_seen":"2026-05-31T13:48:58.330828Z","times_seen":4,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-79bc161e.c3acef98.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:26.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-79bc161e.c3acef98.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:27 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"6834-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9cti8cxUIsI9Rllcw%2FtKnh08lry20M7mnsTsOPPveMkj9wXItFDIlGuznGmN3mEiltjJKs6P849Y%2BaPvrKiIH5NEv9%2FjjRiz9odoLdS87UlITljwDb6K2j8nei0m5dgcogI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15f4685ab4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6834,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6834), with no line terminators","md5":"f7b1de25905c81c373dba149d03c31f9","sha1":"862e37406535632dfb53a15f6a89c16efb3c94df","sha256":"e75dbd8d3fa49fec96c2b893018aed78a616974cb812b015636553d832881751","sha512":"5a2f0034e39196a38ce44b9d9cc46301069bf252b4f092c46db65bcd45a55ed05a6b53bc8241f14a5f5390b530394bcfb0ffea60b21c9262d0b669e07fd1707d","ssdeep":"96:Zsivfdy8lOFD1vq80WV/LPxDmvo6SOwUu50NJj9MC2:Zz33lSD1v30I/LPxDWrhxuuz+","tlshash":"56e10ff2f231112f7426953be18389e8bc86b10dd3ffc656ff84b514daa9182063518e","first_seen":"2024-03-24T18:07:06Z","last_seen":"2026-07-20T07:32:07.99824Z","times_seen":2020,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":712,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/img/argos.72fd36f0.png","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:27.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /img/argos.72fd36f0.png HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"14021-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fy7nudaR8h%2BfW2dfFbp8ADdGnHG2qs23BMTrprNSuYquRJILso8HaQx%2BY5ep2lPUFLyOKLU77C9qPiaaKd8UldGwv%2FHFbOS841E2CY2Ga%2FjUVKAapgk96kiKxEUJ4IfCibM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15fb28abb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14021,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"72fd36f0d2f325647f3117410aec1dd6","sha1":"7ee804c2afef0256e666952f16239780acc8de61","sha256":"c3041ec54bc45f4d7ac030cf08264a14272459bc059ad82c7e8bf501ee96e9b4","sha512":"1288bf9bb3ef598d80744253b06416d96a58aa89d2be7102dcec88c21f1a8fa36fd72ab9040f27bcaf2f24d1fea44c56ed857493834f5f1581c21883041ad6cd","ssdeep":"384:7T3q3eRuJHzW+tRWfF/Kc2hNCzP13TDTv2VOu68CAvkfChP3b:7TDSqec4hGNDfv2Vr6Csqb","tlshash":"99529d91c740f5f9db8406f629001bb133b62573ba3b2a75b6bb84541d7a7a87304fca","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-06T17:43:37.918653Z","times_seen":2046,"resource_available":false,"data":null}},"time_used":995,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":995,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:27.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e1V%2FvMMnpKsQGnJccponGlQEOOI0aJYdf0H5TtYESOj3p9mvzOtxa3W4FnclsoeVTSLyg4z4IsVNOqxsWuGYTWaobRZquh7LqevfN%2BykVzikLzzMi81RdXJHK7H%2F%2B%2BXGcgU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15fc18c8b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"87f201052e0dc6c3b8a4a53b83bf44b5","sha1":"f6b152fa79c655449e9e938e4417a5676a2e06da","sha256":"fb522b0841e80aac3e1cb4fe0f613ae4bfd87fcbe1c03d0137e5c10fbdb86cf4","sha512":"8f854611a22d0fe5ab058bb7ae25c79e995dcc20396f0e64e68aea6662f71cd4144e3378ca1d648d4e3785d96bdb9522864359c14da34c69bbcbceb0bd412777","ssdeep":"","tlshash":"8aa00200146d582b0ca364896c6d39548a5e615348d09f246f99a66440de56d1004429","first_seen":"2023-12-01T19:12:11Z","last_seen":"2026-07-21T20:31:55.967677Z","times_seen":6195,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/img/right6.d31ff0c9.jpeg","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /img/right6.d31ff0c9.jpeg HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:29 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"5088-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7uTH36t%2Bj%2BKHWA4RQSQV2EJEglVhh0rY1mbbTwcmmAAga35HM1HXjKsxI307kP4D6fQG47l5N1uTNnEg7WFCNXnEUV7q%2FAMC3ZojGcY0%2BLbgQ1HdGPLfT9Oy7z8tGvItro%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1602b8e1b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5088,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"d31ff0c92e1350ed230b476c5a6abe57","sha1":"f522efafd87db548b2668b87aba1275611d020ab","sha256":"e751d8d2c37716c80619a6134d0e39db5b9fc5584cc790f28760e8cccad3ea23","sha512":"e8a0c93d1ea07f200b6df3d93b57c80597cfdfa78e66e1ebea084b50f859d5438f3f7e2d0000727b1d33b080f31d6afdd2fd9c0c0fd61257aee09a076e7fd6d1","ssdeep":"96:Whx3YqBhBnFMEKYhu/hCbjftpvzaHZx+RxXP+1VHaWccmRAi5sx:EZdn2E2+nba5uZ+1VHatN6","tlshash":"c5a15c81f653a917db8292b095a47f100b116c372be277ba9a02581c1887ef21439b96","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-07-16T09:25:40.630021Z","times_seen":416,"resource_available":false,"data":null}},"time_used":707,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":707,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sk-tk-mall.s3.amazonaws.com/selle/2026-05-04/f7104a37-1335-4081-80e9-f3c8740c37d8.jpg","fqdn":"sk-tk-mall.s3.amazonaws.com","domain":"sk-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /selle/2026-05-04/f7104a37-1335-4081-80e9-f3c8740c37d8.jpg HTTP/1.1\r\nHost: sk-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: RhjS4TZqaxWmmn3scngnjMlxHimkfRwhCvyBMU418tyx6tU7P5zFpz72AIxdQfqDks0TuzDlqwVDZ1QW2DCRYILIEzfCtzQ4\r\nx-amz-request-id: S9WPEBX05VVRBVTQ\r\nDate: Sun, 17 May 2026 02:10:32 GMT\r\nLast-Modified: Sun, 03 May 2026 16:26:36 GMT\r\nETag: \"b0adcb170e5a845405335d7d23db5790\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 4394\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4394,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 136x136, components 3","md5":"b0adcb170e5a845405335d7d23db5790","sha1":"8fb47048443093b32cb935179e8c1e5cafa61bcd","sha256":"a82fe057de989368ad64df006af9142d5333dcd8354418d9a79085d4dc5d66d6","sha512":"6127ee61a74a791c58df6f10bb38e91a209597809e58ae42ed0447fa8bca0793dfcf3e19246f95b55387e7b37817588ea881ddf5e508cb9b02fd679094a68f5e","ssdeep":"96:A85Ue74IHYaRRE1rrRp/XHk87ZVY+7d5SfVWW:A85/7PYJ1rz/XBZTHS9H","tlshash":"97914d31d603830aea2234be827107b5d2b53e5d7937cb4a5bc59c12e7396f05e99254","first_seen":"2026-05-17T02:11:28.762538Z","last_seen":"2026-05-31T13:48:58.328193Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2670,"timings":{"blocked":2291,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-eca3e97c.f09689d1.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:35.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-eca3e97c.f09689d1.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:36 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"3625-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2BnHIAZZ4CfR7g2kunYHqIYOqlES6H6nekn28rJlxBYOcxHwuRxdIsr%2FgXV%2FBPaNa19V3mtTcH1XvluXnEsEYuywwF%2BMjkQJRW2Wk8V6bbPpnNEcPhzTTDvyU3CVketje2c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf162b09adb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3625,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3625), with no line terminators","md5":"f1780f9d45f7658d040c38d25eb705a1","sha1":"b819f324b3d0a8530037bb5474799ad57939ea91","sha256":"67041091f6905c2a4d162ea27c32382a85a0519e0b6c9dd7e3fe9e3a2393597c","sha512":"a7f6365c1ed56e22baa5c02f6e0d5336e10db1e34ebf13d65c0b62ef517c8a7b81498c8e2f5a8be34d1df3a8119fa643a2c8b569d04233da739edad49bdea906","ssdeep":"","tlshash":"d4718a117b2922f8e867805e2b56944d3710f10ba26ec8f7eea0d435cee29123b7459a","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-06T14:40:04.365877Z","times_seen":1778,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":689,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-4c0f0b53.41a9073e.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:37.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-4c0f0b53.41a9073e.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"6661-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QVg77V1DA%2F1cMRH8q1G0U5Lwvpq0wapX0OoHoj6xLVU860W0vgDCos1l4F9L09aYs9YiKp45VbdjEYwXgayiZTiyQxhpbL%2Bp5DNdGPCeg3bHubRq79f5XpphweHa9nat6io%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1636e9e1b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6661,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6559), with no line terminators","md5":"952138ac9137e001d2edcf8b59bb9691","sha1":"ea91486e3975bc22bd691fcf0e5229e9292e77f1","sha256":"43c4d94be9ee4723e3c6564be110596b81732a19c493c34ac5cbfb6b5eb4923a","sha512":"035e7893c2bf895feeeae2949ac653cd8fb2b1e275b55474ba43471792c294225d34cb3c5982eabf982e6a13997efd5c384840304fbfe739a474ed083f0cddb6","ssdeep":"96:roVtr/FXl3c1tV+9eXygLnWpZqkIGm6ZriCvWRZr/JGbmQy:kBl3gU9otW25KOHGy","tlshash":"94d1c8196247f95d49678aa0300a3120b0693e98640d949dbbb4def976e4c18337ef7e","first_seen":"2025-04-08T10:46:39.879833Z","last_seen":"2026-06-06T14:40:04.51143Z","times_seen":154,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-6ae12620.c3efea6b.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:37.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-6ae12620.c3efea6b.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"1166-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PdmAVlWxJkTFIeaceBN0hXQW51ePk%2BMiLoxnZKOHkCbkQs%2FLbGZzTnNtY5x3QseCQQQMjG0aAWxhPyYJXZwS13GlCJPMLWol3vHtAsgKwuPPhefJkhcj%2F%2FQT7HDlZ0Shmb8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1637c9e5b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1166,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1158), with no line terminators","md5":"7fa4cd96b5bc592c351a527edd38e792","sha1":"c73963ee8161e1b3effd5ff8adeeda8d942164c2","sha256":"cca744505321410f2255695e6a3e9efcb3a5dd3266740105d4c1fe34e4b0260c","sha512":"253505594c343eb91b3b198567c6aa298383259a75746492bf00097668be5b40f5ff57ab7ee9d055adcea418786515447a261444bb2ea65a56a45652c614925b","ssdeep":"","tlshash":"4221f1136092784d5c6ea540210f2134f4f09de64c1be8e1a778c8f6e2b1daa365f23d","first_seen":"2026-05-17T02:11:28.769546Z","last_seen":"2026-05-31T13:48:58.238292Z","times_seen":4,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":711,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/img/Shopeelogo.def37cde.png","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:27.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /img/Shopeelogo.def37cde.png HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"22324-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ks2mjNG5F0XAdpveQAn3RMxtjIsX4NjlG00XvpTgIxFKtecVttPUs0X%2BWaxJhdsOkufd%2Fb3VPqprRQ9pV7Vjhp%2BCwl3u5OuF5JBc9a5LVj5iu8FwMc6yOlyE96%2Fqod68Ys8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15f9e89fb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22324,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 499 x 499, 8-bit colormap, non-interlaced","md5":"def37cdeb3ea63b6c94d40a15f0cc35b","sha1":"5b5938495737e3489428182f28291068ed2d1c5d","sha256":"03f952aabe78cb14e4df06c0647f0337bfbbdb5a209fac1f30da29ff158dd19a","sha512":"58d6529b5d69c3c5fe36197898891eee9996e6e9dbde1d511ee2eb3d9f3d4b69718f8a3e95c44ba9a81f72714a9207a97206aa9f5d53eaaed80ae2f8340d5d21","ssdeep":"384:caXuwsxKryyNoBR3S5mhuvisa8Su1+AnVO7TEDbJ/6A6DthEotqqLxVoxuC83Qm6:vuykDiU+NaM1WE/0EoWvx","tlshash":"53a2e1ecb1aba7e3c85b10315d971e9cde420092fab0e5875a6be01f021cf15c992e76","first_seen":"2026-05-17T02:11:28.772238Z","last_seen":"2026-05-31T13:48:58.212645Z","times_seen":4,"resource_available":false,"data":null}},"time_used":929,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":929,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pachong/gaoqing/B0C2NJYNDC/81iLF2KjpaL._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.199.85","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pachong/gaoqing/B0C2NJYNDC/81iLF2KjpaL._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: a/CRpqqHd5VbslSPoA5Jm1nMkGzFYnpb7u2WCNI/p/smvT8IUqC30QL4BxrNR9nq1t8sCQt4TQ750hgBCNqIMgWnlEJe9+sX\r\nx-amz-request-id: X5T971WKM7BTZQ4P\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Tue, 21 May 2024 22:48:11 GMT\r\nETag: \"f4e228ea79d5f61e35dfdf7f4372d6ee\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: facf560c237a960113ba5ae48a10500c8ab22becb8c081c50a800dfb0e7018ce\r\nx-amz-meta-s3b-last-modified: 20230419T153435Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 475059\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":475059,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1405x1500, components 3","md5":"f4e228ea79d5f61e35dfdf7f4372d6ee","sha1":"e0441245998fbc35a6bfaa099a9431964b934913","sha256":"facf560c237a960113ba5ae48a10500c8ab22becb8c081c50a800dfb0e7018ce","sha512":"06002e1b7c7e6c0932c5b999a898ba0c07b6791923fa336d995cd5cd00121afa409f2a2838496b4b443a56ebb0d13cd704fb65a055af93b97e74f228354f9897","ssdeep":"12288:FmVbphUmHZeIbqyn52aZ1v8BfUVcir1Ad77E7FhGNE:EBO82azciRAbm","tlshash":"60a423986bcb4447dbb0387147770f4b49f1b4e96481c88fc96af3613f596183e2a6e2","first_seen":"2026-05-17T02:11:28.773995Z","last_seen":"2026-05-31T13:48:58.270402Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1152,"timings":{"blocked":940,"dns":0,"connect":0,"send":0,"wait":107,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B08T21DXZY/618skfgz5NL._AC_UL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B08T21DXZY/618skfgz5NL._AC_UL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: rgC9+WjGIiTIUV159pkITU1g5C3LP8ezW++uWtir5+szArimPvRr9HAAA31hLEe0Db3AliBREVlNDjqFp88vG+YQLhSFc/BN\r\nx-amz-request-id: X5T7H5CRPNE4S4BF\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 04:38:57 GMT\r\nETag: \"ac9b4fcf8d80c0b0d34b3309ac3280c1\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 074f40e8e40f7f6b34af1dc343e4ae875bbada0db9e452a2a6ff05560b8e43c9\r\nx-amz-meta-s3b-last-modified: 20230718T032215Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 104245\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":104245,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1125, components 3","md5":"ac9b4fcf8d80c0b0d34b3309ac3280c1","sha1":"be8551685ae88aceafcba368b20cd98835453096","sha256":"074f40e8e40f7f6b34af1dc343e4ae875bbada0db9e452a2a6ff05560b8e43c9","sha512":"0b1ebaf7a89600ae142ef85c250fd06705f0dc04a0cbae0b29cdf768b234e1c4f5edb13e0fbdd404f2f56d4fba545e33f6fc713f6afa1d092d9970d2e348bfb5","ssdeep":"1536:2eaizqhaKHl+xSmxWqpkf6lnzl618bdFyzjxgFa8jeoY1b1oR+Fasd/eRK:2jitKH0ncDf6Vl8+dQzFqax1b1oRed/1","tlshash":"3fa312f1933ed8e3dba19578953f455a279158cdaf2732c31ba7303229d822b27411be","first_seen":"2024-07-21T11:34:15Z","last_seen":"2026-05-31T13:48:58.347118Z","times_seen":32,"resource_available":false,"data":null}},"time_used":1100,"timings":{"blocked":975,"dns":0,"connect":0,"send":0,"wait":121,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sk-tk-mall.s3.amazonaws.com/selle/2026-05-04/00a0a98c-09c0-45ff-b60d-5a5617965210.jpg","fqdn":"sk-tk-mall.s3.amazonaws.com","domain":"sk-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /selle/2026-05-04/00a0a98c-09c0-45ff-b60d-5a5617965210.jpg HTTP/1.1\r\nHost: sk-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: qJvOFRdwj244BuW4mtMyMTZd6aSb/j6KjkfgygJlvGES0tuo3b6LZML+UpsLYPetSvhHIKg8DPHhwj3hrosJMFY06/VC2jTS\r\nx-amz-request-id: Y6Q5W5NAY3JPQAF9\r\nDate: Sun, 17 May 2026 02:10:31 GMT\r\nLast-Modified: Sun, 03 May 2026 16:46:18 GMT\r\nETag: \"dcd129ed949c47b027b55092ccbb8d23\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 39559\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":39559,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 721x653, components 3","md5":"dcd129ed949c47b027b55092ccbb8d23","sha1":"5f0e6ba45d03c4288ce831a6c0594eba316a6025","sha256":"a3dcc83115fba3adfdab653c3a0b7c9ec951ebf08658fd6c3d5b9339c3df919e","sha512":"b378ee8b425ef8196e82116e026f58dd08ec2fd5223a1f4768021d57da24016c07f92c47d05b74eb0a9e00e81fc6f2a6e0dae99fd6d196dd699df30555ea7e65","ssdeep":"768:FuNOce7vQvJ9GqW/NMDfMrSvqZzSECjkqpW1cVmwJ2Odnk15s0YOW:4NOcVJ9Gq5EgqZzswq41V+k1+0Yz","tlshash":"6303f182b2c506cbe5ea0273cdbd8a28775af673c3c9d2a90d1714bb1a4ecf41d5b490","first_seen":"2026-05-17T02:11:28.777603Z","last_seen":"2026-05-31T13:48:58.231387Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2212,"timings":{"blocked":1841,"dns":0,"connect":0,"send":0,"wait":368,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp910/B09SYYD85R/6164yXhGahL._AC_UL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:29.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp910/B09SYYD85R/6164yXhGahL._AC_UL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: W7eiDVpVa0hns9p3XqyrK6z0DsQL7qdqmKTEkW7c9ptdOtnT9edKoWk3f3Ux1a3QjR26e3XeTNkcttIakUvfydeJYKPY2MN5\r\nx-amz-request-id: X5T7Y7EBWTWZTWPB\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 14:09:22 GMT\r\nETag: \"93146c4c8d491227704586979b423652\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 88427\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":88427,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1279x1500, components 3","md5":"93146c4c8d491227704586979b423652","sha1":"5d52815316c24f80b33d6360c87b72f5a6c89a65","sha256":"b1472757d0c67a28d4de26e87448690822293321fe82a193ffbf5e80403f6328","sha512":"f44e0a6d0037385bbb7bd1fcd4211976d96921c513507b2f3297f5881142c9293bc4c0b1b012aba9bfc41f473a999036a2f05301bb78eadac538bf8ad2804fb7","ssdeep":"1536:OzWJGyJFnfeHwPJvlw13MaseLu36Ta1ZjfZnf13Mb72Qx5BcuU:OAJFnfWwP7wVMPMa1ZZ1c2QTyuU","tlshash":"cd8302ea08240664c36a56b16b9bc015df5cbd1e1d371eb2b8adc712ccbf2a1146a637","first_seen":"2026-05-17T02:11:28.780978Z","last_seen":"2026-05-31T13:48:58.311975Z","times_seen":4,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":372,"dns":0,"connect":0,"send":0,"wait":112,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-6140a976.c70dd4a7.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:33.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-6140a976.c70dd4a7.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:34 GMT\r\ncontent-type: text/css\r\npriority: u=4,i=?0\r\netag: W/\"111-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Du92Cx06KeInl9b7G6dnAy2JIkFxRP%2FMu2n3fn3vsXrGFde%2FJ%2BeziGHtfVjrFXZdbRT8cxbWL3DeqDhEz5iyoM1F7Pgt2NJR3pXDcyP9ULCOB075Mjoyp5RZaLe%2F9tNoNw%3D\"}]}\r\ncf-ray: 9fcf1621a96db4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"6fa0ecf4147c8ce0222c50c699e3807a","sha1":"a77f07547a33f9b6ec67e6eed37629f508f97a6b","sha256":"6943a6d74dcebdb81ed9b48152a94e537946bd452b87590c4179c966722f5719","sha512":"8cc93fbb80c2bbce59ed5c2bf12fbe7ca0c49da27fa32ef1bbaafbf84aace700d4e60931ad95010ae4f7a5405b3e6f475e9ebf8431beb768ddf5d95ac4efb1ef","ssdeep":"","tlshash":"66b0123a734b04fc8c2ff0203f5988b87ec13322e11924035f9c8024451e7027c30210","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.445601Z","times_seen":8474,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":731,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-83285f10.3ef73d7f.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:38.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-83285f10.3ef73d7f.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"14597-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ABnyoT%2B5nXUxGQ8mGMKi0iMwR0lrwmm0AsOdN4urTm1R6fNjEXyMDo1m4VnpDHjqE1W4a1nqFGBMbc%2FuGZDcnSqXKPQcMiORtI0xmn6B7x8tx%2B1khw93eoSkDOPWbES%2BfmQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf163c49fab4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14597,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14369), with no line terminators","md5":"9ce21358fc7e6676fb414e0abd1150f2","sha1":"ed5e3bddf0c913cfe481e2586ac752e4a092ec05","sha256":"f7309ccbd77e501477eb8d40858e8885fa33706467caa2e5d649338cf8d6e7e2","sha512":"ec564718f10398647a3fdad2f299530ea3f41d11ba55f165f53b0e1c66680ddcfa941081c8147c76deeef5c4acd0875cd58bf213ae7599b3e8ff571bcd3a5cc7","ssdeep":"192:0VqG1RPDWzU/q+1mrLvgKHoBUsnyHZHJV6QXfZH+00Ma7YHNKnZX:vG1gzUxArlHotuqQXf8OpHNKZX","tlshash":"7a62b88222b6385e4756219330bb2580a17296a5180e94eff53ddcf6b3ccc247d27b77","first_seen":"2026-05-17T02:11:28.785428Z","last_seen":"2026-05-31T13:48:58.281139Z","times_seen":4,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":724,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-c1e03a3e.4d2e0816.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:38.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-c1e03a3e.4d2e0816.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"27717-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2vRrlMN2pg5ncb869n6Uf8DjhTYC0NQ3vUMZYV8xGAEZ9y5ETdbajaWSPjwCUIbkfeXBXa4urAUV3KlSshiMBh8Knw4EdtIYUEVzwgs2EeM%2FOO1NFvbI17foWKhS8z8ddno%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf163ffa06b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27717,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27675), with no line terminators","md5":"486b56d33fd91538856032fc3e4df7f2","sha1":"18aa44b9fe9656929026a5937e40f85c948cad41","sha256":"0c8702dbf759f9e627a5c1437f1f74cb91a22161efa6901747a67181084d45d1","sha512":"ed4108a35ff994cc61d0095e1bd7cfb2d8a4c6ab6e4d10f5f4006cd7723f467c05ea5a0e97e74b359882a31bfec1f50d817a404e05768710d8dfd47c30586a4c","ssdeep":"384:rtFJ1G5vSct/x5eaveIA6WwQDPqBtlOg5BNK6lRguvwyaP/94GK:RFJ1G5vSgeieT5p7qTnNK6lRguvzaqV","tlshash":"36c2f81a3286246959631fa853df4b09f33260d464264988f3ada1c76f7cd5e30bbb7c","first_seen":"2025-04-08T10:46:39.864867Z","last_seen":"2026-06-06T14:40:04.451587Z","times_seen":150,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/wap/api/index!download-url.action?lang=en","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:27.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"POST /wap/api/index!download-url.action?lang=en HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://www.mkwhcsq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ampy3TFDXcs4%2B%2F6B1nLyEyiPJbFf9LTQ0SScIlLQhh6Z7xr5qwoH%2Bt18WeBciC7RtGc0ScK3ICplEHziR6lzZFLK1RRU6%2Fmre5Q74xkUIRecNjcEnnxtVbj1bUzfzoazBI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15fc28c9b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"78ad22de1321e81516368d0c60aa084c","sha1":"9f042c04f78072b6fbd7ab7c8dd17e2b8489e793","sha256":"58e5788d78f0ff8d259e7afb8ff29cda582280365ab37b1f1e5905440b60a576","sha512":"28a9db274a50aae3d04146b7cead300e1a3613747334ffb79d3f23d84d27f557922eb5754d020952b81918b54454bfa6056a477e44e1a21038fdf023ba86968d","ssdeep":"","tlshash":"b4900257174d19064b071185644c354470dd236768c0de514d485e2050792b25011571","first_seen":"2026-05-17T02:11:28.790552Z","last_seen":"2026-05-31T13:48:58.269291Z","times_seen":4,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B0C24HLX9P/61kAOLYV%2BFL._AC_SL1024_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp/B0C24HLX9P/61kAOLYV%2BFL._AC_SL1024_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: hABCdYtWS83iDZ32BVS9gBwVOxQdo1osWyW/fRaED81xX+HLEUF9YOw1RJIQvu1JDEsTG1j0uDhk0qIoC8WJRTCvhvsuKp0L\r\nx-amz-request-id: X5T41JGXKX2NB1BG\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 10:26:03 GMT\r\nETag: \"2292943230acca7ee792c6e235bd4b83\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 287d87e533e6281ae7fbd97bbc55c8d9cb671141b9d6e4a39b4d3266914142a3\r\nx-amz-meta-s3b-last-modified: 20230717T144735Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 105583\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":105583,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1005x988, components 3","md5":"2292943230acca7ee792c6e235bd4b83","sha1":"ca436e0b0234cba4d93ebf3fe11e4545c711676b","sha256":"287d87e533e6281ae7fbd97bbc55c8d9cb671141b9d6e4a39b4d3266914142a3","sha512":"f54cb584b550756ed98a989994f98182b3b528d566a67a8821f0a2d4e880feb5c1201f181e689360ef8c1c43b50c7c6c38b02f37f6ff1b11b7df814c92062290","ssdeep":"1536:7FqCG7a1YqcXTiYJVxrq0S3KAaeExvOC+zayfR5M2fY8gEXIz+SYHV1tcGUrktuo:pqCG7a1hm9SeJOC+15XfnIivkbD+pbz","tlshash":"01a3128efb515ecaf675e6328141d08f276a7014b07391eb78421810a26b4e7fc6f1da","first_seen":"2025-04-09T11:47:49.949263Z","last_seen":"2026-05-31T13:48:58.298483Z","times_seen":5,"resource_available":false,"data":null}},"time_used":980,"timings":{"blocked":865,"dns":0,"connect":0,"send":0,"wait":110,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/img/right5.66fbdf99.jpeg","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /img/right5.66fbdf99.jpeg HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:29 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"5524-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wtt4MJ87QgXYZqLJY1V49n3ZjBX4FF7Q3Rm1dqiTSdiD%2FjWO8gusyzniWvUo1TAe1Mu7F5u5yh8L%2F8%2FDDaBlGTviTR5gkGRvteGbduXBDF8jec6nzBoyLoHT9XQ2WJ%2BaYsk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1602b8e0b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5524,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"66fbdf99c05282d390579ee1e8a4c8b0","sha1":"d7bd65c2553bbf938ba2a7d982e1d90c1860baff","sha256":"847d339af1537664b4c0266c7cd4c84db1432f9174295f132e04e6b6b50121f1","sha512":"49bab24b6a8f47f7b099901a65868be194efe11047dfd9ade98b8fcac862b3bb59ebcbc76921ffe6c900aa91e675f11a9b64a42c418e80f02cc8ad1a43b98b45","ssdeep":"96:WhhUFvxHgld/rdM2oX1pfs1BBfcVq3CxmaiVFMbo9qJC1dwH2J34Rm1cum8lwoRY:EAxH+BqBl1kBBfc1xmnQ7U1dwH64AyuA","tlshash":"17b17e19a62ea807cb2aa9fb2d5c259661012a747f1c0bf246a121debd42cb1af15324","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-16T09:25:40.615504Z","times_seen":417,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sk-tk-mall.s3.amazonaws.com/selle/2026-05-04/f87ec716-6274-4869-aee3-e279c1e86870.png","fqdn":"sk-tk-mall.s3.amazonaws.com","domain":"sk-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /selle/2026-05-04/f87ec716-6274-4869-aee3-e279c1e86870.png HTTP/1.1\r\nHost: sk-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: HcwdaaQU2J2e8qcKzTDCEu9UfVaExTtiBGqgvpP/fAyUgQBAh8uSavD3lq7NoX7Krq7Yh4177T3gjRIZRm4EPjj+wIQAyPC5\r\nx-amz-request-id: S9WNRSGK0VFDP0J6\r\nDate: Sun, 17 May 2026 02:10:32 GMT\r\nLast-Modified: Sun, 03 May 2026 16:36:34 GMT\r\nETag: \"063e68684e534124365ef06e422f596d\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 1701576\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1701576,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGB, non-interlaced","md5":"9df07f76e8e5545dc9ed5ca44887d6f9","sha1":"25a7360406ede1770640a8d6e749c20a1d78b72e","sha256":"2b4014c67d41997f6675ecdaebbc10a069ff117b05444c715027f96fa1eb8c7d","sha512":"da7f00ad6b2d3a219abb794198bb6daa2a4b117f00f8d642713aab3609be9c169082e04b4a937a9e9110a0db45be8564c27904133685b125af85016a637b5984","ssdeep":"24576:fE60R0IpSoxQG0qrTm+Y/aeq57tRd6eM/5Fi:8dey9xQPV9Y57d6eM/5Fi","tlshash":"56252393f45b27829131fd4350e4ae19e9f431596fe24c7c1a182af0b1aa1a16f7cfb0","first_seen":"2026-05-17T02:11:28.797006Z","last_seen":"2026-05-31T13:48:58.328773Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2863,"timings":{"blocked":2130,"dns":0,"connect":0,"send":0,"wait":356,"receive":377,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-20104f2a.f38af1ee.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:35.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-20104f2a.f38af1ee.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:36 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"2985-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rK5sx8FT6pdB5P775Cfk0P1FcEfKPNR31uk1gmQXQKsDOEADJigrruOQBPRdiEGm1zz4wSttM%2BhuzpnWGWk9RpB2XAlUrPg8vYTdzGPehPYPRyf1BuJz5rhCe3%2BCi5BXmdc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf162de9c0b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2985,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2981), with no line terminators","md5":"d1750d92b10c818d2f0a2022c73bd6af","sha1":"8c391560211fd5e51630c95f7b892fcdb990a6c2","sha256":"130f014905f38854e0750966ad16349ef86dc566b611990df65accc7d23f21ad","sha512":"fdbb420c21aaafefd5ed4fdff3ca055e65fa3a3005892e53e00b228a9b73f20c3e138ebfd0045cb17f63b49bedbdf86b843c424d473c5b14d3747a896608c2ef","ssdeep":"","tlshash":"5d51524c5452f47d898e502a311db330b0713fe24885a4bebb78ce9592d8e61370f7a9","first_seen":"2025-04-08T10:46:39.860043Z","last_seen":"2026-06-06T14:40:04.446416Z","times_seen":156,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":718,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-8ac79d50.d1fca218.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:38.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-8ac79d50.d1fca218.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"32703-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ORPKKsvpFwBPIMe%2BoEuKLahiCiAEuNrTvMMih6Yw6cTKHveEqI5qtv1GNKD8AyBfQOsIAXs5T9sNb25MjrCAKHLa2%2BdQYLhbTMMwi9lB747DcnGSssZ6h6A8L6590wxiPpk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf163eea02b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32703,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32692), with no line terminators","md5":"41c9f4dfba9b8756567b736a0d06c57a","sha1":"9e1a6cc7decfe9a816da02ff78685e86608dacda","sha256":"e218eb9ae2b05ccf922f42d7ed048a5cb8e0eca9f78d4d8a598a259910cee01a","sha512":"800b9c734a258e5eaa03589c886a7f6698fabff64daa993bfdea06f2d63dedefdea986ef17bbb634d8dc311900341f0ce7dbd4f2754781fd40a8558d37cc446b","ssdeep":"384:pnAXzwWQoAU0RNYpFIeqSirBcEw1kyrVTjT0E6RiuXW//f11:Z7h5rBcBhTrJqs1","tlshash":"f3e22c539125f41a5ebb6253316a1496a26429e858089c47f2fccdf633ecc382b1fb7d","first_seen":"2025-04-08T11:27:57.659542Z","last_seen":"2026-06-06T14:40:04.359621Z","times_seen":94,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-f12f1418.01127275.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:39.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-f12f1418.01127275.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"6366-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=age3q1yWaG0mSFZYaGjDKTjBit0MYTP3WJfPzTSDVgqAQ%2ByMzYtMo02nHE0VSOq%2BVy04zJ%2Fn0%2BSXirfzGP6evMFweHTuf9qXoCj6yEa7dnKkqQKeOr9tjU0Rs3FnFIbEKxs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1641da14b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6366,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6366), with no line terminators","md5":"f5430640ba7f3df6f55555de5740f10e","sha1":"0627bb45fd8dcfa31d103e651042304682bebe05","sha256":"675a8c968aa037dcbed5ac3152a9fd353d55d2d0c7328fec4f2f27ba1472c3e3","sha512":"f4e0b713df61e1016bfe96b36dd2deca2741a9deaea073fcab60b0fa6f1bb2c0935b24c12b96399112e780d4449080d475491772ddf64d6000a0740bb865282c","ssdeep":"96:F6Mt/nsTVUWf6MSXU6REqgIldI9OwnZrvVJKk56InO1YkLv3m64n/UJjCVsc3YC:F/sOG6MSXU6GqgCI9pn5VsS6IrI3y4M","tlshash":"76d1195fe49279bcc00b5265341b332876703bd0d044496afb3ddcb82ac88a823677bd","first_seen":"2025-04-08T11:27:57.674306Z","last_seen":"2026-06-06T14:40:04.417808Z","times_seen":94,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/50277ee1-dc11-4e3b-948e-f2f37f4858da.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.199.85","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /test/2023-03-28/50277ee1-dc11-4e3b-948e-f2f37f4858da.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: wiA1zdooVAlpfI0LequU7Zcjwj8vIZ9Rp6eNaDY4CaeJPyI6oc9eb884HYXbLre8YfvOUlnZr0Ud0lTwb+/xcxN3xc07K2fE\r\nx-amz-request-id: X5TEZ44YSPMMDR74\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:49:21 GMT\r\nETag: \"cf0c2ebda19a43267a2348c11f0e9b1a\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 104771\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":104771,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1166, components 3","md5":"cf0c2ebda19a43267a2348c11f0e9b1a","sha1":"f530278c1954d58bd91d7fd632ec98745670d158","sha256":"f38fad678825212dd76b489f41c44d65f661ffa87f0391f2a1f12823ffa01adb","sha512":"d22c73c72f3979b6d42c25bf33b4dc242900c7923bf2a5fffe6eb262a1c94ec32958594df688404505b92ae99ee8213518bdf76f2a6b4b63c96515899aa48014","ssdeep":"1536:4hPJiIGQfVd8Vw5LuDqpota4IsA1zT05E/igYy8aiPVymyKvgLgwwdmFwXlqfMKi:4hPpVWiLuDqIAkzy8aiPVy0vQ4R","tlshash":"c3a301c3611e5ca3c9381877233286328fb7e7c7c15da49cb458aa29c1e97bd3db9095","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-08T23:25:03.472783Z","times_seen":7029,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":522,"dns":0,"connect":0,"send":0,"wait":124,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sk-tk-mall.s3.amazonaws.com/avatar/2026-05-04/b13aa37e-e7ad-4e58-9e9f-92d39b730535.jpg","fqdn":"sk-tk-mall.s3.amazonaws.com","domain":"sk-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /avatar/2026-05-04/b13aa37e-e7ad-4e58-9e9f-92d39b730535.jpg HTTP/1.1\r\nHost: sk-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: PuEdSEVJ70LKqO1mQVIp6L6DEmLQcPaZQH3uQanlFXnlHxABugBt2X+YjiB9XFBRXrQBAQmX45Ql01TjKWIRQhlCFmLXbvmO\r\nx-amz-request-id: Y6QAWQ9EYW3C5S6A\r\nDate: Sun, 17 May 2026 02:10:31 GMT\r\nLast-Modified: Sun, 03 May 2026 20:00:49 GMT\r\nETag: \"9fd841444df1c71354a2d60bf4fb3095\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 97603\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":97603,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1248x638, components 3","md5":"9fd841444df1c71354a2d60bf4fb3095","sha1":"8b110d300124435b7bfce15f58e3da093477e27d","sha256":"f0895abfdf5ada659cf196af6923253a037ff51b368b5b199f692cb453bf9602","sha512":"2a97fd6189bf238a26a7ebe037ea6edd8e65e1246fef7f3efc83c82290d80fea8afb708966d0ba286529e29c6ab10eac4a577535477524128321c760c8cdff72","ssdeep":"1536:ujlDbMKYGwXDHH/S6TfHIVc4ErDZ3IRaohdsOM05TQuwdvwi7uPaprWfNV6+gB9i:uZ0XDK6Tv4Er1HohFM0NQ5I5lVV6+yqL","tlshash":"d493f15b8b1ccfc4fa8072725ea61b3017ea4f47fc586b89c68c55322569e0f94bf426","first_seen":"2026-05-17T02:11:28.808564Z","last_seen":"2026-05-31T13:48:58.214308Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1807,"timings":{"blocked":1445,"dns":0,"connect":0,"send":0,"wait":359,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-08bbc53e.27a370f9.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:32.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-08bbc53e.27a370f9.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:33 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"4695-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L5Bp6mAXXmNyHVdZNa86mok87gzxsxuLhVBNX0rVy8NJpYQRs%2FFV74ngaiKBx2Z25vh%2Fx3HL95gsIkoXsK%2FgOaq9K1Xxzt4wSdDlYjCZrwuIOJM2JkXEtB5bqlVon3%2FNfYs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf161a492ab4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4695,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4695), with no line terminators","md5":"2abfc31d2a6752d6d66f5fa21c7fa262","sha1":"63116607f3b72d74be9d1bdd5050ac15859f7243","sha256":"9159959031e6a701bd2e9e5baaa03c4f14d6c2530977a9e013c8af24c4838a37","sha512":"ec6bd33bd4a69b9e93485dfa272e08170ac3c17b0aec5f291b716c1e370435f6bf26fd7b2139aa75790defcf2223f4deeec07818a549334ba069f8a307201127","ssdeep":"96:VQrF215xix1yXSl6nS65EaOYIj8MRSLRsR7S6m0Z8u/j/20RO5sR5WFs5E:VQKM8F9","tlshash":"77a1b050b15e162b687bfad9187cdd4cb0d6fe2ac1324b76ed9f24148882e733622235","first_seen":"2024-02-11T04:26:48Z","last_seen":"2026-06-06T14:40:04.500613Z","times_seen":5224,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":708,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-c6d7a01a.e67f7f3e.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:35.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-c6d7a01a.e67f7f3e.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:35 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"3807-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nCtYS658kr8kAqcyEYLS4%2Bg%2F1%2FnpOv96JNWPioYNTFH9aVWdXGh8a%2BCsBhQj1TPvB%2FMfpnbxKqymwuRHam9FhIdSRwDqJG95Dlv8AJN%2B%2BT0ILDEmMYeZ57XcYg4Mq1POxOg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf162959a0b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3807,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3807), with no line terminators","md5":"d5c5cf21c0ac8cf32937fd5577eba50b","sha1":"49b8872bf19a1f9c7f9e78b19497e8b89ca2ccfb","sha256":"4531f24949afa7812c1f59876406ea88233df11ccaa72f9a7f559e55416dcc6d","sha512":"bd7965d44b3c3d8fe1e112a9097b029319ea0eb7bd67e9a52912b44344edf8f28493123a0ac5bfdca0181a551d03990a1ce84044abd3abace820f386e04ba5f8","ssdeep":"","tlshash":"04710e60ba22231f6a72f6fa55c0a1dc370aa21be19345dfdd49c40ec6df3a79174b60","first_seen":"2024-02-19T23:01:30Z","last_seen":"2026-06-06T14:40:04.519006Z","times_seen":1117,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":705,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-39678b28.077ecbd3.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:36.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-39678b28.077ecbd3.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:37 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"31884-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y8mhs38A5rWjzc0Wd7y66yx%2BhoSWkDkn%2BKCv%2FUvOwdnx93Zk1NHcLkRKVKoB%2FgremXWbSEuvu%2FONBVKPDzrWqXClIPeFBGs6MpkB2kPhR8s0kWkk5xd3LFVi51yUzI4wQFc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1633e9d8b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31884,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31884), with no line terminators","md5":"c5ae2fd87dce2e0cf48276d1dac9a6d7","sha1":"44a05f9a78971f1b126f4e499bd536d3bd9bf610","sha256":"cfb2be1cc3784cf10943c8020d055e2a4fdb73fca8a4deb8aad15f821915ade2","sha512":"a00254d8510e6e37f7088bc017bd3bd8a30feeda098fd88f123999829d250a755d15cba48db96a8460cb3498020a89f78324d32af83e7aa5f720583763411858","ssdeep":"768:wCCLcjhBoecMY0hL4fFcNLL5gqKNUA0Zy+2:wCqMicNMNUpy5","tlshash":"4ee2395f50a46da8c94e2162302622b97471abd5f00a48c9b7bcdefd50c9eb4232f77d","first_seen":"2026-05-17T02:11:28.823883Z","last_seen":"2026-05-31T13:48:58.24985Z","times_seen":4,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-8574639a.53dc5ddc.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:38.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-8574639a.53dc5ddc.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:38 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"6581-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bkyb%2FIPcnvlb%2BoyJwmEK%2FiwDywG8tNeUsOYtUu4bjkCJJSLgoqEhyyQoOaNacywcEd%2FTR8J02RPDErteTlIA3dECERwSGTCYIqLOsKTga94QZg5qE9SKJpyDonn32mVjeUo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf163e69ffb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6581,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6553), with no line terminators","md5":"10827f09135aa160ea99abf627d7dddb","sha1":"3a6537da9af92a322abc37cd357a0fadb225724f","sha256":"d10436b7f805ed7626732d7c2779fb8b04ee8cf75ab6978ad5035e535e491992","sha512":"42a9d4914a93ddb8111ed3274574b4bac71aa66cd9a8edf9b089f630d11ac2706023455d81958a3c48af8ea97f431ae86b62197c390c38f06d0179c05314d0e6","ssdeep":"96:hngjkdrHrjYXkLIuGtdcskBIHKKpD7AkMTEWgvbVPLYsoqfZTx3:ZlLj45uGtmUHD7AkMAWspUsJfr3","tlshash":"efd1f94aa218f90d4e0fd151301d2572f5a93ae4b064d9da773dc8fd628cd142b2fbb9","first_seen":"2025-04-08T11:27:57.691772Z","last_seen":"2026-06-06T14:40:04.396597Z","times_seen":94,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-c6d7a01a.d398249a.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:38.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-c6d7a01a.d398249a.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"22757-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iTmgZc7QKBELhGvjyY1S95bkcDAdR6Oydp2MhBuegsDgwlaQpEDmpUxVZHzvYFFGt5fXslR2Ze8v1QVqUChm3A9hIhozyAkHUlFrv%2FELqOS2KmKiyJogL6whIstiv%2FDmYPU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf16401a08b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22757,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22687), with no line terminators","md5":"6f1a364a2161975783affbe97482d891","sha1":"444c1f902ad83beed14a46e389b017acd03fbfd6","sha256":"168eff704901442df651ab53f8b43c7d5eb420ef2e854e381ef9e71117fccbdc","sha512":"2eeb789a4b5c34e6a3b5f9b3568b0b4a0d8a6379c3791268a28fff2986e5f3e84ffb68c525dc6021fbf8b49c043405bf218e4fc6bede2e4fd487ba435e55f8d3","ssdeep":"192:cthRrXBrciSUbUxZB73GKJoQQBNgtTkzsuQ4y1wTYDLihd15pa0L9OeuuyWwQmcM:KX5b8D72mlJlUjAH9GPWs69g4lqD5Bg","tlshash":"e1a2b40ea146fc9b0f9272e5701b301560568054680a9e67fb78cdf9b6ffc196623b3b","first_seen":"2026-05-17T02:11:28.829008Z","last_seen":"2026-05-31T13:48:58.33196Z","times_seen":4,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-ec9441c2.de8a6d33.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:38.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-ec9441c2.de8a6d33.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"4387-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cn4K9o7bZf7NP7roH63F6oTQXfedpCBGvLS3kTEHR31fx9%2BC5LwzC8MT3xYevFUANSabaIha8q6W0IfH6UJjsXn1MEFpoQ%2FcActp5lh2fQxNpDBbxtDfTIclgaPE9mqwZyM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1640da0db4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4387), with no line terminators","md5":"b4c109cf1acf78d0def272c120c65417","sha1":"97a9b4d38437a552f1f2a49779aec92c570aab47","sha256":"af24aad13613a7910df2f19cc9d61d39bd66aae1c787e44a85b4b2739ddd6b75","sha512":"fba4e795f2a6c7ba97c9feebd08615038c0b7ea5d455b023d820c762767d9426a311118b9b294b1d5ceb619a0068e620bd8a527a5d28c09a9645a432a1c549c8","ssdeep":"96:wKHnACr3IIIIIIIIIIIIIIIpG8j75hZFZQrmmp4q+:jgWIIIIIIIIIIIIIIIPHZs6Rd","tlshash":"f591984ae8a2d3b1f67b152f654923101e218fec67a8c4487b715ebf32844be4b37394","first_seen":"2025-04-08T11:27:57.668427Z","last_seen":"2026-06-06T14:40:04.343601Z","times_seen":94,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/matashop2.svg","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:26.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /matashop2.svg HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T22:24:25.64076Z","times_seen":17433138,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/fb09769f-95b0-4418-bc5a-8f91952ddf75.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-04-14/fb09769f-95b0-4418-bc5a-8f91952ddf75.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: x6Res54b3PyjzDNbIewnLy6S8PRRB4x4N3LQBpMOrHw8GBnHFU/vNnWbLlhGrCYpe497cr/MHcpXTjIixZS2FTLAu4lXQsPF\r\nx-amz-request-id: 49W6HP62KEHDYJJK\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:35 GMT\r\nETag: \"e1d0a17b2eb5865bccc7dff6330f6562\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 147078\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":147078,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"e1d0a17b2eb5865bccc7dff6330f6562","sha1":"c956ae8ac7dc2720241d709e92d963ce814550bb","sha256":"9d0495f4e08deab21e64eb8cbe00de00a937aba37d3ff7a3714f30e551f978e0","sha512":"a6c80898e0109f3b6887861ca36e8bcbad9e7091a24eb9d49e55051ebeacbff242ecf0b192cf45d318948b90d660b97dc520cf870d5d651af386a4cec7553456","ssdeep":"3072:0bomG8J7r42I27eo7oPi6T3gKWN4+ogF1Ejq76Cui8MuXK/vDJMKC:0brr425eo6WUgRuC98M7DJMKC","tlshash":"f4e322ddc9c8a380c8003df5fd1699599a347ea34db476461f637adc7b19648ae1bc0c","first_seen":"2024-02-11T04:26:45Z","last_seen":"2026-07-19T06:15:01.547182Z","times_seen":9391,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":-1,"dns":41,"connect":92,"send":0,"wait":137,"receive":189,"ssl":268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/img/right1.fa614e85.jpeg","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /img/right1.fa614e85.jpeg HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:29 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"4805-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i1i%2BE6eWzYUCeZ1I0fZmx98IXUOVcTtDK%2BZeD6h3COG5dcpFkcT4vYe1XyTL%2FrBY2uuj33yaeu%2B0Vo0prXA1OEtzRrqPuagvo8T%2Frjlck4a0Yj9TJHx4y3hLG5%2FTAQO7pFc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1602a8dcb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4805,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"fa614e8564bd8fa171946cee9c08504c","sha1":"5ad655b83ee431328fd0f99245fc9ba34f921478","sha256":"6679a46d4c1ad7d989cfebb329c48714ecb8b737239e33e05bbd07cf6a228734","sha512":"e8151e57150ee33a29e7c6a436556874696b187531be777b7ed2441f5ee927ac77d47c546bf5c8026f3a3ac6c64102ef9a5eeec7f17720bac2250e27be35f0e7","ssdeep":"96:WhS4TkAFMLFwDLyk6KPTLPwrAO824idlifhcL1qYIwEfRHNRXb9z:EdFMJiOklLLGvG83ELRXF","tlshash":"4fa18d4f67b66c5eebba8b7c042c8f982912dc1159321fb905a05c199d2fcfad9603d1","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-16T09:25:40.620043Z","times_seen":409,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":708,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sk-tk-mall.s3.amazonaws.com/selle/2026-05-04/ec0290c9-8bb3-4404-8325-ba2cd929dbd1.png","fqdn":"sk-tk-mall.s3.amazonaws.com","domain":"sk-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /selle/2026-05-04/ec0290c9-8bb3-4404-8325-ba2cd929dbd1.png HTTP/1.1\r\nHost: sk-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: RyPqjxhQUdGWutstNEONcfpNsoadrcFagJdkZLiUSeXNRo+DFaGg53XexO4b/jckCvSHx7IWYrtg4gXKS3NTXCMBrvAXj1Kb\r\nx-amz-request-id: X5TA8YHVDQSAWMN1\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Sun, 03 May 2026 21:02:16 GMT\r\nETag: \"6b52bfc24ec5769ad4835a823ba50c9a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 4062148\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4062148,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1819 x 1819, 8-bit/color RGB, non-interlaced","md5":"24fb018caa3099ca03608cd9b4a5d782","sha1":"cd32496969a9d4579171749af51dc42e0381184d","sha256":"e5137a69301e8dba087caaef722098c272b72e2933726adc5149c2cd60614d2e","sha512":"7d3575677b83fe946894364ba4aa800fb488a2f8c2df4461c6ead6bad89a26e390691bcc3862b949b5cb61b4b2527d9676c1ba3656f1a4594d452ed21f2caa90","ssdeep":"12288:R0jmAcRV3+UJ7c+0ObEtz74/dJoRzEizPaInIjfJlpREZbYyr+yIqv/+BgZRXGNt:R0hmVThMt7KAREiWFScyqyeqZBGNt3z","tlshash":"3d2533f75ab485c14f7ed2398280f645367a77281af5c0b7907e412dafaefe8c991804","first_seen":"2026-05-17T02:11:28.834615Z","last_seen":"2026-05-31T13:48:58.213725Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3120,"timings":{"blocked":192,"dns":0,"connect":0,"send":0,"wait":405,"receive":2523,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp910/B089CM61M5/81AmGO1PcUL._AC_UL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.212.34","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:29.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /pc/gp910/B089CM61M5/81AmGO1PcUL._AC_UL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: LqsWw0hGEkj5z/wyfiTnJ2vqpaXcFkhDynU7IEvtPb7AbhCUWsFI5GqJnMj86sL3tSoAZUjkjsPl5PxT8CfSg4uyQABYBq9s\r\nx-amz-request-id: X5T1CSJT6TPKTFY1\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Wed, 22 May 2024 13:48:33 GMT\r\nETag: \"41a65bf98d919bac8218d732a1238452\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 399823\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":399823,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1357x1500, components 3","md5":"41a65bf98d919bac8218d732a1238452","sha1":"76b0dec4c17de3db14e8469f435f84543711d3ed","sha256":"3276105db5f90cca18f7c67085ab6cfafb1fe4ab6ab8057a9c58a232067613d8","sha512":"71242820590ce49a2c302469f8e019254305e5ebe1d412abfe7063cc4559d74f3b3730a9b693dd21e2cd462047f5dd38fbfffa73eee21f660c77fd998367c9de","ssdeep":"12288:639qzihkJwV9kVbGk/JR7OSoB9tYTQKLvPKsl:63Mz6kJvJloHiTjDPF","tlshash":"ca8423624f476b7ac8d81ef7e91ec5c2e7a782c442318f3936523f668b14b961e19c43","first_seen":"2026-05-17T02:11:28.835702Z","last_seen":"2026-05-31T13:48:58.279774Z","times_seen":4,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":376,"dns":0,"connect":0,"send":0,"wait":119,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-21f21164.054674a3.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:32.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-21f21164.054674a3.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:32 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"4173-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GJzw5dNhrX09v2hZ%2FQXsH%2Bg1a1ZUdhF%2Ftjf3iEclTMF3lq4eDVOusscl%2B7Igj0dSAWoPnzVaP%2BLnYA6BCl0TlP3WSCkIx44t1OEYijpahnuxhVmcGfWbsNivKI8%2BAH4R6cs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf161a492eb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4173,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4173), with no line terminators","md5":"d26838e6fc6c5713d841649b06a47e9c","sha1":"7681e0887d8b3957920c84e07fe95a1f8a22bca7","sha256":"5d0e36aa6715f146ee4979217b130ba8e86c334c02758895220835a2366d5a01","sha512":"d01fe57c48c7685b7f14f29a50d61418040c66ed4c756276c25108e74dde577d4c79841b9d3690f94799cb30a1ea691dba49e71870b97018d2d57291026f90d3","ssdeep":"48:jMxKHcoeYHjMBgquTy/ra6oYkAryBxzYpUfRmua+IzvtTm5rx2/6iYrxXfZsfZyK:CKHco56gNTwm+yNfZsfZyZZK+8p5","tlshash":"cd81ee91712c94266c73e07b309e455e6e54ef63c012a3589c56bf3e8c932e32e707c9","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-05T08:23:29.931375Z","times_seen":5300,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-758a1bbc.1f2ab8f5.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:34.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-758a1bbc.1f2ab8f5.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:34 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"6183-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K3o%2FVRvS78lF9hfKsjowyobFyVH%2FtsAH6btPgilJ9OxsnK6a1Q68B0k3ZzZMVSnFUMOjFycq0H5LbS2RnOc0gw5Eh9XhRkbqWb%2BDG46Kiv94ntmWvh6kkr3RvG4ljtcbDc4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1624b983b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6183,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6183), with no line terminators","md5":"d46ccac8afed41d4fc5c59cdc4df35fe","sha1":"5dd8325163177c847a798e16cc2469681b6ded3a","sha256":"65953a49d49c975458e1b6df9721c7d4487cb8dd24ba0179bf8a0c0803a27bb8","sha512":"02f8980735562cd0cb9f8200963f4c0a614c7d9c2fd1261225add8113efe7bbc968b3c5faccc64418a4a193dfd57eaf18c3134c0895b0ba4362288e0581753ca","ssdeep":"96:V7aBnp0eZAhzD/wFmwxM3Q7BkyJtFoJU6Gfiea2dFyq:VLw+Ifiea2dFR","tlshash":"b6d174132a676520fcbaf01e79647b8e3e5cf643d08606bcf99abe35c4c6873b518141","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-06T14:40:04.524163Z","times_seen":265,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-7829c5cc.c6474aa1.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:34.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-7829c5cc.c6474aa1.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:35 GMT\r\ncontent-type: text/css\r\npriority: u=4,i=?0\r\netag: W/\"242-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1sNKbPc%2FMnl6IApm1%2BtwzZ%2BV6yhGmHFJNkQPI%2F8Z%2Fj0MthJm%2BCeCNwqlSu0bkKjFaf7adQje9AfWwvadIru7NPebkb9wOO7UafGGJctGDyrP9Rqf%2BHFghv2kgyuG5aDzhOs%3D\"}]}\r\ncf-ray: 9fcf1624d984b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"207b8b759b262464712f92d1ae1e37eb","sha1":"7029c92363ea630f095754daf11add091fcb57dd","sha256":"83e8578a1c454c2177dc7c70879f3a2e5e917cb457b060909784e71ddaec84cb","sha512":"7ec9d45d68a15b191ab0ec850c159b6a09cdedeecaa33c45bec5870115ae5717ee8cbdd1c020cdec12987d0705e88b487287e93e72bb2ced89b80fb446516a1b","ssdeep":"","tlshash":"45d0a731b39c5824b527c0dbe6c568c5b6043bb2984974b6edd31f68c887453716834a","first_seen":"2024-02-19T23:01:30Z","last_seen":"2026-06-06T14:40:04.482686Z","times_seen":1462,"resource_available":false,"data":null}},"time_used":707,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":707,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-2bdc7c1c.d10fa6e7.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:26.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-2bdc7c1c.d10fa6e7.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:27 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"15177-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FAetIbZnXt%2BUaHrRCqX34B%2FaS8mW1AGZ0LG3k8jcGNKuxSn7QgpRxFLD0Br1pm%2BdwfPMF7BgvscyWrUtMmIiAz47htrlkeZ7jL1CcqYdEgWdqUD7kgbp9GD7DBzfWAt95jk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15f4685cb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15177,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15177), with no line terminators","md5":"e8f0d8a145ea382f2121421c8087d314","sha1":"2141f6a0814533f4403f813ab214c0db606ed844","sha256":"b3ade7cf169fe446ca4328caeedaa6e148e424a1c1bd5b6cfa17da8314e97eb5","sha512":"152dd11cf62faf5e0c57b51da6ee42af53261ef2bb2717bcbfb892afbc74968cdf6cc04a0a2f4a81266f072c212878851f47759d59e208af85b0802f15e03931","ssdeep":"384:iCQRDeBzT8lN9lc1J41+qFkV0vD5rw/CVFcjTK:iTe2lAJ4EFaDm0Fc/K","tlshash":"1462d87365a0963a76b79a7931c4a4ce7067e923c11742bdab59f13cc8c72a3263134e","first_seen":"2024-02-19T23:01:27Z","last_seen":"2026-07-09T07:07:04.493375Z","times_seen":101,"resource_available":false,"data":null}},"time_used":774,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-28/b95dc824-0d77-4013-a5b6-73fab1c9e4c5.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-28/b95dc824-0d77-4013-a5b6-73fab1c9e4c5.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: eC8vvZtHMCTOlDzGUoNBTM1/DOZTZyuo2gNXbP/4THm8PW4T/HtbdJ9Vd5PHNPFRvtjn9T+w1gklJnhPZRtdQb7SpQvSfiR9\r\nx-amz-request-id: 49W0DXXEQVZP7SHQ\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:17 GMT\r\nETag: \"0527d1653d7ad2d9fce0c6e3e6ff3f8d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 17300\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":17300,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"0527d1653d7ad2d9fce0c6e3e6ff3f8d","sha1":"96f83c2be0860f8d33bda1e5955d2f69e1947cce","sha256":"91d6492646ed09c0cd914e6d6b5756d5e5ce01c44334b1e4fe035ead232a3f00","sha512":"a52945f8f23f05aedb2288cf6da590d9cacdeb9c07cda2e165f751c8f5eab3a752061e605e778f3c374481c4b1661d99be9d5fd8962d30e5cc3e4f5f007f2a61","ssdeep":"192:Gdel8vIA3KMvActt7vDzEu/L38lmmDOTORDpUcQws5kXMwAjdMubITDpgO67jTf:GdSnq/tt7vTLAnyO5skTAjGJTt67","tlshash":"ce7216179d089dd3616cc3e5bf060eec7f9a5758e8063def90a10fd93b206878d8946a","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-07-19T06:15:01.590667Z","times_seen":9924,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":619,"dns":0,"connect":0,"send":0,"wait":114,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-08-14/29e5a33a-f02d-43f6-b4ce-5edb8be1577a.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-08-14/29e5a33a-f02d-43f6-b4ce-5edb8be1577a.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: +Y80qfgCKSOHviMzui3dCMXyG/HQy73PgZRQNRJCCWXWmll38AwxHHxvgyF2E31/AFg/ryUe7K/mIGwYq4MWUjjoS/GtZAoS\r\nx-amz-request-id: X5TCPHV6ACT075ZB\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:35 GMT\r\nETag: \"a7d470fbe103fb9a6784c6e3bd450ccc\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 96012\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":96012,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 500x500, components 3","md5":"a7d470fbe103fb9a6784c6e3bd450ccc","sha1":"cef53fa7fec6b069bc298b96adc02886d48a2bd6","sha256":"4529834992120ae959682d5dfc40e76a46db199fdbe4b20fd77e5d1ce92accd0","sha512":"e429d8efffecef5f79cbdab092f84a5054126fb33ee4b22d8e50861cba8d10edc49b41b5d0b8d02d997428b0f661816cca586b58f15d10cab9629375de8ff737","ssdeep":"1536:Kvlkpltm3DoZ3IUr1vvliVOHylrocmmIqeWJ6BHlCJsSEBT+qScNiHoDqlSBvP:Kvl2tm3DotIUrxtiVaylroc0dPHQJlsZ","tlshash":"1f93f19fdd0acc318b46e0ea7a85c1a364b9c25354d0f97f5739d8b6c09c7b99802cc9","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-07-19T06:15:01.478975Z","times_seen":9628,"resource_available":false,"data":null}},"time_used":1036,"timings":{"blocked":823,"dns":0,"connect":0,"send":0,"wait":117,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sk-tk-mall.s3.amazonaws.com/selle/2026-05-04/5011a032-d770-4de6-bc04-41dc34789db6.jpg","fqdn":"sk-tk-mall.s3.amazonaws.com","domain":"sk-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /selle/2026-05-04/5011a032-d770-4de6-bc04-41dc34789db6.jpg HTTP/1.1\r\nHost: sk-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 5QpIVg2nxql9hoHMRuS4e4iyvZaLiQj0mygSipMhkktNj6yYQX7P2fWe8DooBKh+h0HAn2N4j8CDp9jbjKEmoHJhoaoQ4Qjp\r\nx-amz-request-id: Y6Q96N2SVZCY9NSQ\r\nDate: Sun, 17 May 2026 02:10:31 GMT\r\nLast-Modified: Sun, 03 May 2026 17:07:19 GMT\r\nETag: \"4f6468814d8c49254eab1ce29867e7dd\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 45107\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":45107,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 710x568, components 3","md5":"4f6468814d8c49254eab1ce29867e7dd","sha1":"1d470f7fc77093bbc5c55ec3f6effe25d6a1af55","sha256":"bf23d220f254149281c84bc31e446f05b3c7ada44deb1c9316211947cd435394","sha512":"1ae4f3f4f73d1a335e8d8c22dc9f9ed255df64c8df5e10ae9bfb967c1c6ef5c1e39b099fdec579082848c3c705557b638c4fd2e1f7a410c234e42df257d142a5","ssdeep":"768:bNNNcNH/rFsC+C7n/1QPjoXfNJ1tzXLkEHFSh+yPZv/1W7i99epsj9fvZMxtC:lGds8XfNJLzXLV8hNPhXfvZM/C","tlshash":"6013be4a4c2cf8fed956109673206061f8c6bfb5606306e5909bf0d6a87fbd41e9b0cc","first_seen":"2026-05-17T02:11:28.843568Z","last_seen":"2026-05-31T13:48:58.239828Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1933,"timings":{"blocked":1570,"dns":0,"connect":0,"send":0,"wait":361,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sk-tk-mall.s3.amazonaws.com/avatar/2026-05-16/69ccecef-1fb5-40cb-aad6-f3802ad2c81e.jpg","fqdn":"sk-tk-mall.s3.amazonaws.com","domain":"sk-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /avatar/2026-05-16/69ccecef-1fb5-40cb-aad6-f3802ad2c81e.jpg HTTP/1.1\r\nHost: sk-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 69+FHP4Fu9drhfnuY1wrddBPRwFuH2YO//uYBuFJgU9pcYVDlYuPJA5MU5aYHk1ZDzT3pxs/4RgSj4K5aupvIQVNAblyng4v\r\nx-amz-request-id: Y6Q62MDXMQJ2FNJ3\r\nDate: Sun, 17 May 2026 02:10:31 GMT\r\nLast-Modified: Sat, 16 May 2026 21:54:09 GMT\r\nETag: \"d0093f075117e58a51b20b7904e87d00\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 35978\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":35978,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 677x658, components 3","md5":"d0093f075117e58a51b20b7904e87d00","sha1":"91c0045b3a54986127bded724278e12ebfd06372","sha256":"3a8a5b311064fe36b6a5a678b03b82546cd8589acdb64aacec0153ec7b1a1639","sha512":"fce47822ed466b674b27ed79f9a7ac9ab8e1281ac686e140ab88a170b129da43a92e762651b3f6916696000846da94ceafbc8a90ceba4d4de3ec50a410d87561","ssdeep":"768:xHDGCFw3NxQFGeuUhheX5qvl1q0vfdzZ1zPkyQU6l0/cYK5R9:RDE3NxQFGeuUWX5gW0vlbFNcz9","tlshash":"93f2e13c2b32593bd074b0e48ccf035ab1561324fc38e57f36762e9707bc845a55aaaa","first_seen":"2026-05-17T02:11:28.844616Z","last_seen":"2026-05-31T13:48:58.279164Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1901,"timings":{"blocked":1543,"dns":0,"connect":0,"send":0,"wait":356,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sk-tk-mall.s3.amazonaws.com/selle/2026-05-04/24b626e5-6068-4fd5-88e7-c0e5ce3e2b19.jpg","fqdn":"sk-tk-mall.s3.amazonaws.com","domain":"sk-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /selle/2026-05-04/24b626e5-6068-4fd5-88e7-c0e5ce3e2b19.jpg HTTP/1.1\r\nHost: sk-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: dsXQNfRwRUNqFZHMB34PDpjd6Kb1rV5YIh1MZmRHzpYEFAdg4N5Gzzwg6JEv6SoM47KU9YqCNh4LOYJTQnN1FVTiExrEuAn5\r\nx-amz-request-id: Y6Q496ENER04FDM9\r\nDate: Sun, 17 May 2026 02:10:31 GMT\r\nLast-Modified: Sun, 03 May 2026 16:57:34 GMT\r\nETag: \"68e45e5b4888146cd95b8fc085f82470\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 2861985\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2861985,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 6000x4000, components 3","md5":"f0962d721ea9e12878c2b72fe88e6528","sha1":"81375a5cd44698ff4e5bdd1a54c20679953e0722","sha256":"330ace13b915370ad64812cab6bf7b141612a4c4f10b0ecd7e6d3160b03bdd73","sha512":"36b91adf48870bb205021f6975ef6e49b65315e16db779c736d349f3e4db2c8d838aecf37984fcebfbfbec502c12b924183124ecf54d25c75d64793a2088a177","ssdeep":"24576:r9n7zB6ubvuOJW9ckBNlCYvaF2vtllZ/3V+96XN03zbE4xWD:x796OuOc9ckPQF0/lliE4xWD","tlshash":"1e2533b4e6e70422fead41f70f06967a782109bd934d3bb1f1526083a6d2ac1fcd4766","first_seen":"2026-05-17T02:11:28.850814Z","last_seen":"2026-05-31T13:48:58.271755Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3240,"timings":{"blocked":1805,"dns":0,"connect":0,"send":0,"wait":366,"receive":1069,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-060a6d9e.fe6852d5.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:35.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-060a6d9e.fe6852d5.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:36 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"16980-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=McX2yfb3S1wIeW5tRR1LWp4WQlBPk%2BXRS8A3ERAwBmotw%2FVg4YiqWJrCSkVKbrt7otGVCh7egarqPjKr3lpLgiOoCy4GH7yKXTkq1Blf06o%2FeFI6moLjmEsmkYhr7lK%2F8EE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf162da9bbb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16980,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16976), with no line terminators","md5":"3b891de4266d98621563d3614863ebb2","sha1":"0d96522704675ef0d033ae42b3660f4b1f1eca9a","sha256":"7e763dfb34751054ce9005a3100e69ac9dc525e0bc382f691fabe7d9254a94e9","sha512":"6953f413f2e4322b8b2e25be1a0afd20c29f4c06cc96a14d45d8cae5d701d37554fd6a951c955be6d4af80dddf9e8819ec1882f01b36cdae195ddf201a72b655","ssdeep":"384:nGcBieJ03vKgXOGBvsFb5Q0RyCw6IJGzg0E5EQfqUUhDBusDJB7WmjX:n7BXG3JXOwD0RyCwPJGzg0wEQfqUUhDP","tlshash":"b3721b47d098bc4d9b2b92a2344f30e1b151a52d381658ebf6bd8dfb634cd203a1b779","first_seen":"2026-05-17T02:11:28.852592Z","last_seen":"2026-05-31T13:48:58.274154Z","times_seen":4,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/wap/api/sellerGoods!recommend_new.action?type=1\u0026pageSize=24\u0026pageNum=1\u0026lang=en","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:27.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=1\u0026pageSize=24\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://www.mkwhcsq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fyu3Jiiu1XSmWoS7Vcpsze%2BvGJxr%2Bieca6bGTNlQR8JSLsMgg61I%2B%2B3GZhFmTtrxI6L0POXHZISruGr%2FTGlU7jeuhOoPVV5a7rNGYjDM07S5UFw3H6d%2BUEB4DHj8%2BIh2bnc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf15fc18c5b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115803,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"aa5c2b88cc8fdb1dd6deee2ef9555506","sha1":"85545a6b1b4a4776611bfc7bf18a92d5b7f9ceeb","sha256":"2fdfe93f16c2deaa6c9acee51e309e7267b0aedb76cdbdb315479f2e868b6312","sha512":"e48ce73f1a515169ca2338fae5520b6313e44cfd5f628b522e91e8018fe4f5b7b1ccb5d13970056f9b35f46df67dd3d115f6f33a7879a077150b87650c9478c0","ssdeep":"1536:aLHFhWleercA6yZTJT0AR0TjS+05Ygbog65OqZ9n1nxCJUrKgk:aLHFgRcA6yrTb0TjS+yY4oTYqLT3KR","tlshash":"bab308a2c79892390f6801a544173a9f94fe822b9f734f95992cdf347eaccf53a2505c","first_seen":"2026-05-17T02:11:28.854623Z","last_seen":"2026-05-17T02:11:28.854623Z","times_seen":1,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/b07acf47-c478-464b-b17a-ba9226a7e00e.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.254.240","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /type/2023-03-29/b07acf47-c478-464b-b17a-ba9226a7e00e.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: +m8XTsDFtNkBP3G323VAmSbJNgsraw3/Q89xaqBZisDL4qMrwzNo34ZhpNnHXSLrbtXZJSGtKgODNFXgjQ6ZVk+qmbOoTttK\r\nx-amz-request-id: 49W6P17PB74Z2WC1\r\nDate: Sun, 17 May 2026 02:10:29 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"3cadf1789eb8f8d80a12e5ad0e19ea67\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 26582\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":26582,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"3cadf1789eb8f8d80a12e5ad0e19ea67","sha1":"90a7bb2b2bf9588a95f5895d19564e8e0d7a1b01","sha256":"4a1e05ded030983d325fa2a293dffeb39ce70d4948634927f6752dfc6d2f1dbe","sha512":"9236112d6c6dad19ae6b463f258f73caf2470a6f375251a68b7a2f36df53573861a75fe032c86ce6494978e164f514ffcc85e2b20fd04896b014b9a038397a06","ssdeep":"384:G0IuovjpguMrZYtx3ebUIAN+sXub/t4fgq0i9Iun1k2ij4i71P68:G5uoLubd4Ub0AM24ecIGBiHc8","tlshash":"cfc2bf834a448f837859d3ab7f631c408fce49ad85d5b8df11e74243bba673a008e96d","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-07-19T06:15:01.563243Z","times_seen":9896,"resource_available":false,"data":null}},"time_used":830,"timings":{"blocked":710,"dns":0,"connect":0,"send":0,"wait":118,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sk-tk-mall.s3.amazonaws.com/selle/2026-05-10/403a4e79-9e5b-47db-b074-a860c5d667fe.jpg","fqdn":"sk-tk-mall.s3.amazonaws.com","domain":"sk-tk-mall.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.149.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:28.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:2C:8D:84:29:A7:85:5C:5A:25:EF:75:23:F1:7F:09:73:A6:95:89","sha256":"B2:03:A8:4C:C0:84:F7:98:2E:76:5B:2E:DA:61:EE:81:14:BE:97:B6:D6:E3:81:4F:88:56:AA:E5:68:30:06:3D"}}},"request":{"raw":"GET /selle/2026-05-10/403a4e79-9e5b-47db-b074-a860c5d667fe.jpg HTTP/1.1\r\nHost: sk-tk-mall.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Tez6qL5krKZsVbZhOdaOA0ZCUoQsB85FZrCDiC79MMxIHC+xecXo5CvrD1itYN28Tn2yw5/GaBENeNUbq2IBGz7uadLG14D1\r\nx-amz-request-id: X5T8CNDQWHPTJ8JS\r\nDate: Sun, 17 May 2026 02:10:30 GMT\r\nLast-Modified: Sun, 10 May 2026 15:49:15 GMT\r\nETag: \"f56027536e2422675509a35a54de5144\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 311916\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":311916,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1440, components 3","md5":"f56027536e2422675509a35a54de5144","sha1":"2327a3c8be3ec40bbf89687735d202ccf1028a2a","sha256":"ecf2e8af939b59f008fba8a9317c4a3e519afd8417656e52cddae9027b5eb7b3","sha512":"71b2383a135b80586fcbafefda06de61418bd397653981fa80c3000ba3726e4b4237a504c2b770652a059b05c9d9a5fab76b8a0a76b6982bfe08d2016196c62a","ssdeep":"6144:/tWwwqiDADGozb50Fxr3pLyWKIEjwX0bit/HizD7asIdWr6omm9aRdYlVU:1W5jDqGozbKJ3hyVdL+t/HOPX6o2Cs","tlshash":"fd6423522c3aeb5ae4b9fd75e360f35cc2451a4e83a195351f8200c7be87b10ac3a64b","first_seen":"2026-05-17T02:11:28.856894Z","last_seen":"2026-05-31T13:48:58.315155Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1574,"timings":{"blocked":180,"dns":0,"connect":0,"send":0,"wait":364,"receive":1030,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/css/chunk-5f9dbc55.cd704402.css","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:33.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /css/chunk-5f9dbc55.cd704402.css HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:34 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"1252-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nK%2BpIvLBvfhPn6if0mPi7Hmqst43cDtPCRddJljEF0jCSIMokJZkXHxxX3NHsGkjvU%2BvdXykbEZf%2BHOyzIEaID4M8CcEgKlSzLOm41SkTnLG0cg8Zrc08o3F9Nyb65WCQZ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf16207964b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1252,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1252), with no line terminators","md5":"b50aad23d365ccde72e78b8313b4e7c2","sha1":"82e1ed3080ed69d8b4384e17044cdcf837769a03","sha256":"e36128c4817614792876d24a43ab454dd8cdd52f66965bb00f14406da9011f3c","sha512":"3929980e42defe71e881ffa97bf69c5d70251a4adf0eaabc203dc87188f3d9da61887ecf8f793b9c6a2861a6b24484417bd3adc1cd46a41cf2a0f14082f92dd7","ssdeep":"","tlshash":"3f21ee67b51163ada3bb689413b29c8c7414c840f5ebebfae906411dc7c72973691388","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.522312Z","times_seen":7301,"resource_available":false,"data":null}},"time_used":709,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":709,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-5f9dbc55.f745e98b.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:37.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-5f9dbc55.f745e98b.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:37 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"3690-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eqn%2BKEyPCuAqTQyHq32t3JBBoXeopqVx5LhIxs7sWk%2BCbUoVBxGymzXfO1loE3OrwvjV%2B5Tay5USjY%2BHPHi65S8p6ipe%2B8Pesr9kCrQ1uu7Wuk3pzQKtvOoUjCodsCrYlEM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1636f9e2b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3690,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3686), with no line terminators","md5":"9176aba017e5fbe81d24b18e2da6604b","sha1":"6a0ccb7a2fe025bf5c646d66b3f6b6d2f5d43f35","sha256":"727bb0ecbb4ee487c4d6bdcd0f9c4fe4f15e7c9f0ece2c033997fda7a9239eb5","sha512":"adfd5fb5e1297d7e01c87e619ddb6628d2e8abbbd952f52cf43120603a023e57427698c270b1dc18e9902a873b7d5339b22f310fc403aeb902ad8fb546831684","ssdeep":"","tlshash":"62715546412179ec8bb9155231a96024e1f109d8680dac93edbcdcfa63e483c2b6d3fd","first_seen":"2025-04-08T10:46:39.888305Z","last_seen":"2026-06-06T14:40:04.304787Z","times_seen":153,"resource_available":false,"data":null}},"time_used":680,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":680,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-7537f99d.450ba03c.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:37.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-7537f99d.450ba03c.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:37 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"11731-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tkt8FKzvMZCXDYTW790I7ZX4WndIBkCMTUuq9ZTaZn7TZDCQevP1Nnx0grRjbthKuU%2F%2B%2B5tNLIt0JfGdmTIMCZKPaZGeJ3T7wpQ4MIu0I09i4%2FFyHstqPqvRWxuvMBSFwYM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf1639f9f0b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11731,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11731), with no line terminators","md5":"4f02483542d7755cb47aac0227f0c7a4","sha1":"0221baa5c2b05c23bee7fb8b42294fe85da23e05","sha256":"05cae0e39626d4b2fa27f8a658fa4d65f3d93f05c93f573f1bafe5eb7ce0b6dd","sha512":"e27d0b00cc938bc76675f768358a6ab085574e869297cd8692748de036533c4f7d2b56cf8516283574475a3649adbb22d6fff86c53e8d6696bc89f1e1e406699","ssdeep":"192:X33sODCMSXc6UJ6gCA95PR90wXEWFs5d24urH6+SVu+4ceN6IrI3O:XnsAKXjUOMZUOEw6j4+4ceNF","tlshash":"5e320a4eb0b6e6f8849b00223006677474717bd5f00859e9b7fcdce85949ea8272b37e","first_seen":"2026-05-17T02:11:28.865861Z","last_seen":"2026-05-31T13:48:58.286905Z","times_seen":4,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mkwhcsq.com/js/chunk-c842ca02.63dfb0b9.js","fqdn":"www.mkwhcsq.com","domain":"mkwhcsq.com","tld":"com"},"ip":{"addr":"104.21.51.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.mkwhcsq.com/","date":"2026-05-17T02:10:38.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mkwhcsq.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 12:06:45 GMT","end":"Sat, 08 Aug 2026 12:06:44 GMT"},"fingerprint":{"sha1":"BC:9F:AC:4F:88:79:A3:1D:11:AA:04:52:C7:A4:23:B8:6F:0F:13:1B","sha256":"AF:6D:A9:55:8B:6C:D4:BB:B1:5F:23:E0:82:7A:66:D2:40:84:C9:3A:AD:16:E3:EE:20:8E:FE:4C:F4:5E:12:A5"}}},"request":{"raw":"GET /js/chunk-c842ca02.63dfb0b9.js HTTP/1.1\r\nHost: www.mkwhcsq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 02:10:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"11287-1777815889000\"\r\nlast-modified: Sun, 03 May 2026 13:44:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIFtnaguIPs4GNMKlaSolI838k3%2FhtDIZa5jwgYp0qdBLLFocNvtlak6n9exhmhnavIs0xQjamLUNm8tDHfyR3FOfT82lS1QDUprATWh1T6JvDcMJCn9nJ3wGuT45nr1mFs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcf16403a0ab4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11287,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11257), with no line terminators","md5":"5c41f55a31cb3b861cfea3f7e23dc538","sha1":"753f2534faa6318d7a316d5a63676d601151cbbe","sha256":"2d7e17c9f58dad80c145ff80be192c2a347f5da66f5a7a3616180f517a4ffe4b","sha512":"318e4f8ae1778cdba3d4ee951edecf74a30f6b773d4f36bf58e3462da850967f622eb61529494f100863fb6dced8e198f07aa999a273a1efa8266b0cc6ccf93a","ssdeep":"192:jVthRrXBra0UwsE/Vnwk7iw5X6SHEvPXw+s5qtwyO/3aQ5QQY3tO/sC4V/56RXEC:jzXTUws8Vw+ik6YEv/sD/h5Qf3tO/sCn","tlshash":"3c32d68c3991bcc90a17b4f5b06b7456b0868e91540d0941eff488fa7ebbc6b571332b","first_seen":"2025-04-08T11:27:57.652432Z","last_seen":"2026-06-06T14:40:04.442051Z","times_seen":94,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.mkwhcsq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}