{"report_id":"174d3254-71c8-4e4e-814d-16c70981ac46","version":6,"status":"done","tags":[],"date":"2026-03-17T00:13:38Z","url":{"schema":"http","addr":"kklarhormendosmod.com","fqdn":"kklarhormendosmod.com","domain":"kklarhormendosmod.com","tld":"com"},"ip":{"addr":"64.89.161.43","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"kklarhormendosmod.com/","fqdn":"kklarhormendosmod.com","domain":"kklarhormendosmod.com","tld":"com"},"title":"DenizBank İnternet Bankacılığı","dom":{"size":22613,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (381)","md5":"56ab130b08992f31153247b9a060eaff","sha1":"f5e22dcf586c87738b5423c9f0250c87758d164c","sha256":"e8d8fa0ce9927f027276b31099c321b72207cebc33dae711702b8d39d46dd120","sha512":"003b910654ccbe92c05b280d28efdad348550b775feb111801272b50871cf56a7a418092c092bc545ee30663192cc24c30991ff314eb5886cbdc3f3ac95511e9","ssdeep":"192:dNroJSeJ7F5N2JtT0QsmwmiG8283mXXHeo5D3PQraai2izliWqlJs8fb:r8bN230QsHmNDymAi2ipilJsg","tlshash":"12a2502054fa14370193d0e875b56f1bafa6c603c90a59597aac0bc41ff7e62d8db29c","dom_hash":"domhashf94314e4537084f06e2f185e52907e8c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kklarhormendosmod.com","fqdn":"kklarhormendosmod.com","domain":"kklarhormendosmod.com","tld":"com"},"ip":{"addr":"64.89.161.43","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-21T00:13:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kklarhormendosmod.com","ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-03-02","domain_rank":0,"first_seen":"2026-03-17T00:13:39.091825Z","last_seen":"2026-03-17T00:13:39.091825Z","alert_count":45,"request_count":15,"received_data":1568288,"sent_data":7530,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kklarhormendosmod.com/","fqdn":"kklarhormendosmod.com","domain":"kklarhormendosmod.com","tld":"com"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8fa8454627f93e7eab14f334969614b7","sha1":"ce715278a70d422b27e3c4cc3d6d7ab7bddc80b4","sha256":"f264c8a82e8064087e1c8bde55bd1359ad5debf8f7e60fb5cf86d7958975bd80","sha512":"f5ee2fa64ccb92ef09863541a72592abb6f1fe438f740ac88ae4eab611d130ed11eaffb506a3546bb8b0526ac2eacc52f976e0b181b8738ff6b27f0473276a38","ssdeep":"","tlshash":"f1411d0824f319a4862775be7baf5104313464433405dda5bfacea401f2ae69a5f3bdd","size":2388,"data":"","first_seen":"2026-02-13T02:48:31.586195Z","last_seen":"2026-03-17T00:32:49.197533Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kklarhormendosmod.com/deniz_files_files/logo-light.svg","fqdn":"kklarhormendosmod.com","domain":"kklarhormendosmod.com","tld":"com"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kklarhormendosmod.com/","date":"2026-03-17T00:13:13.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kklarhormendosmod.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 10:24:23 GMT","end":"Sun, 14 Jun 2026 10:24:22 GMT"},"fingerprint":{"sha1":"71:A3:CC:C7:88:A4:4F:9E:D9:CB:35:51:36:C3:78:AD:FA:B2:A6:2E","sha256":"F4:37:41:E0:4D:45:06:A3:26:71:39:53:74:EB:F4:AD:B2:86:17:D2:F5:58:60:83:6C:86:DD:00:DC:99:D8:7B"}}},"request":{"raw":"GET /deniz_files_files/logo-light.svg HTTP/1.1\r\nHost: kklarhormendosmod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kklarhormendosmod.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 00:13:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 14 Mar 2024 19:47:06 GMT\r\netag: \"2c141-65f3543a-8c41540e265a6a90;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7076\r\ndate: Tue, 17 Mar 2026 00:13:13 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":180545,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3140e053e7a3dde67e7b2c81b23771d2","sha1":"5d0558f8da94ace88a622c70b8857bde38d7ba12","sha256":"3da913d79fff46cfe4d58d56e141cfcb31865606284507f7a530db69394330fb","sha512":"1b1a21016b9b99d5b58949777b260741fc9f2241ada76cc45482cb45b4f8a3ea32b6a4af53016bb2eb7b72ea3143e22826b366af723b37e383d1f4109eaaf2e5","ssdeep":"768:CvgpvgXvgdvgrvgRvgfvglvgTvg5vgnvgtvg7vgjvgJvg3vg9vgLvgxvg/vgFvgl:RJA3KuhQbJ","tlshash":"fc0457e31b60a25067d3e40eef61a5a4651be1f9d93382c6b2afc74957e3bc8f502d10","first_seen":"2023-05-01T10:01:38Z","last_seen":"2026-05-15T18:36:15.598199Z","times_seen":177,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kklarhormendosmod.com/deniz_files_files/assets/icomoon.dec58148a6d30404f2ff.ttf?hblziw","fqdn":"kklarhormendosmod.com","domain":"kklarhormendosmod.com","tld":"com"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kklarhormendosmod.com/","date":"2026-03-17T00:13:14.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kklarhormendosmod.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 10:24:23 GMT","end":"Sun, 14 Jun 2026 10:24:22 GMT"},"fingerprint":{"sha1":"71:A3:CC:C7:88:A4:4F:9E:D9:CB:35:51:36:C3:78:AD:FA:B2:A6:2E","sha256":"F4:37:41:E0:4D:45:06:A3:26:71:39:53:74:EB:F4:AD:B2:86:17:D2:F5:58:60:83:6C:86:DD:00:DC:99:D8:7B"}}},"request":{"raw":"GET /deniz_files_files/assets/icomoon.dec58148a6d30404f2ff.ttf?hblziw HTTP/1.1\r\nHost: kklarhormendosmod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kklarhormendosmod.com/deniz_files_files/styles.2acf710a921b37dce911.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 00:13:14 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Thu, 14 Mar 2024 19:56:16 GMT\r\netag: \"25174-65f35660-bcd92e14887744d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 74691\r\ndate: Tue, 17 Mar 2026 00:13:14 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":151924,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"dec58148a6d30404f2ffab66e5a7810c","sha1":"53829093746207f6dc6d58fd08706a5054d870a9","sha256":"94a465998fa218c8818e3e07f1978e5e037eb39d1d40a58a48e54ae1b297e934","sha512":"7084071a5b3f1e2849b81bda4f0cb62e1015a8e4d67a5af2eb1bffc4e87975e537e1afb58164728ff415c969bc3b098ba858a003c39d882589e16d93ad222b2e","ssdeep":"3072:Sow2oq1g9HH1Zs87PxWVuFO/GskgeXXVEUUC8qNPQQBcQC+tKOZsliiWqmhcoEu:SowC1g9HH12CPxWV+O/Glg6EUUC8EQ1N","tlshash":"5ce36c2bcb8edbfdfc5292b54ab251210ce9de21173ed65fe9094c94f4184e84c38b99","first_seen":"2024-09-14T15:49:07Z","last_seen":"2026-04-08T14:56:12.938089Z","times_seen":19,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kklarhormendosmod.com/favicon.ico","fqdn":"kklarhormendosmod.com","domain":"kklarhormendosmod.com","tld":"com"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kklarhormendosmod.com/","date":"2026-03-17T00:13:14.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kklarhormendosmod.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 10:24:23 GMT","end":"Sun, 14 Jun 2026 10:24:22 GMT"},"fingerprint":{"sha1":"71:A3:CC:C7:88:A4:4F:9E:D9:CB:35:51:36:C3:78:AD:FA:B2:A6:2E","sha256":"F4:37:41:E0:4D:45:06:A3:26:71:39:53:74:EB:F4:AD:B2:86:17:D2:F5:58:60:83:6C:86:DD:00:DC:99:D8:7B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kklarhormendosmod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kklarhormendosmod.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Mon, 02 Mar 2026 10:58:55 GMT\r\netag: \"328-69a56d6f-28b8ed69e848b86d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Tue, 17 Mar 2026 00:13:14 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kklarhormendosmod.com/deniz_files_files/qrPhoto.jpg","fqdn":"kklarhormendosmod.com","domain":"kklarhormendosmod.com","tld":"com"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kklarhormendosmod.com/","date":"2026-03-17T00:13:13.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kklarhormendosmod.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 10:24:23 GMT","end":"Sun, 14 Jun 2026 10:24:22 GMT"},"fingerprint":{"sha1":"71:A3:CC:C7:88:A4:4F:9E:D9:CB:35:51:36:C3:78:AD:FA:B2:A6:2E","sha256":"F4:37:41:E0:4D:45:06:A3:26:71:39:53:74:EB:F4:AD:B2:86:17:D2:F5:58:60:83:6C:86:DD:00:DC:99:D8:7B"}}},"request":{"raw":"GET /deniz_files_files/qrPhoto.jpg HTTP/1.1\r\nHost: kklarhormendosmod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kklarhormendosmod.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 00:13:13 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Mar 2024 19:54:20 GMT\r\netag: \"1fef-65f355ec-9b42529675a08fa9;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 8175\r\ndate: Tue, 17 Mar 2026 00:13:13 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":8175,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 161x158, components 3","md5":"3d4067f584e35f099657f62d992f3cc6","sha1":"71d99f9e7f15fc94513185938c47f63d9c9ed7af","sha256":"4538afe85626f45b4995af84bf77c62e84b31afbe49ae7c763f20aea7f89ad26","sha512":"87206f0fa524f49f57de2dad90c629fcd3bf7b4173e698290c0b89be8a6e47b76a24fa5ab40e003130f688a9277b15ed9afc3063cbe6a80e4892e58c74a07ec2","ssdeep":"192:Ivg4exiyI223ic1XvrN0NmvzJj2kG+eizYBE/OwuBhEA3KT:IINxNj23iYXvrAmvdj2rGkQ+l3KT","tlshash":"d2f1ae5b97b16aec7d031bb25934bf8b7df5d92673c332a189e0064126c4adcc83b902","first_seen":"2024-09-14T15:49:07Z","last_seen":"2026-03-17T00:32:49.185369Z","times_seen":5,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kklarhormendosmod.com/deniz_files_files/spring.jpg","fqdn":"kklarhormendosmod.com","domain":"kklarhormendosmod.com","tld":"com"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kklarhormendosmod.com/","date":"2026-03-17T00:13:14.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kklarhormendosmod.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 10:24:23 GMT","end":"Sun, 14 Jun 2026 10:24:22 GMT"},"fingerprint":{"sha1":"71:A3:CC:C7:88:A4:4F:9E:D9:CB:35:51:36:C3:78:AD:FA:B2:A6:2E","sha256":"F4:37:41:E0:4D:45:06:A3:26:71:39:53:74:EB:F4:AD:B2:86:17:D2:F5:58:60:83:6C:86:DD:00:DC:99:D8:7B"}}},"request":{"raw":"GET /deniz_files_files/spring.jpg HTTP/1.1\r\nHost: kklarhormendosmod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kklarhormendosmod.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 00:13:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Mar 2024 19:49:10 GMT\r\netag: \"514aa-65f354b6-3d9ad57b2d98d795;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 332970\r\ndate: Tue, 17 Mar 2026 00:13:14 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":332970,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1920, components 3","md5":"4a44bbe5ab95e33ad65ad5e111a3e716","sha1":"6b7147f76453c032b5fb8bc4209ed77034e311ac","sha256":"ca8e907c10b418e455dee845fb08993fa1f8edb7a3f890f7a19a8011e472ee3d","sha512":"0b0198c2672d871f5652222c997ffba457cf500f1ca7993b03a9efdf71d527416dcc1f605c898e8846d068d8f978508b43a009f897efd38bb4021d95bf4ce3de","ssdeep":"6144:Oea9ocC9CR8yXTCo/4fYRNOQYsULq38HmZ9TZb/YDvDB15:Y9HC9s8yGYP2BLdHcTt/WvDBX","tlshash":"f26423083e27e455ee6e0779532e97d000a485bd50e29e721b027299a3e57b3df86ccf","first_seen":"2023-05-01T09:44:05Z","last_seen":"2026-03-17T00:32:49.187625Z","times_seen":28,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kklarhormendosmod.com/deniz_files_files/assets/opensans-bold-webfont.7b013a3110831768093f.woff2","fqdn":"kklarhormendosmod.com","domain":"kklarhormendosmod.com","tld":"com"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kklarhormendosmod.com/","date":"2026-03-17T00:13:14.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kklarhormendosmod.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 10:24:23 GMT","end":"Sun, 14 Jun 2026 10:24:22 GMT"},"fingerprint":{"sha1":"71:A3:CC:C7:88:A4:4F:9E:D9:CB:35:51:36:C3:78:AD:FA:B2:A6:2E","sha256":"F4:37:41:E0:4D:45:06:A3:26:71:39:53:74:EB:F4:AD:B2:86:17:D2:F5:58:60:83:6C:86:DD:00:DC:99:D8:7B"}}},"request":{"raw":"GET /deniz_files_files/assets/opensans-bold-webfont.7b013a3110831768093f.woff2 HTTP/1.1\r\nHost: kklarhormendosmod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kklarhormendosmod.com/deniz_files_files/styles.2acf710a921b37dce911.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 00:13:14 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 14 Mar 2024 20:01:06 GMT\r\netag: \"31e8-65f35782-e7ea82d18587b4c5;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 12776\r\ndate: Tue, 17 Mar 2026 00:13:14 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":12776,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12776, version 1.0","md5":"7b013a3110831768093ffa40218ef434","sha1":"e32cf89ddb775dff039fa59c84fbd6f5d350ceac","sha256":"b582e5e36135cfe697ec9cfbb06ff7407a7d89a9e4a1287cfdd905cc3f9669e5","sha512":"677fdfe4cfc1f8dcf437b2e7019dcd293d850dd9536e03efd5990fb15c7aeb9345f8298c5f10f1f558515464c0b89c6825d6db4a2807663688ee27c272bd9bcd","ssdeep":"192:ztZmA/8wJQ1+GOMM78e6c1Kg2GLcR8B4ptUKR5VYmSKEXH7z4qYy6dh+RoeagZNk:ztZFhJgc1RcRn/VYH7MGVZNk","tlshash":"6342c0a1b3017aa6f776ebf90062205eaa81d43379f508c49f91f05b2c317aad43f568","first_seen":"2023-05-01T10:01:38Z","last_seen":"2026-04-08T14:56:12.940084Z","times_seen":82,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kklarhormendosmod.com/deniz_files_files/world.svg","fqdn":"kklarhormendosmod.com","domain":"kklarhormendosmod.com","tld":"com"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kklarhormendosmod.com/","date":"2026-03-17T00:13:13.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kklarhormendosmod.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 10:24:23 GMT","end":"Sun, 14 Jun 2026 10:24:22 GMT"},"fingerprint":{"sha1":"71:A3:CC:C7:88:A4:4F:9E:D9:CB:35:51:36:C3:78:AD:FA:B2:A6:2E","sha256":"F4:37:41:E0:4D:45:06:A3:26:71:39:53:74:EB:F4:AD:B2:86:17:D2:F5:58:60:83:6C:86:DD:00:DC:99:D8:7B"}}},"request":{"raw":"GET /deniz_files_files/world.svg HTTP/1.1\r\nHost: kklarhormendosmod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kklarhormendosmod.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 00:13:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 14 Mar 2024 19:47:06 GMT\r\netag: \"515-65f3543a-e144f5065be18fd4;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 662\r\ndate: Tue, 17 Mar 2026 00:13:13 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1301,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f17d2fe7f0c42073b11c1434a9a4da7","sha1":"95775c691ea3e941f25f440085512e5b356fe888","sha256":"d5b36f08a46e0a0ef81b828bb9d05df63f1f7391521d238b82c5c3ce31782b05","sha512":"d4e9261966f10d227b9bd4c20702d95b43471afc6ce3d011fa1ba2cb65b241a7fa2fdb194107ca3ed473ef1f6aea4f2f6859433ac4c73df5ad4758ebebcbc2c7","ssdeep":"","tlshash":"132145e693a920186aeb4a78ff3780116a1f12ffb7e78646495e83c05893490e585c14","first_seen":"2023-05-01T10:01:38Z","last_seen":"2026-04-08T14:56:12.966141Z","times_seen":70,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kklarhormendosmod.com/deniz_files_files/denizbank-mobile.jpg","fqdn":"kklarhormendosmod.com","domain":"kklarhormendosmod.com","tld":"com"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kklarhormendosmod.com/","date":"2026-03-17T00:13:13.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kklarhormendosmod.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 10:24:23 GMT","end":"Sun, 14 Jun 2026 10:24:22 GMT"},"fingerprint":{"sha1":"71:A3:CC:C7:88:A4:4F:9E:D9:CB:35:51:36:C3:78:AD:FA:B2:A6:2E","sha256":"F4:37:41:E0:4D:45:06:A3:26:71:39:53:74:EB:F4:AD:B2:86:17:D2:F5:58:60:83:6C:86:DD:00:DC:99:D8:7B"}}},"request":{"raw":"GET /deniz_files_files/denizbank-mobile.jpg HTTP/1.1\r\nHost: kklarhormendosmod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kklarhormendosmod.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 00:13:13 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Mar 2024 19:47:06 GMT\r\netag: \"1f7b-65f3543a-43dbe4685b76d804;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 8059\r\ndate: Tue, 17 Mar 2026 00:13:13 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":8059,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 240x240, components 3","md5":"2add520df4436c32fca93b2d5bd80300","sha1":"3ea1646799e51de12ff2cbd35040d7eedebc5623","sha256":"54e92ad9930ef375b8f4e1a1fe7fe5c86d43d7ad00a955c5df818e26489049b8","sha512":"df205a31623796d3ebaaecf4e471e0c7061b49185ddb8bbf82a940fa6e7b3c59509ea9e72f3127c3007c6f0588c6442aeb20703109c6412279451aa7ce2ee7b7","ssdeep":"192:wxe9BfDzVbs3VKDQXy1/dMmdVys4f3MqbUCF:P9BdqVy2y35as40KUCF","tlshash":"6ef18e24f4ded3d0ef888c3052777bbb2a8eaa8221b3f6445d74b14155eee172d13951","first_seen":"2023-05-01T09:44:05Z","last_seen":"2026-04-08T14:56:12.933975Z","times_seen":72,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kklarhormendosmod.com/deniz_files_files/login-footer-logo.svg","fqdn":"kklarhormendosmod.com","domain":"kklarhormendosmod.com","tld":"com"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kklarhormendosmod.com/","date":"2026-03-17T00:13:13.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kklarhormendosmod.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 10:24:23 GMT","end":"Sun, 14 Jun 2026 10:24:22 GMT"},"fingerprint":{"sha1":"71:A3:CC:C7:88:A4:4F:9E:D9:CB:35:51:36:C3:78:AD:FA:B2:A6:2E","sha256":"F4:37:41:E0:4D:45:06:A3:26:71:39:53:74:EB:F4:AD:B2:86:17:D2:F5:58:60:83:6C:86:DD:00:DC:99:D8:7B"}}},"request":{"raw":"GET /deniz_files_files/login-footer-logo.svg HTTP/1.1\r\nHost: kklarhormendosmod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kklarhormendosmod.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 00:13:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 14 Mar 2024 19:47:06 GMT\r\netag: \"8bf-65f3543a-2b1046e2974ab4c8;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1126\r\ndate: Tue, 17 Mar 2026 00:13:13 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2239,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0ddebba4f15d5e966e993727605c03d","sha1":"df6ba82ac9022f0309037baa9dbf6fbcfaaca543","sha256":"59c1a112d5d610c1399aa46d5b549c5aad1e4b283aaf785545e818d053f25378","sha512":"81c8fa6a6477529130de72ab6e265aa9ba209e6ce5b4f8440961ab57241cf214604c6da5c6aca8a07a0a4191813c093cbd19b9f81382a2e133e29033863460b3","ssdeep":"","tlshash":"9d4174e10b74a0b890e71f2cef350d95ae8ba8fed7614380b29c642b9b67e459503d58","first_seen":"2023-05-01T10:01:38Z","last_seen":"2026-05-15T18:36:15.583861Z","times_seen":122,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kklarhormendosmod.com/deniz_files_files/assets/opensans-regular-webfont.a66a53e7f788b1ab7e41.woff2","fqdn":"kklarhormendosmod.com","domain":"kklarhormendosmod.com","tld":"com"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kklarhormendosmod.com/","date":"2026-03-17T00:13:14.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kklarhormendosmod.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 10:24:23 GMT","end":"Sun, 14 Jun 2026 10:24:22 GMT"},"fingerprint":{"sha1":"71:A3:CC:C7:88:A4:4F:9E:D9:CB:35:51:36:C3:78:AD:FA:B2:A6:2E","sha256":"F4:37:41:E0:4D:45:06:A3:26:71:39:53:74:EB:F4:AD:B2:86:17:D2:F5:58:60:83:6C:86:DD:00:DC:99:D8:7B"}}},"request":{"raw":"GET /deniz_files_files/assets/opensans-regular-webfont.a66a53e7f788b1ab7e41.woff2 HTTP/1.1\r\nHost: kklarhormendosmod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kklarhormendosmod.com/deniz_files_files/styles.2acf710a921b37dce911.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 00:13:14 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 14 Mar 2024 19:56:50 GMT\r\netag: \"3108-65f35682-a84366514c12d8fb;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 12552\r\ndate: Tue, 17 Mar 2026 00:13:14 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":12552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12552, version 1.0","md5":"a66a53e7f788b1ab7e41429e94d5fecf","sha1":"818f0d5a1110b0ae7c58104a51cde30f088fac84","sha256":"be3979aa66ab98b74f4c323b1c194cba444de65913e489d5786e0c7fd8f310c0","sha512":"1e086b72a2ceb26c3ad2f98f2e59e6306f14920b16ab036ad291f85811164f29e97e968b6a224305c317f3dea227e80355101ab365aca0fbb8ab99ec7a87426f","ssdeep":"384:nzJfgx+bFZMyADxT0G8oveHgXqR2gnjGU:zJ4xMvAPWHgRU","tlshash":"0142bf67302340f2d9d186336cd979bf098a9127b35694ac0d07a09bc49039efbeef19","first_seen":"2023-05-01T10:01:38Z","last_seen":"2026-04-08T14:56:12.93732Z","times_seen":83,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kklarhormendosmod.com/","fqdn":"kklarhormendosmod.com","domain":"kklarhormendosmod.com","tld":"com"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-17T00:13:13.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kklarhormendosmod.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 10:24:23 GMT","end":"Sun, 14 Jun 2026 10:24:22 GMT"},"fingerprint":{"sha1":"71:A3:CC:C7:88:A4:4F:9E:D9:CB:35:51:36:C3:78:AD:FA:B2:A6:2E","sha256":"F4:37:41:E0:4D:45:06:A3:26:71:39:53:74:EB:F4:AD:B2:86:17:D2:F5:58:60:83:6C:86:DD:00:DC:99:D8:7B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kklarhormendosmod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 17 Mar 2026 00:13:13 GMT\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":22707,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (401)","md5":"b4cb35e2fae5e2b41aff91a10008e9c7","sha1":"efcde852c1cb4a6d5586b746aaf5aa5430ccd0a8","sha256":"d255ab29fe26e278b26e3bda65caf3e3f869ed61858da028d6da7391697df96d","sha512":"49c2abb6ad80549b97009cf0740bb1d21b4c617ea3589d0322cf1730b263a5b45d4095e92fefdaad351b7e8aadc05d4935daa76028c2d94429200a91d292b5b3","ssdeep":"192:/NrojSeJ7F5N2JtT0QsvYsiG8281mXXVeo5D3PQraai2izliWqlJs8fp:VSbN230QsQsNDimKi2ipilJs+","tlshash":"74a2602054fa14370193d0d876b56f1bafa6c603d90a59597aac0fc41ff7e62d8cb29c","first_seen":"2026-02-13T02:48:31.563379Z","last_seen":"2026-03-17T00:32:49.184512Z","times_seen":3,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":95,"dns":18,"connect":34,"send":0,"wait":49,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kklarhormendosmod.com/deniz_files_files/enbd.png","fqdn":"kklarhormendosmod.com","domain":"kklarhormendosmod.com","tld":"com"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kklarhormendosmod.com/","date":"2026-03-17T00:13:13.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kklarhormendosmod.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 10:24:23 GMT","end":"Sun, 14 Jun 2026 10:24:22 GMT"},"fingerprint":{"sha1":"71:A3:CC:C7:88:A4:4F:9E:D9:CB:35:51:36:C3:78:AD:FA:B2:A6:2E","sha256":"F4:37:41:E0:4D:45:06:A3:26:71:39:53:74:EB:F4:AD:B2:86:17:D2:F5:58:60:83:6C:86:DD:00:DC:99:D8:7B"}}},"request":{"raw":"GET /deniz_files_files/enbd.png HTTP/1.1\r\nHost: kklarhormendosmod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kklarhormendosmod.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 00:13:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Mar 2024 19:47:06 GMT\r\netag: \"ede-65f3543a-53dca435a07d78da;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3806\r\ndate: Tue, 17 Mar 2026 00:13:13 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":3806,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 186 x 72, 8-bit/color RGBA, non-interlaced","md5":"58cf11a4b5f8ebdc29ec2e7b787c8d69","sha1":"cd2686b1f04cfa4afb69b228fd7177d65e907d32","sha256":"1b74331ad061c583ad54561f95596a8481b95d863a431fc4daf3a9ee7d151975","sha512":"799783bae62adfec92e17400a664b4dd4b30efa551c3c81f61daba4b61c9f55da657b74e867c30a961823b509054fa452c98380a41980549824f56893ab9d39b","ssdeep":"","tlshash":"03716cf702df5f9ac2d2c5aaaaf36f300595d67182ed6adc0a124a502f0e2f411b0466","first_seen":"2023-05-01T09:44:05Z","last_seen":"2026-05-15T18:36:15.585387Z","times_seen":174,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kklarhormendosmod.com/deniz_files_files/assets/opensans-semibold-webfont.1045337df148fc781940.woff2","fqdn":"kklarhormendosmod.com","domain":"kklarhormendosmod.com","tld":"com"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kklarhormendosmod.com/","date":"2026-03-17T00:13:14.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kklarhormendosmod.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 10:24:23 GMT","end":"Sun, 14 Jun 2026 10:24:22 GMT"},"fingerprint":{"sha1":"71:A3:CC:C7:88:A4:4F:9E:D9:CB:35:51:36:C3:78:AD:FA:B2:A6:2E","sha256":"F4:37:41:E0:4D:45:06:A3:26:71:39:53:74:EB:F4:AD:B2:86:17:D2:F5:58:60:83:6C:86:DD:00:DC:99:D8:7B"}}},"request":{"raw":"GET /deniz_files_files/assets/opensans-semibold-webfont.1045337df148fc781940.woff2 HTTP/1.1\r\nHost: kklarhormendosmod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kklarhormendosmod.com/deniz_files_files/styles.2acf710a921b37dce911.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 00:13:14 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 14 Mar 2024 19:55:22 GMT\r\netag: \"3184-65f3562a-404caa3788626141;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 12676\r\ndate: Tue, 17 Mar 2026 00:13:14 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":12676,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12676, version 1.0","md5":"1045337df148fc781940fc87f29361ba","sha1":"0a68e64e217353efae512771a88ad6b0449db886","sha256":"a085c2f1e7df8cdded779fa68b0ce2e0d31d3352ed8d8238cb540f35fa20cf0d","sha512":"1ff81d8d26030aa90f4cf2ed70626b6ad9b9a1453f316c9f1530e62e999d146b7d7bacd700cfe963457b556c40f8cb030564607709fd8b7a374ebbe434349e81","ssdeep":"384:LKktBXOxXz86s/woYxKU8yh3mY7ehRG19e:WktBaSwoazdh2Y7wP","tlshash":"2142c0b0a2a4295cc74a0ab829d8bf05c67d425bc1105b1d315f60377c029aec4f9fca","first_seen":"2023-05-01T10:01:38Z","last_seen":"2026-04-08T14:56:12.960416Z","times_seen":83,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kklarhormendosmod.com/deniz_files_files/styles.2acf710a921b37dce911.css","fqdn":"kklarhormendosmod.com","domain":"kklarhormendosmod.com","tld":"com"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kklarhormendosmod.com/","date":"2026-03-17T00:13:13.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kklarhormendosmod.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 10:24:23 GMT","end":"Sun, 14 Jun 2026 10:24:22 GMT"},"fingerprint":{"sha1":"71:A3:CC:C7:88:A4:4F:9E:D9:CB:35:51:36:C3:78:AD:FA:B2:A6:2E","sha256":"F4:37:41:E0:4D:45:06:A3:26:71:39:53:74:EB:F4:AD:B2:86:17:D2:F5:58:60:83:6C:86:DD:00:DC:99:D8:7B"}}},"request":{"raw":"GET /deniz_files_files/styles.2acf710a921b37dce911.css HTTP/1.1\r\nHost: kklarhormendosmod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kklarhormendosmod.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 00:13:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 Mar 2024 19:47:04 GMT\r\netag: \"bd1e3-65f35438-d3d0792261410775;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 116567\r\ndate: Tue, 17 Mar 2026 00:13:13 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":774627,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53143), with CRLF line terminators","md5":"6d2a6fce83ad7479292ea83a4c803752","sha1":"9d95bf34e34867ccf866df8827b0393049e1dc6a","sha256":"856ec9bc6ad7173733cc30edace4900e732c9fcc160225deaefa061f47268a8f","sha512":"52a318191690b654907247ff9c119fa024f41928727ad16b12e07aa74635813722d51b98d274c833089ea14e3846631c8210ef79f15cd9209ed6ab35db60439e","ssdeep":"6144:/RTsyc/lV/q3SYiLENM6HN26rLPn5TS0raXhpXv333iaAKiX7apNBZvFU1yv4BBJ:/RTsN8zqYvqPQ+QawedDLXix","tlshash":"bff4f772f654302db627c66aa4d0b7ac293ad151e7220ffef503a23887c95d70367a1d","first_seen":"2026-02-13T02:48:31.570557Z","last_seen":"2026-03-17T00:32:49.186515Z","times_seen":3,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kklarhormendosmod.com/deniz_files_files/loading.gif","fqdn":"kklarhormendosmod.com","domain":"kklarhormendosmod.com","tld":"com"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kklarhormendosmod.com/","date":"2026-03-17T00:13:13.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kklarhormendosmod.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 10:24:23 GMT","end":"Sun, 14 Jun 2026 10:24:22 GMT"},"fingerprint":{"sha1":"71:A3:CC:C7:88:A4:4F:9E:D9:CB:35:51:36:C3:78:AD:FA:B2:A6:2E","sha256":"F4:37:41:E0:4D:45:06:A3:26:71:39:53:74:EB:F4:AD:B2:86:17:D2:F5:58:60:83:6C:86:DD:00:DC:99:D8:7B"}}},"request":{"raw":"GET /deniz_files_files/loading.gif HTTP/1.1\r\nHost: kklarhormendosmod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kklarhormendosmod.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 00:13:13 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 14 Mar 2024 19:47:04 GMT\r\netag: \"93d0-65f35438-3904b81581d0b163;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 37840\r\ndate: Tue, 17 Mar 2026 00:13:13 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":37840,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 96 x 96","md5":"a5ac552d6a23421d7697f897729a2def","sha1":"836cb1e7a61967b762898a3ce32e64ca7713119c","sha256":"4d54a976b6fa75c73ec219bf5ca96537d46c387c138842fe3d76be0d9e111e0a","sha512":"cd1e1f9c1e6c05baf7ae3d11c909856e392c02773d39c18a480d6689f8de2d5e255d249d348ea6c24ac2d6df581de5187498025a6b378ba87f97f35e19222008","ssdeep":"768:pHxwCT4I3lmUgcEyCO3aUkJxIMSZ9EYTjrBU0XM+9HlgS2lkdshIGhI:pHxhc0lLgcEyCOKUkrHSZ9EYTjrBU0cS","tlshash":"3803e8a3d66c8672eee755741901cf2b8cc4525c40f17bda9af62df0128ab44cbac1e3","first_seen":"2023-05-01T09:44:05Z","last_seen":"2026-05-15T18:36:15.596921Z","times_seen":165,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kklarhormendosmod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}