{"report_id":"1a0d5bf1-667e-42dc-9444-91c1f5ecb15a","version":0,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-07-31T12:26:06Z","url":{"schema":"http","addr":"metanet-auth.office.jekklim.org/metanet","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":0,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"final":{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"title":"Bezahlung — METANET","dom":{"size":34742,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (650)","md5":"10583fddf15ef400501d787f1715622f","sha1":"001492e022dfe47e7cee85d633b354054f992bbe","sha256":"f0047d41c5d0fb4e77a7873aeb25c4b29de67c2116787adc567a2fe6a69b7cfb","sha512":"cc5106c17fb7f45c9995f197482a3857ceadaa4718394c01f0fd1fcaf542455b76e07b590a2be06a44b4d938694d31164b7582f0633b1721a278cf1a5af7ae95","ssdeep":"768:CLyEY9KxbmEecKhQxTniGDKqNplqF5kaA8iIHMOS61HpLlo8iU:CLZY9KxqEhKixTniGGqNplqFOv81pSXU","tlshash":"10f27621b0fc582fd04381c9a654372a26abe187dace2610b16d1775dfcbed6ed9311c","dom_hash":"domhashfcaa66645e9300f6d85ab235d6edf22c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"metanet-auth.office.jekklim.org/metanet","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":0,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-04T12:26:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-31","alert":"Detects file containing Telegram Bot API","trigger":"metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-26T22:19:52.505461Z","alert_count":0,"request_count":4,"received_data":197380,"sent_data":2360,"comment":"","tags":null,"fingerprints":null},{"fqdn":"metanet-auth.office.jekklim.org","ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"domain_registered":"2026-07-21","domain_rank":0,"first_seen":"2026-07-31T12:26:07.342466Z","last_seen":"2026-07-31T12:26:07.342466Z","alert_count":266,"request_count":88,"received_data":123535,"sent_data":47120,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-26T22:23:14.439231Z","alert_count":0,"request_count":1,"received_data":13319,"sent_data":551,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"md5":"45605e34e3d7f17654b2265311f96c3f","sha1":"61ea1fd326f20191356a01a0e53e7f43cccbe5a4","sha256":"85b8dbded9d0dc2f8cd393622ede0fb7b0b537cf878028abce9cc8d1565d039f","sha512":"c6503a8c3fc36d65d785f1f93aca5caee5328a9f37aa0e519b8b3d9ef68df02256a6927397515bb54871bed86dfa87e0aba04dd464181eb00276c1ac688062f9","size":27020,"token":"8891337159:AAFohIt-VnzAlsh8zOrpXODCIJYfqCbWNbQ","is_revoked":false,"bot":{"token":"8891337159:AAFohIt-VnzAlsh8zOrpXODCIJYfqCbWNbQ","user_id":"8891337159","username":"metanetx0_bot","first_name":"metanet","last_name":"","chat":{"chat_id":"","title":"","type":"","bot_is":"","total_users":0,"active_members":null,"admins":null},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":false,"md5":"45605e34e3d7f17654b2265311f96c3f","sha1":"61ea1fd326f20191356a01a0e53e7f43cccbe5a4","sha256":"85b8dbded9d0dc2f8cd393622ede0fb7b0b537cf878028abce9cc8d1565d039f","sha512":"c6503a8c3fc36d65d785f1f93aca5caee5328a9f37aa0e519b8b3d9ef68df02256a6927397515bb54871bed86dfa87e0aba04dd464181eb00276c1ac688062f9","ssdeep":"768:nrO+rRCNKDH+600WyoFxvb8SBbjNhID4cRiOWT8:nrqQ+6ayoFdb8SBbjN2D4of","tlshash":"a3c217327e6221ba50db98fe528f1544a3371a075c08b093f821e4294f557999fbbfec","size":27020,"data":"","first_seen":"2026-07-31T12:26:12.944604Z","last_seen":"2026-07-31T15:50:09.223337Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-31","alert":"Detects file containing Telegram Bot API","trigger":"metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[POLL] Starting for session:mn_1785500740439expecting:card_approved","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":155,"column_number":11},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15},{"level":"log","text":"[POLL] Server status:not_found","filename":"https://metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","line_number":165,"column_number":15}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:40.477Z","timestamp":1785500740477,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://metanet-auth.office.jekklim.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:16 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 170124\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-01T01:35:23.19793Z","times_seen":250282,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":36,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500741075\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:41.077Z","timestamp":1785500741077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500741075\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:38 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500745578\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:45.580Z","timestamp":1785500745580,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500745578\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:42 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500750385\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:50.386Z","timestamp":1785500750386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500750385\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:47 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500753386\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:53.387Z","timestamp":1785500753387,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500753386\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:50 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500755487\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:55.489Z","timestamp":1785500755489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500755487\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:52 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500756688\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:56.689Z","timestamp":1785500756689,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500756688\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:53 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500757306\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:57.308Z","timestamp":1785500757308,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500757306\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500744378\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:44.379Z","timestamp":1785500744379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500744378\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:41 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500746178\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:46.180Z","timestamp":1785500746180,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500746178\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:43 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500750685\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:50.686Z","timestamp":1785500750686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500750685\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:47 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500758207\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:58.209Z","timestamp":1785500758209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500758207\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:55 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500761222\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:26:01.224Z","timestamp":1785500761224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500761222\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:58 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500764835\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:26:04.837Z","timestamp":1785500764837,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500764835\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:26:02 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500743777\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:43.779Z","timestamp":1785500743779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500743777\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:41 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500754286\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:54.288Z","timestamp":1785500754288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500754286\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500755187\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:55.188Z","timestamp":1785500755188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500755187\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:52 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500757607\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:57.608Z","timestamp":1785500757608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500757607\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500759421\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:59.422Z","timestamp":1785500759422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500759421\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:56 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500760321\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:26:00.324Z","timestamp":1785500760324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500760321\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500764524\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:26:04.525Z","timestamp":1785500764525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500764524\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:26:01 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-31T12:25:39.625Z","timestamp":1785500739625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:37 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 296\r\nlocation: https://metanet-auth.office.jekklim.org/metanet/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T01:32:43.740633Z","times_seen":17644023,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":54,"connect":48,"send":0,"wait":54,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500741976\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:41.978Z","timestamp":1785500741978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500741976\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:39 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500745879\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:45.880Z","timestamp":1785500745880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500745879\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:43 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500748880\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:48.882Z","timestamp":1785500748882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500748880\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:46 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500763923\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:26:03.925Z","timestamp":1785500763925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500763923\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:26:01 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500747380\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:47.382Z","timestamp":1785500747382,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500747380\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:44 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500748580\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:48.582Z","timestamp":1785500748582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500748580\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:45 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500741676\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:41.678Z","timestamp":1785500741678,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500741676\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:38 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500742877\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:42.878Z","timestamp":1785500742878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500742877\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:40 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500744978\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:44.979Z","timestamp":1785500744979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500744978\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:42 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500752185\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:52.187Z","timestamp":1785500752187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500752185\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:49 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500753686\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:53.689Z","timestamp":1785500753689,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500753686\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:50 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500757907\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:57.908Z","timestamp":1785500757908,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500757907\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:55 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500762423\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:26:02.424Z","timestamp":1785500762424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500762423\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:59 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500763323\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:26:03.324Z","timestamp":1785500763324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500763323\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:26:00 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500743477\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:43.478Z","timestamp":1785500743478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500743477\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:40 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500748280\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:48.283Z","timestamp":1785500748283,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500748280\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:45 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500751585\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:51.587Z","timestamp":1785500751587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500751585\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500759108\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:59.109Z","timestamp":1785500759109,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500759108\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:56 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500764223\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:26:04.225Z","timestamp":1785500764225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500764223\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:26:01 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500740776\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:40.777Z","timestamp":1785500740777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500740776\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:38 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500750985\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:50.986Z","timestamp":1785500750986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500750985\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500754887\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:54.888Z","timestamp":1785500754888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500754887\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:52 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500760922\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:26:00.924Z","timestamp":1785500760924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500760922\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:58 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500763624\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:26:03.625Z","timestamp":1785500763625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500763624\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:26:00 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:40.476Z","timestamp":1785500740476,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://metanet-auth.office.jekklim.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:16 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 170124\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-01T01:35:23.19793Z","times_seen":250282,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":30,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500740475\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:40.481Z","timestamp":1785500740481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500740475\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:38 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":589,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500753987\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:53.988Z","timestamp":1785500753988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500753987\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500759721\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:59.723Z","timestamp":1785500759723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500759721\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:56 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/css/style.css?v=1","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:40.328Z","timestamp":1785500740328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/css/style.css?v=1 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Jul 2026 14:47:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f866c-5fec\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24556,"size_decoded":6716,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (320)","md5":"5fc5b69a6afb3ec64adb5f2dfb14964d","sha1":"9599ca27c9da301c9bd85602e4433fba4f150968","sha256":"133b5795579cd2d8128ff2c4fb52417a4d595f634c5cf42535fbbb0ffb4983ad","sha512":"f7fc699226262f4d8b6877a34e7488fd9277d299ff89156035b1f29d0158081d514bfaabd7fc462cdd069e297eda90255698a32f688f41cd4f3f511a81fff0ca","ssdeep":"384:kBrNzOOfbV0ueXlacraptUTYCDC9cvM3BOl3n9KEmyA5/Acw+a1vSk86:kBrNzJfbVveXl9a3p3BOl39KNyA5/AJV","tlshash":"71b26553332251e8b557b7783ad6cb4a6318f023a20ab5bd2dc58068c1cd3b855bb7ce","first_seen":"2026-07-31T12:26:12.941771Z","last_seen":"2026-07-31T15:50:09.222723Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:40.330Z","timestamp":1785500740330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/js/script.js?v=2 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jul 2026 15:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6a1ff0-69aa\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27050,"size_decoded":9224,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1852)","md5":"45605e34e3d7f17654b2265311f96c3f","sha1":"61ea1fd326f20191356a01a0e53e7f43cccbe5a4","sha256":"85b8dbded9d0dc2f8cd393622ede0fb7b0b537cf878028abce9cc8d1565d039f","sha512":"c6503a8c3fc36d65d785f1f93aca5caee5328a9f37aa0e519b8b3d9ef68df02256a6927397515bb54871bed86dfa87e0aba04dd464181eb00276c1ac688062f9","ssdeep":"768:nrO+rRCNKDH+600WyoFxvb8SBbjNhID4cRiOWT8:nrqQ+6ayoFdb8SBbjN2D4of","tlshash":"a3c217327e6221ba50db98fe528f1544a3371a075c08b093f821e4294f557999fbbfec","first_seen":"2026-07-31T12:26:12.944604Z","last_seen":"2026-07-31T15:50:09.223337Z","times_seen":2,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-31","alert":"Detects file containing Telegram Bot API","trigger":"metanet-auth.office.jekklim.org/metanet/js/script.js?v=2","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500742577\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:42.578Z","timestamp":1785500742578,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500742577\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:39 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500744678\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:44.679Z","timestamp":1785500744679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500744678\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:41 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500746780\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:46.781Z","timestamp":1785500746781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500746780\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:44 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500747980\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:47.981Z","timestamp":1785500747981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500747980\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:45 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500750085\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:50.086Z","timestamp":1785500750086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500750085\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:47 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500751285\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:51.287Z","timestamp":1785500751287,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500751285\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-31T12:25:39.849Z","timestamp":1785500739849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/ HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:37 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 21 Jul 2026 14:47:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f8672-854e\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34126,"size_decoded":8244,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (644)","md5":"67c816fcc2d17632e17e49a542b34e1b","sha1":"ad7a3545b40b9ce1ae99263f47c4ccebbcf145fd","sha256":"840151d8fcea584692b252a23c82e36acce018bbab3524ca2427328f3a02fb3b","sha512":"b39a12f57a36e7e77c729303cbe94a2695280c4fffe18e8831f21df9d3ca9c2559bf6c1dbc83411e8c69429d57d3e04548ca89fdc6213649dbde26751bd9a8bc","ssdeep":"768:3yEYLC5emf3Oxknnfp4ybMbH29aMkSyLnI++OS61Hp2V3o:3ZYLC5Jf3OWnnfp1bMbH29aV1LIxdo","tlshash":"27e28631b4fc582e905381d9a654372a26ebe187dace2210b19d27759fcbed7ec9301c","first_seen":"2026-07-31T12:26:12.946823Z","last_seen":"2026-07-31T15:50:09.221434Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500749785\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:49.786Z","timestamp":1785500749786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500749785\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:47 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500752485\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:52.487Z","timestamp":1785500752487,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500752485\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:49 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500755788\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:55.789Z","timestamp":1785500755789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500755788\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:53 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500760622\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:26:00.623Z","timestamp":1785500760623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500760622\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500762723\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:26:02.724Z","timestamp":1785500762724,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500762723\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:59 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500763023\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:26:03.024Z","timestamp":1785500763024,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500763023\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:26:00 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500765135\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:26:05.137Z","timestamp":1785500765137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500765135\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:26:02 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:40.474Z","timestamp":1785500740474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://metanet-auth.office.jekklim.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:16 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 170124\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-01T01:35:23.19793Z","times_seen":250282,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":19,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500752785\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:52.787Z","timestamp":1785500752787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500752785\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:50 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500756988\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:56.989Z","timestamp":1785500756989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500756988\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500747080\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:47.082Z","timestamp":1785500747082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500747080\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:44 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500753086\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:53.087Z","timestamp":1785500753087,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500753086\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:50 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500762122\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:26:02.124Z","timestamp":1785500762124,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500762122\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:59 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:40.479Z","timestamp":1785500740479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://metanet-auth.office.jekklim.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:16 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 170124\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-01T01:35:23.19793Z","times_seen":250282,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":22,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/favicon.ico","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:40.689Z","timestamp":1785500740689,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:37 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":451,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-01T01:19:47.498585Z","times_seen":53235,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500743177\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:43.178Z","timestamp":1785500743178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500743177\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:40 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500744077\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:44.079Z","timestamp":1785500744079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500744077\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:41 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500745278\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:45.279Z","timestamp":1785500745279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500745278\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:42 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500749484\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:49.486Z","timestamp":1785500749486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500749484\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:46 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500754587\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:54.588Z","timestamp":1785500754588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500754587\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500758507\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:58.509Z","timestamp":1785500758509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500758507\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:55 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500741375\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:41.378Z","timestamp":1785500741378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500741375\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:38 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500749183\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:49.186Z","timestamp":1785500749186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500749183\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:46 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500756387\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:56.389Z","timestamp":1785500756389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500756387\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:53 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500760022\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:26:00.023Z","timestamp":1785500760023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500760022\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500761522\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:26:01.524Z","timestamp":1785500761524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500761522\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:58 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500761822\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:26:01.825Z","timestamp":1785500761825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500761822\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:59 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:40.326Z","timestamp":1785500740326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://metanet-auth.office.jekklim.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 31 Jul 2026 12:25:40 GMT\r\ndate: Fri, 31 Jul 2026 12:25:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":1486,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4b1d52c19ccef2398d1de007b3c9a55c","sha1":"c57fa2bcac927a7d60c526cb7ec2b6249019dfe7","sha256":"05f842619ec9f615de0b749034eadaea60e3554d798683fb01ee1eb27abd1e68","sha512":"9dfc4ab3832325eb1438bd85674e15ceb62771b94f06ea8e48a2e286453d571218df3f6727b8df4c1bdfa47218eb5fed0298601da289391a736a76a230d68c3b","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:vXuM0p2+g7r","tlshash":"1e427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T22:54:08.549336Z","last_seen":"2026-07-31T23:49:39.244296Z","times_seen":15081,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":34,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500742276\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:42.278Z","timestamp":1785500742278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500742276\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:39 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500746479\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:46.481Z","timestamp":1785500746481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500746479\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:43 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500747680\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:47.681Z","timestamp":1785500747681,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500747680\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:44 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500751885\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:51.886Z","timestamp":1785500751886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500751885\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:49 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500756088\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:56.089Z","timestamp":1785500756089,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500756088\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:53 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metanet-auth.office.jekklim.org/metanet/gate.php?action=status\u0026_=1785500758808\u0026session=mn_1785500740439","fqdn":"metanet-auth.office.jekklim.org","domain":"jekklim.org","tld":"org"},"ip":{"addr":"91.149.243.63","port":443,"asn":26383,"as":"ASNET","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metanet-auth.office.jekklim.org/metanet/","date":"2026-07-31T12:25:58.809Z","timestamp":1785500758809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metanet-auth.office.jekklim.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 14:40:28 GMT","end":"Tue, 27 Oct 2026 14:40:27 GMT"},"fingerprint":{"sha1":"A2:7D:4C:B0:81:C6:20:74:4C:16:69:F5:4E:A5:E9:B2:5A:84:A4:58","sha256":"8C:40:34:7E:96:8B:44:AA:5D:97:BB:30:50:99:29:07:0E:B3:80:E7:E4:A7:68:4E:58:57:08:CB:8A:9F:1E:AC"}}},"request":{"raw":"GET /metanet/gate.php?action=status\u0026_=1785500758808\u0026session=mn_1785500740439 HTTP/1.1\r\nHost: metanet-auth.office.jekklim.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://metanet-auth.office.jekklim.org/metanet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 31 Jul 2026 12:25:56 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22,"size_decoded":458,"mime_type":"application/json","magic":"JSON text data","md5":"959b3502106dc40243502b27232b3072","sha1":"9738b454a158e3ac7ff72d24cf634028ea297316","sha256":"458788db80dfdcd0c977f8f9b3507b588d998d011748055c9aeea957ab4b8687","sha512":"dbc6be659d1e92d827b38da0a6337523ba58a7602aacbec0d7b47641f2872f8a41a4770826dc43880d5daebbf71b337f637396db08c51c07a675a95f28b52c5e","ssdeep":"","tlshash":"b870008800220388088ae8a0008a20b32ae00a80082a8080002c00a008002c080c8280","first_seen":"2024-12-09T06:08:18.482938Z","last_seen":"2026-07-31T15:50:09.219647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-31","alert":"Phishing Block","trigger":"metanet-auth.office.jekklim.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-31","alert":"Sinkholed","trigger":"metanet-auth.office.jekklim.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}