{"report_id":"29c2d774-6ba6-4213-9e7b-98a10cfc5f28","version":0,"status":"done","tags":[],"date":"2026-08-24T03:46:59Z","url":{"schema":"https","addr":"kb-group.live/","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":0,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"final":{"url":{"schema":"https","addr":"kb-group.live/","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"title":"Maliye-Finans Önizleme","dom":{"size":4363,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3184)","md5":"d69f8159be6883445ee2acaea8e611a5","sha1":"c7b4fe57e4fb34eeadeb28390621cc23a03c665f","sha256":"f83dc485b81dad277b7532ef40997789f21ebc7841965b822361388219f115c4","sha512":"1dff6be6fb4197f8541fa4ffb9a10e54f01754c834891229fcafe574ca5cf87199ee8bb4c94845a44bd43cebac57f3b47eac43333b4062a115fc41f9f552097d","ssdeep":"96:9QCFXb5HXGlRCktGIshnez0QY6MRG4Gwo+:9QCFrdXixtGIshm0eM0Co+","tlshash":"349172746c01ce1ae92b3e09a9feac6c61de565e43cce93dd0e0ca1c4694ef5085bd11","dom_hash":"domhash7ba6db0bdbdb6d289c09e175e9d4cefe","first_seen":"2026-08-24T03:21:21.724094Z","last_seen":"2026-08-24T03:47:02.877994Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"kb-group.live/","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":0,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-28T03:46:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"kb-group.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kb-group.live","ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-24T03:21:16.081963Z","last_seen":"2026-08-24T03:21:16.081963Z","alert_count":10,"request_count":10,"received_data":2207084,"sent_data":4658,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kb-group.live/assets/layout-segment-context-ByB2MUsE.js","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"441b8633a343b88b091c82ae30dcf7aa","sha1":"2f6e3369da68cff6b53949e79b406ba6f72c221d","sha256":"c3a87efc6eed99c894f5e1118fc66d679c7cecc366907062ca2f9ccd4089451b","sha512":"3ec9797ebc9ff9a853742d83558ce88b9d4be33f97eaa033221c8511501ed4732e4fa4f705b8c1a1422a56874c1b80966cc290d0aca4887a4bb03b3724e3323a","ssdeep":"","tlshash":"a2d02b0f780199f66a5e4daee47b18177732412853cc5360a059102e7b7aedfa02ef93","size":288,"data":"","first_seen":"2026-08-24T03:21:21.731453Z","last_seen":"2026-08-24T03:47:02.88934Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8410ffb79b30a638ca0bf5594e9378d","sha1":"b488dbf11a2bacadd5a8d49d185d52c77975d78c","sha256":"ba3be815cae9f685f044ba07ffba2b610010b36fddec9cb5fcdef3c4faf8909c","sha512":"806b31be4b7ddec7ad0300d71f1cba38917dc77ccd0cfa2d2bfd15e6f411bcf755fa3d29594f696984c5f9c6bafe6795f10122cfb521b1c17a62b1f3b6ac023a","ssdeep":"","tlshash":"488000b0fa020f0ab822280c3baaca8a22ee280820a8382880a2880c00200880828e00","size":29,"data":"","first_seen":"2026-03-03T03:17:14.099818Z","last_seen":"2026-08-24T03:47:02.901212Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef61ea5d0658c78879904c386f2081c6","sha1":"2992b402112ee78fbe73b197df81996c41896918","sha256":"9d5893b2c79d60ab078f22bbd71a314cb5a7c8d90282269bd45ffc055153988a","sha512":"b06aac77e09ecd253987491bd6a205c1659702732ee847d8ce07fd06b088a6538be3dbe9b054cfd321a9da8ce920a89d4f6a04652591e3dc99d3669f1d030c2a","ssdeep":"","tlshash":"20a002f9c5428e99afa3254c9671b56a16b859541095545654544c5a431dc040854d48","size":58,"data":"","first_seen":"2026-04-07T05:33:18.180086Z","last_seen":"2026-08-24T03:47:02.90199Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"fddaa7832dd0df1c8aa12394cba19f45","sha1":"b066f50309f9e8dc918f7faa4c29eefb107b140e","sha256":"5972f8f2f910ead5f813884f7b6b7656d073e426b7fa77488e4f80a2d74b37ff","sha512":"4187e915740694dad44eb3f07aacac3eb5c9ca719004c7f9322ab882b110ff904b0d9450ec06abad7872fab961411c0578821722e8fc1041713802325850d3b3","ssdeep":"","tlshash":"8e80000a0c880b32823c282020a008a00032038203a0ab2a8838ba2c2eec8cb003cc32","size":35,"data":"","first_seen":"2026-08-24T03:21:21.75442Z","last_seen":"2026-08-24T03:47:02.902701Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"405d537c09db926b27a7656ade7c66d0","sha1":"e293a9a099c4920d686b039a20208e2ff25428a7","sha256":"abfe038e3f386998624ac0e98357f12ef8324461e3c0ce9d3f58f6d228a526bd","sha512":"0866a89db469bed9d6e4be20f5a7eab57297c3fb3e7a49bc18b465079ec4e50622d0c70c7ee295ddc803dbdfbee10282ce514044a5975d109ded3662618284fb","ssdeep":"","tlshash":"314112756c01cf29ed9b7e444abe1c3a21ce46bf03c5d97d81a0ce0c4665db51697f90","size":2011,"data":"","first_seen":"2026-08-24T03:21:21.758111Z","last_seen":"2026-08-24T03:47:02.903865Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f6186f5375c901b5728c14bd9d81ed1","sha1":"a821c58ff421b52ca688d2a71cc50765692ae835","sha256":"c6344813268c9971aa93a6e48228d5443f55062da212558d5d990c69c4b6642a","sha512":"b434ec521e58fd7028d578a63d8912be9f5c73716c5093a4b190e8fba8bf59e49f7c3dc049ee0aad927c8b61056cdd4b99a01d28e6fa3c37b7217ba2a511751a","ssdeep":"","tlshash":"f1d0c779d311cf03782b38591ebb9c4d11d81c4612cd645f41e5850519a5c754155d05","size":203,"data":"","first_seen":"2026-07-18T00:54:01.155407Z","last_seen":"2026-08-24T03:47:02.90501Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"6def49adb48d49768836bb8c2a3d7943","sha1":"920d72a6167219b3f18aa8386504167009ecebb7","sha256":"ab1dcd17382e407ac9fea46d1c4d282f46ebd88d6d2eea8d964b0d094a878256","sha512":"72f910031fe844aa58e5ad48f4be777e17fd3ff6d2aca37c10a84e8171c0c9a57f4a45c5485a757bcc660c9bfaa5448411a78f72308ae938f72c54926473a8fe","ssdeep":"","tlshash":"3ab002b2d3111f26a82738282baa948f62ed5c0842de682f91f500141ea4509466ae5a","size":105,"data":"","first_seen":"2026-07-18T00:54:01.156846Z","last_seen":"2026-08-24T03:47:02.905725Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"b49c9321e383c02d8160e1255b800464","sha1":"503998307ca094b204e709a2ff42279eb1a4513b","sha256":"1c85cdc496a6bdcc3bc6376d56c9354ffb0d0724e1eace5fd9324e42cea3165d","sha512":"74b13a3cf5d8a6f4057637198734ff9d5b4046f26af86c988a0be12caafa9101c432310546b4a47197c41b245daa7f7455bac2bb73196732975f175d5383b32e","ssdeep":"","tlshash":"fd8000f8c2000c28a8a2a80a2beae0ee22ac880820a8a008c80802a80000008022ae80","size":29,"data":"","first_seen":"2026-03-03T03:17:14.116789Z","last_seen":"2026-08-24T03:47:02.906372Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/assets/index-B55-aGwc.js","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f090af5cc99623c207f0b2d036a9ac1","sha1":"e4c9988dcc51981ed3b6303543cae3bf4adafe7c","sha256":"ebc4cc72762c52c98cfdf6c8c785d7c05efd31d5d552b7de84c13d670cbaad15","sha512":"293f5c78edbbc2fa628ba8bafc5f6c44294e96cb6e37c40b039763b737ccdf32e326d2c0740049a9ac48f9bb019649bab43162d56c711684c2bcc3e8ccff62d2","ssdeep":"1536:LBldQFajzxFdpVN2ihl/W9uc2Lyt/l2bXKOfVzqr/vq1VfBdGV3NV2/ZsjVGW02f:hzLdpVN2gQwMle4zoPFnh94P","tlshash":"d97307e93280b06147fb1276c1ab5106f37f4da6184d5110f266ec8e39bd859c7bbfa8","size":80717,"data":"","first_seen":"2026-08-24T03:21:21.735832Z","last_seen":"2026-08-24T03:47:02.891983Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/assets/framework-Dykh5YIU.js","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a27578015624d4160950a94ed1e13925","sha1":"c4b4fd0351f8fd252e212b2a849ab85469ded87f","sha256":"05cae160de67041dfe14a7c6553389e2d342974d979bcd0bfbd30a92cda092ae","sha512":"9716ccfe3d37e70d94b7f6696be13250059863c1bba07d8753d19986d9615326029c5879938509b0a6b9493c70e4af83d8eaee300fce308caa064a9347ae83c7","ssdeep":"3072:JsrRJ3/poLFkikXhS6FP7LkkvO5gXMu8qOttuAhBm:mNXAFPkXgQ7LvvO5MMrqOttuAu","tlshash":"1e042dec31a9b5526fa356b2006f1a07733929231c0d4860b210feae7bf544651bbfed","size":189805,"data":"","first_seen":"2026-08-24T03:21:21.748291Z","last_seen":"2026-08-24T03:47:02.894233Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/assets/page-cN8kZyxZ.js","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"26de1d9cf5fdf4f128388aa525389165","sha1":"12f1f70b35a9c97482b45762b2cda5144831f8b5","sha256":"fb4bf910f749273b32eeb75271645138fc3904589d4abd9c449c7a93733c5342","sha512":"bcaa4c787dcc8bcb5ebf443501563b713e21858b0f7796ae79ca4027ff1864f44bb1a7752357b46e40f281ca769adcb3b17a0c79604ebf7fd2c178ae95dff3c0","ssdeep":"6144:4MfqE1+JFbZya1u8Lh/TxrVVZ9IsJK1vP2Bdf6wYblkIrmeEuL3tFUrOejDHI6BL:zfqE1+f1du8LvJuPLk6RtF8JHIgzmq","tlshash":"18252995b2e1b493a35666b4006b400ef37ab45d580e452cf624e5e77cbe884b63ff38","size":1041416,"data":"","first_seen":"2026-08-24T03:21:21.738748Z","last_seen":"2026-08-24T03:47:02.883003Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/assets/rolldown-runtime-DWdDZTNf.js","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe1c45aeeb5cda97a4081341cf8c64f0","sha1":"f63137f1c6686956edfbf5aa9c86445eb7f29730","sha256":"cb2fb01f2064eb36487466778d2ffc4c97ad86af89be1635209de18f0b5b2236","sha512":"e0e433d20353867b905bec2bf891cf5cab4a193627332e459a4ebabc0b5e2b2307141c0cb1980ac151621e74639f0cb8696b71b884d43a900321f43a851bfcbf","ssdeep":"","tlshash":"d21123eb1ad0b3e2225523c5d5285085e229f43ddabc70d4e36586f295c50c511d5e77","size":1084,"data":"","first_seen":"2026-04-24T16:03:43.345607Z","last_seen":"2026-08-24T03:47:02.881463Z","times_seen":276,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kb-group.live/assets/rolldown-runtime-DWdDZTNf.js","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kb-group.live/","date":"2026-08-24T03:46:29.426Z","timestamp":1787543189426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kb-group.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 09:56:52 GMT","end":"Wed, 18 Nov 2026 09:56:51 GMT"},"fingerprint":{"sha1":"AB:F3:81:A8:B6:37:C0:D6:FB:03:D4:29:C5:7C:F6:5A:94:15:0C:E2","sha256":"A8:3A:62:E1:18:DA:9F:C3:3B:F5:F0:2B:9B:C8:47:0C:36:B0:C6:E5:12:14:19:14:34:37:25:C7:C5:37:A8:43"}}},"request":{"raw":"GET /assets/rolldown-runtime-DWdDZTNf.js HTTP/1.1\r\nHost: kb-group.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kb-group.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 624\r\ndate: Mon, 24 Aug 2026 03:46:29 GMT\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"DWdDZTNf\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1084,"size_decoded":854,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1084), with no line terminators","md5":"fe1c45aeeb5cda97a4081341cf8c64f0","sha1":"f63137f1c6686956edfbf5aa9c86445eb7f29730","sha256":"cb2fb01f2064eb36487466778d2ffc4c97ad86af89be1635209de18f0b5b2236","sha512":"e0e433d20353867b905bec2bf891cf5cab4a193627332e459a4ebabc0b5e2b2307141c0cb1980ac151621e74639f0cb8696b71b884d43a900321f43a851bfcbf","ssdeep":"","tlshash":"d21123eb1ad0b3e2225523c5d5285085e229f43ddabc70d4e36586f295c50c511d5e77","first_seen":"2026-04-24T16:03:43.345607Z","last_seen":"2026-08-24T03:47:02.881463Z","times_seen":276,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"kb-group.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/assets/page-cN8kZyxZ.js","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kb-group.live/","date":"2026-08-24T03:46:29.432Z","timestamp":1787543189432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kb-group.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 09:56:52 GMT","end":"Wed, 18 Nov 2026 09:56:51 GMT"},"fingerprint":{"sha1":"AB:F3:81:A8:B6:37:C0:D6:FB:03:D4:29:C5:7C:F6:5A:94:15:0C:E2","sha256":"A8:3A:62:E1:18:DA:9F:C3:3B:F5:F0:2B:9B:C8:47:0C:36:B0:C6:E5:12:14:19:14:34:37:25:C7:C5:37:A8:43"}}},"request":{"raw":"GET /assets/page-cN8kZyxZ.js HTTP/1.1\r\nHost: kb-group.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kb-group.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"cN8kZyxZ\"\r\ndate: Mon, 24 Aug 2026 03:46:29 GMT\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1041451,"size_decoded":300723,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65169), with no line terminators","md5":"26de1d9cf5fdf4f128388aa525389165","sha1":"12f1f70b35a9c97482b45762b2cda5144831f8b5","sha256":"fb4bf910f749273b32eeb75271645138fc3904589d4abd9c449c7a93733c5342","sha512":"bcaa4c787dcc8bcb5ebf443501563b713e21858b0f7796ae79ca4027ff1864f44bb1a7752357b46e40f281ca769adcb3b17a0c79604ebf7fd2c178ae95dff3c0","ssdeep":"6144:4MfqE1+JFbZya1u8Lh/TxrVVZ9IsJK1vP2Bdf6wYblkIrmeEuL3tFUrOejDHI6BL:zfqE1+f1du8LvJuPLk6RtF8JHIgzmq","tlshash":"18252995b2e1b493a35666b4006b400ef37ab45d580e452cf624e5e77cbe884b63ff38","first_seen":"2026-08-24T03:21:21.738748Z","last_seen":"2026-08-24T03:47:02.883003Z","times_seen":2,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"kb-group.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T03:46:28.500Z","timestamp":1787543188500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kb-group.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 09:56:52 GMT","end":"Wed, 18 Nov 2026 09:56:51 GMT"},"fingerprint":{"sha1":"AB:F3:81:A8:B6:37:C0:D6:FB:03:D4:29:C5:7C:F6:5A:94:15:0C:E2","sha256":"A8:3A:62:E1:18:DA:9F:C3:3B:F5:F0:2B:9B:C8:47:0C:36:B0:C6:E5:12:14:19:14:34:37:25:C7:C5:37:A8:43"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kb-group.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: zstd\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 24 Aug 2026 03:46:29 GMT\r\nvary: Accept-Encoding, RSC, Accept, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Next-Url, X-Vinext-Interception-Context, X-Vinext-Mounted-Slots, X-Vinext-Rsc-Render-Mode, RSC, Accept, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Next-Url, X-Vinext-Interception-Context, X-Vinext-Mounted-Slots, X-Vinext-Rsc-Render-Mode, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4291,"size_decoded":2298,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3093)","md5":"d358b6ad5f2c01084569bd066d8eafdb","sha1":"b9dd3863d28d59afadd8737e9059eb51b35e2026","sha256":"b8befb0b0680a2daf7414b75df160d1abc837081f9ef6ff24444461889cce20c","sha512":"cdf8778a7e90de92d0241e47bf302918580519afdfcefd615a0897cb605ed5c1798c31973f391c336948f51943db6feff01b583c89cc2bb355092f5868decb8e","ssdeep":"96:XkEY96QzpL8pwfrirUlOAAb5HXGlRCktGIshnez0QY6MRi:qH42fezAGdXixtGIshm0eMU","tlshash":"0e9163306c00ce2be96b3d55aafa9c6c21de575e02c8d97dd0f0ca1c0aa4df54966e61","first_seen":"2026-08-24T03:21:21.745911Z","last_seen":"2026-08-24T03:47:02.885918Z","times_seen":2,"resource_available":false,"data":null}},"time_used":707,"timings":{"blocked":-1,"dns":585,"connect":26,"send":0,"wait":31,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"kb-group.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/assets/layout-segment-context-ByB2MUsE.js","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kb-group.live/","date":"2026-08-24T03:46:29.424Z","timestamp":1787543189424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kb-group.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 09:56:52 GMT","end":"Wed, 18 Nov 2026 09:56:51 GMT"},"fingerprint":{"sha1":"AB:F3:81:A8:B6:37:C0:D6:FB:03:D4:29:C5:7C:F6:5A:94:15:0C:E2","sha256":"A8:3A:62:E1:18:DA:9F:C3:3B:F5:F0:2B:9B:C8:47:0C:36:B0:C6:E5:12:14:19:14:34:37:25:C7:C5:37:A8:43"}}},"request":{"raw":"GET /assets/layout-segment-context-ByB2MUsE.js HTTP/1.1\r\nHost: kb-group.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kb-group.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 288\r\ndate: Mon, 24 Aug 2026 03:46:29 GMT\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"ByB2MUsE\"\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":288,"size_decoded":494,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"441b8633a343b88b091c82ae30dcf7aa","sha1":"2f6e3369da68cff6b53949e79b406ba6f72c221d","sha256":"c3a87efc6eed99c894f5e1118fc66d679c7cecc366907062ca2f9ccd4089451b","sha512":"3ec9797ebc9ff9a853742d83558ce88b9d4be33f97eaa033221c8511501ed4732e4fa4f705b8c1a1422a56874c1b80966cc290d0aca4887a4bb03b3724e3323a","ssdeep":"","tlshash":"a2d02b0f780199f66a5e4daee47b18177732412853cc5360a059102e7b7aedfa02ef93","first_seen":"2026-08-24T03:21:21.731453Z","last_seen":"2026-08-24T03:47:02.88934Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"kb-group.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/assets/index-B55-aGwc.js","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kb-group.live/","date":"2026-08-24T03:46:29.427Z","timestamp":1787543189427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kb-group.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 09:56:52 GMT","end":"Wed, 18 Nov 2026 09:56:51 GMT"},"fingerprint":{"sha1":"AB:F3:81:A8:B6:37:C0:D6:FB:03:D4:29:C5:7C:F6:5A:94:15:0C:E2","sha256":"A8:3A:62:E1:18:DA:9F:C3:3B:F5:F0:2B:9B:C8:47:0C:36:B0:C6:E5:12:14:19:14:34:37:25:C7:C5:37:A8:43"}}},"request":{"raw":"GET /assets/index-B55-aGwc.js HTTP/1.1\r\nHost: kb-group.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kb-group.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"80717-1787215998\"\r\ndate: Mon, 24 Aug 2026 03:46:29 GMT\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80717,"size_decoded":25403,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42539)","md5":"9f090af5cc99623c207f0b2d036a9ac1","sha1":"e4c9988dcc51981ed3b6303543cae3bf4adafe7c","sha256":"ebc4cc72762c52c98cfdf6c8c785d7c05efd31d5d552b7de84c13d670cbaad15","sha512":"293f5c78edbbc2fa628ba8bafc5f6c44294e96cb6e37c40b039763b737ccdf32e326d2c0740049a9ac48f9bb019649bab43162d56c711684c2bcc3e8ccff62d2","ssdeep":"1536:LBldQFajzxFdpVN2ihl/W9uc2Lyt/l2bXKOfVzqr/vq1VfBdGV3NV2/ZsjVGW02f:hzLdpVN2gQwMle4zoPFnh94P","tlshash":"d97307e93280b06147fb1276c1ab5106f37f4da6184d5110f266ec8e39bd859c7bbfa8","first_seen":"2026-08-24T03:21:21.735832Z","last_seen":"2026-08-24T03:47:02.891983Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"kb-group.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/assets/framework-Dykh5YIU.js","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kb-group.live/","date":"2026-08-24T03:46:29.431Z","timestamp":1787543189431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kb-group.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 09:56:52 GMT","end":"Wed, 18 Nov 2026 09:56:51 GMT"},"fingerprint":{"sha1":"AB:F3:81:A8:B6:37:C0:D6:FB:03:D4:29:C5:7C:F6:5A:94:15:0C:E2","sha256":"A8:3A:62:E1:18:DA:9F:C3:3B:F5:F0:2B:9B:C8:47:0C:36:B0:C6:E5:12:14:19:14:34:37:25:C7:C5:37:A8:43"}}},"request":{"raw":"GET /assets/framework-Dykh5YIU.js HTTP/1.1\r\nHost: kb-group.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kb-group.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 24 Aug 2026 03:46:29 GMT\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"Dykh5YIU\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189805,"size_decoded":61641,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44178)","md5":"a27578015624d4160950a94ed1e13925","sha1":"c4b4fd0351f8fd252e212b2a849ab85469ded87f","sha256":"05cae160de67041dfe14a7c6553389e2d342974d979bcd0bfbd30a92cda092ae","sha512":"9716ccfe3d37e70d94b7f6696be13250059863c1bba07d8753d19986d9615326029c5879938509b0a6b9493c70e4af83d8eaee300fce308caa064a9347ae83c7","ssdeep":"3072:JsrRJ3/poLFkikXhS6FP7LkkvO5gXMu8qOttuAhBm:mNXAFPkXgQ7LvvO5MMrqOttuAu","tlshash":"1e042dec31a9b5526fa356b2006f1a07733929231c0d4860b210feae7bf544651bbfed","first_seen":"2026-08-24T03:21:21.748291Z","last_seen":"2026-08-24T03:47:02.894233Z","times_seen":2,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"kb-group.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/kb-logo.png","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kb-group.live/","date":"2026-08-24T03:46:29.437Z","timestamp":1787543189437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kb-group.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 09:56:52 GMT","end":"Wed, 18 Nov 2026 09:56:51 GMT"},"fingerprint":{"sha1":"AB:F3:81:A8:B6:37:C0:D6:FB:03:D4:29:C5:7C:F6:5A:94:15:0C:E2","sha256":"A8:3A:62:E1:18:DA:9F:C3:3B:F5:F0:2B:9B:C8:47:0C:36:B0:C6:E5:12:14:19:14:34:37:25:C7:C5:37:A8:43"}}},"request":{"raw":"GET /kb-logo.png HTTP/1.1\r\nHost: kb-group.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kb-group.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\ndate: Mon, 24 Aug 2026 03:46:29 GMT\r\ncache-control: public, max-age=3600\r\netag: W/\"814497-1787215998\"\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":814497,"size_decoded":800953,"mime_type":"image/png","magic":"PNG image data, 1254 x 1254, 8-bit/color RGB, non-interlaced","md5":"e556fc33b5d0f627f1f33b7b1bf45970","sha1":"89e24ee6c80d4bf636544229b53b9e14fee22c52","sha256":"a1ade375aa4c0b7daae7f7a068040932e5d0ac06b25ca48157f61eaf6e84a205","sha512":"8825bb834c90274a43fa9d58e96a36ce322b55a79acba46c64da3f031fc8ec9fc4905ff9ba43c2f34b813a026a371d52e4818c5de9b12cb13195099d26a7b192","ssdeep":"24576:2ynJjTM/46ndPvSQqLYH24Fcaltz1u8KnEbes:2vPvSfYW4F3ltz1VKs","tlshash":"5b0533f659c0b180e89b073881516761e8072f2c75dbfdffe973d582561c78a21a2a2e","first_seen":"2026-08-24T03:21:21.741605Z","last_seen":"2026-08-24T03:47:02.896249Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"kb-group.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/favicon.svg","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kb-group.live/","date":"2026-08-24T03:46:29.589Z","timestamp":1787543189589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kb-group.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 09:56:52 GMT","end":"Wed, 18 Nov 2026 09:56:51 GMT"},"fingerprint":{"sha1":"AB:F3:81:A8:B6:37:C0:D6:FB:03:D4:29:C5:7C:F6:5A:94:15:0C:E2","sha256":"A8:3A:62:E1:18:DA:9F:C3:3B:F5:F0:2B:9B:C8:47:0C:36:B0:C6:E5:12:14:19:14:34:37:25:C7:C5:37:A8:43"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: kb-group.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kb-group.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: W/\"712-1787215998\"\r\ncontent-length: 712\r\ndate: Mon, 24 Aug 2026 03:46:29 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":712,"size_decoded":900,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"65d2d7d0b0f2cb5580c3808f8282568d","sha1":"81e071a890a710c2dd39b2cb0ff68af4401fc972","sha256":"e6d2e59b7b5bbb0342e0fb496dfc262decbfe4426bbb7b047aec8d467d1dc6f7","sha512":"7a5bce8ccc1a741e73b2accc76b1ecedca30de000db9f6bee79306e1a19d40129a3847bf105ef11c62ec336e2777b78a34dff8fc6b02fc7e2cb2c9b84867ba5c","ssdeep":"","tlshash":"2a0124e51dfd90812dfbc3914797f1a60a273285053c9a992d703a40bb5a56e58898d0","first_seen":"2026-07-15T03:33:09.021758Z","last_seen":"2026-08-24T06:35:39.078739Z","times_seen":174,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"kb-group.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/api/auth/session","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kb-group.live/","date":"2026-08-24T03:46:29.791Z","timestamp":1787543189791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kb-group.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 09:56:52 GMT","end":"Wed, 18 Nov 2026 09:56:51 GMT"},"fingerprint":{"sha1":"AB:F3:81:A8:B6:37:C0:D6:FB:03:D4:29:C5:7C:F6:5A:94:15:0C:E2","sha256":"A8:3A:62:E1:18:DA:9F:C3:3B:F5:F0:2B:9B:C8:47:0C:36:B0:C6:E5:12:14:19:14:34:37:25:C7:C5:37:A8:43"}}},"request":{"raw":"GET /api/auth/session HTTP/1.1\r\nHost: kb-group.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kb-group.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\ncontent-type: application/json\r\nvary: Accept-Encoding, RSC, Accept, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Next-Url, X-Vinext-Interception-Context, X-Vinext-Mounted-Slots, X-Vinext-Rsc-Render-Mode, RSC, Accept, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Next-Url, X-Vinext-Interception-Context, X-Vinext-Mounted-Slots, X-Vinext-Rsc-Render-Mode, Accept-Encoding\r\ncache-control: private, no-store\r\ncontent-encoding: zstd\r\ndate: Mon, 24 Aug 2026 03:46:29 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":null,"data":{"size":24,"size_decoded":578,"mime_type":"application/json","magic":"JSON text data","md5":"9791d290f82bb77e155c31f2d176e2e5","sha1":"5cf0d5f34bdb324e32635fcf0031b88d8338ad22","sha256":"3be5b8e53fdc8b0a2996590589456db33504977f3d1ce9bb75016c8a707e1a71","sha512":"bf1291df7b2e76396a8803d574065fce98038b2c1fe690641f4b7b7a10a7d890a13666b888369c111bb1d3a66cc9760620bff7d5627fa8adc8707bce70a0a709","ssdeep":"","tlshash":"667000000880022bb00200082a080c22888080bc82200c238820820800830ca8800800","first_seen":"2023-06-20T01:22:28Z","last_seen":"2026-08-24T09:00:16.92633Z","times_seen":3228,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"kb-group.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kb-group.live/assets/index-DTO3V3jX.css","fqdn":"kb-group.live","domain":"kb-group.live","tld":"live"},"ip":{"addr":"187.77.87.64","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kb-group.live/","date":"2026-08-24T03:46:29.423Z","timestamp":1787543189423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kb-group.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 09:56:52 GMT","end":"Wed, 18 Nov 2026 09:56:51 GMT"},"fingerprint":{"sha1":"AB:F3:81:A8:B6:37:C0:D6:FB:03:D4:29:C5:7C:F6:5A:94:15:0C:E2","sha256":"A8:3A:62:E1:18:DA:9F:C3:3B:F5:F0:2B:9B:C8:47:0C:36:B0:C6:E5:12:14:19:14:34:37:25:C7:C5:37:A8:43"}}},"request":{"raw":"GET /assets/index-DTO3V3jX.css HTTP/1.1\r\nHost: kb-group.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kb-group.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"DTO3V3jX\"\r\ndate: Mon, 24 Aug 2026 03:46:29 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71461,"size_decoded":16815,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65468)","md5":"c0f0eba2a3c32d87e4946886093a9ce9","sha1":"b061c54d5d166a50f8cd03ceb2af52f2d7c155f6","sha256":"c599dce9671e2ee9e84d457198f46d5e0efca2c175e1a81f5a1a66302ef0f9a5","sha512":"4a4fcdd5ed65b9128bb612d6eebeb6af880208bad28907f72287471bd09833cfbfdb94ab39072200938baa2aa29ddeffffb793d491010a2b37ed7eeacf775c0b","ssdeep":"768:XEZZBjymfNmxvN1CNugpUIm3xT9RyBYoeNToxA902EPC9thBQTvI3B7:+h4FzlT4ESxA9fvaq7","tlshash":"99639433b668262975bbd5e4e8c0abde70544216d16243f9fda0b334ccca8f72676709","first_seen":"2026-08-24T03:21:21.728546Z","last_seen":"2026-08-24T03:47:02.899596Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"kb-group.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}