{"report_id":"307586c4-fb95-4527-a589-e85951ab2b03","version":0,"status":"done","tags":[],"date":"2026-08-28T13:28:39Z","url":{"schema":"http","addr":"kaching.fun/","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":0,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"final":{"url":{"schema":"https","addr":"kaching.fun/","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"title":"Kaching — Fair-launch memecoin launchpad","dom":{"size":148285,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65425), with no line terminators","md5":"037542680ae9c769690029b5ac9cb6fc","sha1":"f1f9e6c552dca4c55ba6c148dc15ab65f1317fbf","sha256":"b1b57dcf560e7eeea629528a037e61a2eee9785c3e610d6d6f25b51bc0a05b71","sha512":"40f1e3b0820a4e958ff565f1617afbb502ab4af647b309cef0075ea0577c0ee7e4f627de814f4a03f3eb6977462992060cc11ffed303a2e268bfb65ba8a865fb","ssdeep":"1536:Qj6eeeWrxXltKeyeL18CpdRbYH6SAhxMMGvYvqeeWalLD1:Qj6H+P1","tlshash":"f7e3d6309102a63a14b38eed32b7ff7591ca8238d563d51ac2ec833616c9db5f763a45","dom_hash":"domhash813bf68b3d1916ff5c99cd45433d92d0","first_seen":"2026-08-28T13:28:47.419197Z","last_seen":"2026-08-28T13:28:47.419197Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kaching.fun/","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":0,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T13:28:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"pulse.walletconnect.org","ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-26","domain_rank":247907,"first_seen":"2023-10-09T08:23:11Z","last_seen":"2026-08-23T06:06:16.390229Z","alert_count":0,"request_count":1,"received_data":243,"sent_data":593,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-08-23T14:58:59.95322Z","alert_count":0,"request_count":1,"received_data":944,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kaching.fun","ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"domain_registered":"2026-07-15","domain_rank":0,"first_seen":"2026-08-28T13:23:40.924101Z","last_seen":"2026-08-28T13:23:40.924101Z","alert_count":89,"request_count":89,"received_data":5158146,"sent_data":43923,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/global-error-c5c7d116001f0173.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"7af1ab8b1fbcc416c5030297d6b59003","sha1":"b7d38ac09e7058c0d15a626c1bc81494ab076cc3","sha256":"7186961250871e18625465939026b3a6dc6486f73fda13b6cfcc1aec6ca60864","sha512":"48010682b5b7ef653e693d67343dca60177bef5efbe610b185dc3e5ef0cb284a0e679bca1e505d80d0e4316d98b3c9ce80b3d298cae0f60eefd5e4fd638e20b3","ssdeep":"","tlshash":"043195192e807a04f8a3888d74ff981c30af152c75a9aa7553b7ad3150e37a53a33fd4","size":1603,"data":"","first_seen":"2026-08-28T13:23:48.650057Z","last_seen":"2026-08-28T13:28:47.535568Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/9654-e6220574c1f29128.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ba0564c051e10b529b44ab5b70c84a4","sha1":"96b82add0c2230a253a29b68cf129ddef46b3088","sha256":"579b73ed59d7a015d0bc833500f7789911c7a5250b9dc8e9739a12719e1542cd","sha512":"c83b9429d00e6a82dc83bb93da945187b3ed2b73c9d136f0cc556b0d66ced5892e0a1cb9fe033032f2f48c15d096b7d72ec8543737293b45998516cde9bc61d0","ssdeep":"3072:T3707fNNWy9PzStWk29B+vnJQ3ZF468ztCregWYGAG0uiv:m1Nf9PzS329B+vni3ZF468ztOfW3AF9v","tlshash":"89342aaae3557b32038b128a583e0594b3387b5c5609402d3e9c90ef63b9ed6c4e7f75","size":242722,"data":"","first_seen":"2026-08-28T13:23:48.591894Z","last_seen":"2026-08-28T13:28:47.493963Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/2825-df8f856908698fc4.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"a60a5a5b253b5d2322e058bd844185d3","sha1":"89f2f15385a47476800de9b5491966b87191e009","sha256":"00fc2f14a647087a3b5d746c0e2990bee21768f6f23cbfaaa13534e22cda8e9f","sha512":"3932ab62b51e5459402ed561315f4432f4f898ec720f44711f195fea1f27e7c5b3bca67f5657fdae9a1cde67b525d038a3910f551912e6082f6e80af3bb294ce","ssdeep":"192:KQVcBrq9Gal8SlnbAa8rXpT5WuV2ll1fcGh:K0KEl8Qr8tT5xVovh","tlshash":"60e1b6e63392b016839f52a3806f114af6b8aee0250f441df6585ddb283595e42e7f78","size":6781,"data":"","first_seen":"2026-08-28T13:23:48.694486Z","last_seen":"2026-08-28T13:28:47.504316Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/webpack-ac9fec7c65b532dc.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ba26a85fea24fb262001ce996a6c783","sha1":"6424e5a33b8d3cefbbd94d817a49210a98ee85de","sha256":"10e6d031c3317db6c4747fdd6b6c608f0189cf77ff7c3c3fab077a6d24f7247b","sha512":"0cc72df8aee110e617ad7b64630aac1340a0edf3bed7d340ca59d678c3e7001b57a0ca50632d363d4c4bcf0dd6e4dbc7438b32822ea1714321ef85cd6101e34c","ssdeep":"192:LwWpQL7+XJTubQVlK1jy4vTvu8m+zBJ0qhG5MCMZmp:LwWpQAEX7qX+L0OG5mZ4","tlshash":"b9f10ace736dfce51e6255a11d3f18b5e22e6473381e8890d205c9b12c70929c627fbb","size":8153,"data":"","first_seen":"2026-08-28T13:23:48.614447Z","last_seen":"2026-08-28T13:28:47.501338Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/3816.a3807bae512b23a8.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"283e1575cb95ed8ad5a9bda817ff6be2","sha1":"39d3613dc1e52c63eb2a14b3f3ff07000778c788","sha256":"524baa6e0405b93839934d3763fcdf6adf9d1e89fb30e2a3c9c9bfe710d44fe3","sha512":"3ddd075208a9b59c460a7c11bd9c4ba82194fa34097faf61039a0272d49fb7e5da706c0e0e91b37133a56ceba184b4f4693c32a7cdd41145501c207ee7881640","ssdeep":"","tlshash":"d341d17d34f17d84993ac3b38402322e51653e7bfc3998d5ee56603ae92950431d8e77","size":1945,"data":"","first_seen":"2025-09-04T11:45:19.088825Z","last_seen":"2026-08-29T06:07:23.528062Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/8708.df46ec63f0730c2c.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"222bb60ce15b032116dd1c303b19a32e","sha1":"cd390240f9a5c7d209896bc8e03c53fa4ca3df47","sha256":"de5e05d4269d63f04f8039e0e6fa26df0facf8830cc0e89437806c8c94f2c124","sha512":"35b46856e6ae592171421df2bac803e9ea537865f0bd924b25daea324f5560507f5141fb548afd68309fd2663baa7fd87ff51c7198d047ae21a0e2479af4f9f6","ssdeep":"6144:rWimJ3YgY8Q6Krg5Fzv4yyCiCsT0SpG05Ndvr+QYRYQObtjLodre82z2pXxgwykm:rVOyLbipOKi","tlshash":"1d943ba57372f43343de915ae42a1201f3395868140d842cf7b8acdfea94998967ffb1","size":424274,"data":"","first_seen":"2026-08-28T13:23:48.621991Z","last_seen":"2026-08-28T13:28:47.482182Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/7307.0391e49da5dba80d.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"12daf3796849cbc07ea98338d5160ac3","sha1":"9ece39b56cf95bf17025b7011f95926f19111dbf","sha256":"27a749369f9fd632613638862b28ecff1cb9dc804b766f607d5d806d1f731331","sha512":"594f01cdb7c116c6f487b779cf6fa9e4b7301c3e2f8f5dbec34fdff38729c20b680a689ec198ec11cd8feaea11955959d56497aad4841e9863d64d2b359f8d34","ssdeep":"6144:eZSC6mtuFOeprApzIk5dbz76jBDE3zsn9XdbvUTr3dmT3r30YQFLiINS7m:+SwB34dbvUTt","tlshash":"e3647d94b351b078cfe710aaa0273105f274ad5594ce4854f7e4eaeb29fc88c52a7f39","size":330889,"data":"","first_seen":"2026-08-28T13:23:48.627155Z","last_seen":"2026-08-28T13:28:47.508933Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"56743ea09fd20df96be5409ab3370ef6","sha1":"d7ed6ab25939645a6329a50e4b005b76b626effe","sha256":"a95e05dd6fec7da05062339cd34df3da4ab11f1b89c094b26c16e3601b64d187","sha512":"9de33783a8a2d7ae41e8691440b863462df544e095d6607bf785d8b9a16135ac8ffa8d02f40a56339ffb93d2842ec8f1f43269897a7d30666c6e0f701aec6df2","ssdeep":"","tlshash":"c1e0263e7694a03e852624ebdd58b7846e323230ad06a160682d88411894f5a4943b51","size":334,"data":"","first_seen":"2026-08-28T13:23:48.711585Z","last_seen":"2026-08-28T13:28:47.548025Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-08-29T20:20:47.798062Z","times_seen":103431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"4dd64e47c583870d60dc93c942273d29","sha1":"9d9b68dc7fda4776e1c8877d0d816c0abc26d952","sha256":"a471f186123a48d6fb6aa5beb71482c60cf8c2f93b60d8ded4435c435dd75e81","sha512":"84ea02b0f62eb6f1aa9f269d032a7a52ae449574c05f24fb2290373107fe946fcd73e44e95c15a92c37572eaf0e07933eaefc52b4e47c6407b2913e08af383c0","ssdeep":"","tlshash":"c8017104f447ece69c72fd0d61364eb49084ef7c92e298c462cfca8685b19b95b45b8f","size":710,"data":"","first_seen":"2026-08-28T13:23:48.713266Z","last_seen":"2026-08-28T13:28:47.549576Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"8850052303fc763605450541ea0e7da5","sha1":"c826f98c1a009131671c34ff38b6ba1d7bf60d35","sha256":"29babe73716b37fe67d97576a914e4ac6c6d760881ae50b83453b3c9d1ec6b5d","sha512":"67f195aedfd9ec627e7a10d147085f8236b2de0cec6b95c69263303fad36b1d24f032d7a25be159b3a2f311e1c7fbd898af72527e510f81e99e66f2978f3c154","ssdeep":"","tlshash":"db41a90f6146f9116ae7cd5f443a6f6b9588cc731238d1acc90eee3b408117b5368d6a","size":2245,"data":"","first_seen":"2026-08-28T13:23:48.714371Z","last_seen":"2026-08-28T13:28:47.550398Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"210c0351adae73a1a32c1e0772b966e3","sha1":"1ebae5763b6782898ae03d74d94ecac6835ee36c","sha256":"877e9800d353f5b6c6a0e9bb9c8d6f7cb4119ebf1ec42b60da3a9f0b4a825ca9","sha512":"993f755affba1c168e1e5c60b200ca992202b9b8d68de0112e02862b84af9a17d115df075e2487a0e4736de604e712a8c793bcd32ba07d3d49e7ef5edf999272","ssdeep":"","tlshash":"2941981fa149f9216de7cc1f443a2f6a9589c8b3233cd26cc94ede3b409117b4768d6a","size":2245,"data":"","first_seen":"2026-08-28T13:23:48.717198Z","last_seen":"2026-08-28T13:28:47.551348Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3d1fb85cfc803f83861488aa25cc45e","sha1":"10054558d0c7fe0e53b1800f21ab3d4532eb71d9","sha256":"317c7a38175864035dcc6e33539b1b6a5c5eac6fcc6d76bcfbeeb2d7e9568c1c","sha512":"dacff6d3a4983c522f02b64e4da9079be1c6cb9472f05d9fbd81f32682450824537f219ac44da4f070c5fb575ad5d202e91b0b707775455afca9cf3c083ec188","ssdeep":"","tlshash":"b841991fa149f9626df7cc5f443a6f6a9489cc73123cd1acc95edd2b409113b4328d6a","size":2244,"data":"","first_seen":"2026-08-28T13:23:48.718859Z","last_seen":"2026-08-28T13:28:47.552412Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"341ddd244d09f1928e7f33fe7487d657","sha1":"5422b1be3d88cfac81b7c2ba280f3191d8cf96b1","sha256":"a63d77dbb0ce26ee012b77a8ddc2b6fdb017b9533c6086eb5b329603d5eb820a","sha512":"a66d1424cc9cb6494f42b9d97861ef43a3583153754944754e6d905eb8024f2948879842c2a61ad33dd797e449d2c26cdd80158e4cd2d7291f2a1f0f2e8b31c6","ssdeep":"","tlshash":"4b41a91fa149f9216de7cd5f443a2e7a9488c873123cd2acc95ede3b409117b8728d6a","size":2244,"data":"","first_seen":"2026-08-28T13:23:48.72063Z","last_seen":"2026-08-28T13:28:47.5533Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"1db8d65fb51268a05c19820b63735a7c","sha1":"4ff5f7348cf7b38d21ab296d1d04a98de94d0550","sha256":"033bfeab641807098af9bd6e8761c1bf7398a9113bd25308968814d78496e3a8","sha512":"8a2b789b97700dcfca1e2747f96652fa213ad6cace2d2ea0626162068470a214f12bd63645907905cbdd126065ad5249b345d0d6cc56a467ea77fa87c045d3a8","ssdeep":"","tlshash":"4141a61f614af92169f7cc5f403a2e6a9988c873133ce1acc95edd2b408117b4328e6a","size":2248,"data":"","first_seen":"2026-08-28T13:23:48.7223Z","last_seen":"2026-08-28T13:28:47.554209Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"0eee510142d5dc58dace3286d2eaadcc","sha1":"7b1cb5a1de99d63adfba69b49b443d2e23ef4eda","sha256":"d28b6e2b70a22d414dc08166220b9dfc15955d2205bca35335f6fc81cd4e2d37","sha512":"8337af3025b00ec78776216dffe36e70f9dac37224e15d63be40f5f129b6732977e95df9f38fcea577283993927c96c63e4640cdefc9743f57c688de3678b1f1","ssdeep":"","tlshash":"cc41bb1fa24af9126debcd0f403a2f7a9488cc73123cd1acd94ed93b409127b4768d66","size":2248,"data":"","first_seen":"2026-08-28T13:23:48.723962Z","last_seen":"2026-08-28T13:28:47.556531Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"06127b0e46577ce1b9b0240de31d8064","sha1":"75650f921985a142f7322ae715686eb6794f8bf8","sha256":"d10869971d3b6fd0b7ca12b282ae6d8272c4e6e78b63578972ba04961cc35d1d","sha512":"f36433d79f169e9e1e3745299284d2ff3ae37b5c0ef5781fa815aa023cf536c52adbcf7ba6374947749f53ada7510f59487a6e59dcbebfc938d004161c653bb6","ssdeep":"","tlshash":"0cf0ff4f6005e81138a3ce5b10362f6a9998d8734238919c951de8ab61801bb5768e4b","size":642,"data":"","first_seen":"2026-08-28T13:23:48.725043Z","last_seen":"2026-08-28T13:28:47.558171Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c06a7dd881968db370a42795472eb30","sha1":"665b8d882a8cd96d6322ab6e0796c74d5abcc01e","sha256":"afe515b81f21afaf6bbc509fa57b6cf9ad72b9e81d61db531ffa5945a3a8869d","sha512":"1e75510d32d4fe96045170ed2d9f592c04a02fec144256588a28510c514b24320690e60b9635bcd0a980e8b6d27332029220113bb6d8c2aa5dd943d6eeca1a6f","ssdeep":"","tlshash":"d1711279600add6aec893d59293e6c3634ccc25b0696df79c2d8cd24038247977c3ec0","size":3637,"data":"","first_seen":"2026-08-28T13:23:48.726105Z","last_seen":"2026-08-28T13:28:47.559414Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c570b43aca38d3a8fa2a6008817e8fc","sha1":"85318f7394ee9cebfcf4ad59e27d4dbaf315ec77","sha256":"0a2530bbb08a22850e0602b313564fc8fed0094149e5c3a257c685a71ca089ef","sha512":"f7dc4428fd120d0ecda63bd5581fc38329f9b75aaf60eb6b57b76f6ad12fd085156f1b1c0339671e6fbf3ddc6f00cc5e9c7b4ea2194749ef55a7906fdd5f6be2","ssdeep":"","tlshash":"6b71b0f3ec16ed05dbca5e08293f3cb060ccc3969295a69ba29cd9748587d7099f0b21","size":3610,"data":"","first_seen":"2026-08-28T13:23:48.727094Z","last_seen":"2026-08-28T13:28:47.560646Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"551d2ff91e5e6330e74716e5ad7c49ba","sha1":"9914450a78d5527b68acc85276a4f33966009171","sha256":"5e6be35c958164a3f6b67c35ae7e3d61f0650a57144d4ac6e419170946905c9b","sha512":"8e180dd28ef14fc6040049b376fce1301bdf7bacb05d56364530b5bf6455e3c3adb5cfe32fb706b0de89620d4fa090743fca5eaf5810170c66ecc46ddb6c864b","ssdeep":"","tlshash":"0b800470d0400d35c0355453143c1105017d400d000407005350d74450111055505dcd","size":34,"data":"","first_seen":"2023-09-16T04:24:33Z","last_seen":"2026-08-29T17:38:46.8013Z","times_seen":3125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/8761-b6155a6342406746.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"6271cac472d1c54c16573fa87adc8131","sha1":"71c49fd93a3a1497c8f1c21e8ea2df1ec0bbed36","sha256":"f655f7acde7546fedd43c4f7bc58f0b629b45116837d7aac2f2fc544804d366d","sha512":"b3f9e7b284351cfccca9c3e4b0e874a65c3dc475dc70ec533e2b0716e2746351039d5adc38bc9b70084b6f8626b18475350c9a273ac0771c095ab40b20908a82","ssdeep":"384:2FdpHRm5/PIHrlpfda5GkYYOhDxIcbl+F0IZT+fh1Rmg4ErYFn4MHr0lwA9f3xUH:2DZ/rlpfda5GJYOhDxIcbl+F0IZyfh1c","tlshash":"bda2846a9fd9788d781b9e6c019b500cebbf566962174c00bf5ef038a5138d4f96bf80","size":23196,"data":"","first_seen":"2026-08-28T13:23:48.630532Z","last_seen":"2026-08-28T13:28:47.509978Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/1866.37d7bb321befbded.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9e74e6a766d22342d60b0e1621e97e9","sha1":"929baefba98c8e3ec69a2846d5614eb9904f14ac","sha256":"c179c38a70da5f00e24827cc44092ff1b86326638df9c8a720fb6ec0c26b7eeb","sha512":"6c539d185a2141df93625b32a969ce829719e55d7f059d132c3c654b78f8b6a312a5afcedb5eda08236f191afeede4229968ba3acdf8b70320520cf7f41d321c","ssdeep":"384:apByhqW2xs3dwktSu6foTLEQD4zrlqPqI:apBSqQ3p8BrlqPqI","tlshash":"68b288ada2320d497c3bed6bfa89790db0203fcb8915a4ba8f61b154cbd354df2d0651","size":23745,"data":"","first_seen":"2025-07-06T03:12:52.675498Z","last_seen":"2026-08-29T06:07:23.517198Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/kaching/page-cbb8a988eeb50749.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7c8028629ece4fb590c38c303874a86","sha1":"44fc53b64a792b97b59f5bf9ebd9abbee9b785d3","sha256":"248d055df780d56d4894976425c69ecede305c4afb79e7fc26898f185287dc0a","sha512":"741fb78c9b32a2dfed147c9b0dd3be6ea122b7459d5cbe2cf01a67250163f4c147a914ee1c6376f5d649a09ed14fedb393b0a6e05e7f028c01ca783a0fe21324","ssdeep":"768:ITGRheDxmlRF1yxT9i+JPgsRBvAo35ydnUeVHzic:woPjeNPgGoEipzic","tlshash":"96d2e824f540b7ace96b09fca5efa10cf36e1768da4a0478f5b8b4111a570e87743f88","size":28315,"data":"","first_seen":"2026-08-28T13:23:48.603558Z","last_seen":"2026-08-28T13:28:47.486513Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/create/error-acca604b295d7329.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"03238700447db1f2e3c2fa5e0fcb522f","sha1":"3d19be09a4c6980cb04b96841867c0c271fcfea1","sha256":"d17a8c7426f490346ddb116f89c5dd88b2a5542794750ebd70d0766f711e901d","sha512":"2ba7318d8a7a3cad67411fe8ee1a246b922c479b8342b7dfb2ea46861eb6cd090d2547e53db7c0e9e86a0ebe76c33b6115e708bebd810825b1f49d9974c4fb09","ssdeep":"","tlshash":"5951630430c5b9cd2a970ce466afa50eb13f4668dd0e9825daf56c9155921f93723fcc","size":2921,"data":"","first_seen":"2026-08-28T13:23:48.633735Z","last_seen":"2026-08-28T13:28:47.488393Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/2972-f0b676fee74d71c7.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cb033ff6ba560bd17d4c049ff7f3c3b","sha1":"2da34fd81c6a0d28fc659a0c7e08e501452dfca1","sha256":"6e502a26091acaa438e2968708f1c772eb06b83feb401adcaec76ef0cc1d0fd4","sha512":"481777b22f1929da6ba2cb9dfeec2875e924ccfd7cb7ea65f011f06c3ba79e4823449f77432240dd295828a5817656621393056f60282c5f8b1efd5c6185ccc4","ssdeep":"384:l5k1IdRMt34LG1DmLDRwqdggPG1kyDfLxrQKVhUEOAdONU7tpU2J91wMVG4x:zkgRMtIadmLbRKk5AE4tpU2ZhVJ","tlshash":"22c2e9fa71d2f8a247db1061443b1006f2be4caa145e6244e7b4c8dbf57056da1b3fad","size":26120,"data":"","first_seen":"2025-04-11T12:57:47.023791Z","last_seen":"2026-08-29T18:47:23.015209Z","times_seen":1406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/7122-0d1958c889c465cc.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"919243f58564c34b2afff055c97f073a","sha1":"a702fed298c8e1e7ff3089f75009be65205edb3c","sha256":"477035b6cbb0fec160815c65bc96c455a49dc53a6f2ec3cc371e179977e91048","sha512":"d8ee4d60919679621cd8adcd48c23e88d8cfeac7a9d31bb6d34729780d3df941a328934bda642861895bc5c40ad2d7387afe1f512653adccb020da4a0afa8c93","ssdeep":"1536:cmNcjk7Z0tx1JiDEGjGP4vL7kz15T6E55VD:cmNcWqOsB","tlshash":"4e63f7d673613661d3cb91a8c06f0741733754d82449803c7a7ee9cb6870a9a62fbb7e","size":67288,"data":"","first_seen":"2026-08-28T13:23:48.629403Z","last_seen":"2026-08-28T13:28:47.490214Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/3256-0b271682ff44aaf0.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"16ca9ac311ea153bf3ebc65f47bfda0c","sha1":"8fd31bab7c5f6c126783a1a650703aea746a946e","sha256":"053378b8e15812cd59b0d71f9829650d5fdbd1a045446d3f96ad4853edb29f00","sha512":"cf1cd4055f8a2f93065764f59031c3a832ae65a79acb71eb52504ccdd11a5c2dcd0b6d29b8546853ecbd23ab006e5559ccb586541fad02a5dc56d9ba4bb0dabb","ssdeep":"","tlshash":"bd111f9cb2d271d46b2735a5443f16eb63be84c2581844d7d6d55083fd3050ce571e8d","size":1042,"data":"","first_seen":"2026-08-28T13:23:48.704931Z","last_seen":"2026-08-28T13:28:47.533243Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/7803-8dfab773e9561f81.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc717e3ebbcb2f8e3da7ec0b3a39fc5f","sha1":"ede74d36c38d8f352a22bf5837762816b18e5b83","sha256":"1a22805f83120d7e67eec5338d1c8e82f948cf76442428b85b21e8dbadfdeb81","sha512":"e2cf25a2001e871d35fbc30bad8cc379ad8b265d8c3f969a7880226e83fe6341318fecaa78c44c85865c5b815c94d7cd616aca48bb859566445453f9d99670bc","ssdeep":"96:2kGJA2adIAMx92OREgbG18wEaxuHRmdMmIIRYQtimy5fy4bnNG59x1CjNJKGbdIt:/GJAxdjG1C18wnVHEfyinNA1C3KGbdu","tlshash":"cef11980358534b1eb9f548a587f452cf2be27247c4b8810f6776e4c3636290f2a3f94","size":8024,"data":"","first_seen":"2026-08-28T13:23:48.688062Z","last_seen":"2026-08-28T13:28:47.529809Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/page-15a85e0f3973d9a4.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"45b7fc0f5b36fb523991e432175ac108","sha1":"db016211a724b5065f37b2d598253bf3672a79a3","sha256":"929900e11ec49b124d9b2b7fe5155b6e51f8911933baeb95fd379045c6f5486e","sha512":"e2fcc8ae4092c374f95218082ac812986df136c30949f828d52f9191cc16776858905533b8cbcf26b958628600635a4fa18df1baea796348f4eac8ee90552a9b","ssdeep":"768:X0uML14NCLR97zyCLR9oCLR9oVatsnCLR3bQRQzIWh6IKV+BnLIT0zp1L6poNmYr:X0uiOJsE9yPu8XiSWZHnwqHU","tlshash":"8743b751e342bbacb87709d565af900cb22f1f14cb6a4875f5bd780929480e877a3bcd","size":60620,"data":"","first_seen":"2026-08-28T13:23:48.636672Z","last_seen":"2026-08-28T13:28:47.525297Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/120-6736d5f20c72a297.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"eaa1c7d6ce8c0d20753fd99a86645358","sha1":"52a85e01225f9f4dbb75edc02b4bd8d234deedef","sha256":"e28de09bc92e17f99d06c9bf59efe424a6148209b959b351235e3957be7b259f","sha512":"b01b6cb926cb3293402fb90cd03e63a5e7ca5b8799ad153a01a57fe6726f68f906a95d01332c05238ef707637626057866adf02ef9c21572a9e4c82c0f3f7227","ssdeep":"768:fJIsv1QlbJqElArgM8v/iFNiS3bduNB7id7s95cbegDECHLtDZJ609:fJklbJhmU9vs3hQB7idVCgD/Hl/39","tlshash":"0e6393d9b2d1b425d3df11a2c46f060ae27a59d8284a046df2bca8c7ac7054e61f7f7c","size":67841,"data":"","first_seen":"2026-08-28T13:23:48.615598Z","last_seen":"2026-08-28T13:28:47.503398Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/8890.f6829c2508866de4.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"710956c4f0bb36757a5ada8391177afb","sha1":"4144cd04bcadf5d00c160e7dafa970e7ac3bcc62","sha256":"46a2eb4d7bbb222f5cbe01b185fec89e4b112a04e4b0241ff7df36b0777e5c9e","sha512":"ac7a9e9d63927f1f1e3375d59eec2beb11628f6058a65231aad964e8640905253b3774165f38e7b0243db4d76eeb5904f0e162d570b0d5cd1701c0c9a0f5959f","ssdeep":"","tlshash":"df419eee30b03c89d43bc563942a301e61b22d3bfe2d9a569aa762647e35c5410d4633","size":2002,"data":"","first_seen":"2025-09-04T11:45:19.057696Z","last_seen":"2026-08-29T06:07:23.568224Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/2367.6b0d1ae9e9a3e732.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd19c6be0ff3a028fe363b25e1a205ba","sha1":"9ac795258eaa16c779a16b1af06c13998a054490","sha256":"737ba8951e4a4684b558a8ece4e304e420f4e0b738a3dd8a7b2219867063c712","sha512":"91d8ee9a11126b38dd9d6f4f1e360d9c2327ffc66d04b4b974e8474f41dd6d58802b0353042ac7fe307ae9f0291def171e8b9d538aed6609c0c7099609101f56","ssdeep":"192:G+nQSYk2qSl2qlEW1QSDdvWwMAuLT+JjisSE44ovGSqyPedtqPq2qrN4qrNdO4:G+34pjZWQufLsSEBovGSjedtqPq2qSq/","tlshash":"dd42ecbca5711b5ebc73d417cb55b61990313fefad6488a8dfaab208cb9691cf5e0010","size":12120,"data":"","first_seen":"2025-07-06T03:12:52.67279Z","last_seen":"2026-08-29T06:07:23.568795Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/1817-fb5f68fc6c342cbc.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b97f23e9b778305c779e6c5bdf93d15","sha1":"7f53142a4088ac4217808e76536505dac0f4de6b","sha256":"bbe9cf02d75a5ad37e1bf5e598f3f41a4ae5eef87c9fc79449416ab7016e3b48","sha512":"11b59aa8dde6116e3f73f3cea4f62ed6fc599ec5b25c0a00e0cb74ba008e724e0de51131b98b7e6ed86a9b46659071a301e62b0981c9c9af6385236c27a40906","ssdeep":"96:8k0wfSkYexqChinshGE8oyHmdCYdSPRMu3f1SzU1PyteSiJkA:GwEChOshT8oyiyzP1SzU1PmeSin","tlshash":"9fa1fdcdb2d775420b6a1050c0bf019a733d0cd6992e0a18b65a9dda7c3de78d2a2f1d","size":4731,"data":"","first_seen":"2026-08-28T13:23:48.641159Z","last_seen":"2026-08-28T13:28:47.505212Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/9520-d80600f3e6d22b74.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"b03375e644f8fbb67a02f535c19faa0f","sha1":"e61e8bdf8758815d66b3ba5e85e4a52c400753c3","sha256":"bcc23679a77f2c549c277fedee2dd2500015af57230fa6bb624f748ad4b8da81","sha512":"61ca392cb5f363afc0f02d1e3da8f78b295dd4645d420dda03da3c41c5e7a78bb1dd234d6ca5740260a3304505eb65eb22ec49dc9a691dfe4b3e92a14da6dbac","ssdeep":"384:75ZrJWX1byU3nYJ3U834nCNjBq2pVoA7B27CB/06eGa0DfHXdKsX:vJ0P3nYhUc4nCN3Vh7RA3x4","tlshash":"2992e9e9b6c235a5a36b086955af900df37e3e44a80e0814f1bd789539574e4f3a3f8c","size":19847,"data":"","first_seen":"2026-08-28T13:23:48.59413Z","last_seen":"2026-08-28T13:28:47.523458Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/2156-dc3cf9285130c22b.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f3d7fac9f717d1b27a08955aad066fd","sha1":"582c850ef0e87e92354351a98669269967e54221","sha256":"d899341ec27318d61f1c32de382d7318c03460d3d55d5685ff797f991c9d15b0","sha512":"c5850a7e0d7aa9f2b2c8c06ddb3c4860574392d783ea5a8c64ebfaebaaf9d96e7ed85fbe2d821a16616e11c7c5af3339cc11af568e34b90e67253e628f14b48b","ssdeep":"192:1L9EHR+iYZ7wGElJsiXGHgFvXGBexR6UZs8BN9ZAVv+vS/1I9zAUYPl59Pm0XnC7:1L9EHR7YZ5EbGHrTsEv+vwSyW","tlshash":"b352e89632d2f1262b57c099c83f8206f3765d2a580e204d77a11cf2b466dcab1f6f72","size":13387,"data":"","first_seen":"2026-08-28T13:23:48.706869Z","last_seen":"2026-08-28T13:28:47.53416Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/7879-0c0ce6e31271da03.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a555f8a3bd8895dbcf24193b1ec0244","sha1":"eb24f27756ff133675c1125acef57ef18595227a","sha256":"6959db085eedcddcf89f005d90b52a8c968796251ee7ad806ef48167936ab799","sha512":"6a2a5493ade729308229297bb28ba5e2ced71a2d7610023a25c0bc2caf06712c86a50b0a2bf20fc487a6bbb15ea0d014d0c6baed4da9a38c43cd81bcfa447972","ssdeep":"384:GVkqix+33qEwLnxSzxb3WQWKWTdF/3FleUUFzEw/nEv7X:Geqixuzh3YF/3FUUUFAw/nQ","tlshash":"d0a2da91d382bf6cb97b0dd9686f510cb22f2f24cb5b4864b5bda84016044e4bb27bdd","size":21878,"data":"","first_seen":"2026-08-28T13:23:48.620864Z","last_seen":"2026-08-28T13:28:47.530917Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/4e88bc13-46ae4cf1df85ab1e.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b25f00912a0fbeec73de9ee0be77e67","sha1":"aa9bdbc0674c9e1b40a609044372f568c01ed2f4","sha256":"daecdd5267fdf87b27fe09eb7bdc351b2c9ef73d25b170470b4ce9e63ed4c8f6","sha512":"a27fb4f5f8a99a22147ee7fa8d4393a2b0dc5c608f04b96b3ab00c54b2de4104a831a8c8dc8ee14b6e165598ea826dd210a55253c24ea3e0385aab5058206e1b","ssdeep":"768:Z2oe5Y5hERLYNX8IZWx58CFT8R7yKHHdyV+FqPRnxAS0AADA4ztXn+7YFt4N2PfV:dtwLY5WJFTsAVJHc4MM7tFtxzd90lsU","tlshash":"6ae3e706b760a00c7247c12e55fa5a18f2562f6cc53d6a3421f2af392971fc0a5b67fe","size":147218,"data":"","first_seen":"2026-08-28T13:23:48.65981Z","last_seen":"2026-08-28T13:28:47.499295Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/not-found-9fe7527f9383eb33.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"6beb19ca0b2ce391aab3ee6240121915","sha1":"ee49dfd590acef9593affe384917e6929f3fa0ac","sha256":"9ee50e49b5613495a0249fb4fc2a6fa27b1eb5e5ca64d8648751492adad9c301","sha512":"feb9a08ca54e46ca4ded7f7efdc446a7d4a1b786b8d2923bbb70e0143d04077da7eceb6e516d45d82230754fa2d3a8eb989cc2215c8c5e3e8684cfba5fe6f8bf","ssdeep":"","tlshash":"1dd097557781b82e796b6ab8f8bb086139fe041438bba4c162218cc11c333bc8351c8c","size":247,"data":"","first_seen":"2026-08-28T13:23:48.599405Z","last_seen":"2026-08-28T13:28:47.463602Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/6324-886ea6dff2361c62.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b8e1da2158be0aeeef5fa78ec6830af","sha1":"5427b69c1d774ece4b0649daf47cd9b1e4bfe0a2","sha256":"b86812b960b525d175326df2ec48d555b621df720ef9e6087d1df1f19f5b6194","sha512":"6ae2e12b3886d7a7ff7c71f59b9e3553e49d95e06a9f206a13f19fc521ddf233f92c8f9bfd3d598cac652d37d6e2fc85e06d29419d3615bcf3268f19748412b7","ssdeep":"96:9PGxuAGzTc9pOA2w4ADElvdtMWVmvQzuZfTOIVuMsZEIs/UqIEl9yO5FlgR9QYi/:Ccc9pR2w4fGW0QzeOIVs+iqByHq/","tlshash":"17f1eb607286badc940b4c88d56fa01cf26f4758d75a9838f6f8ac2025a70f57657fcc","size":7565,"data":"","first_seen":"2026-08-28T13:23:48.673493Z","last_seen":"2026-08-28T13:28:47.527118Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/2117-0c2919f6fb137799.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"222a52b0edfb68aa8b9ec02fe32781ff","sha1":"e2a6cd5483850dc7f04a33e1f0429581bcf65ad3","sha256":"93552ef42437efdda5f51b9a7a000a1bda08bffdeb77a31ec0ffeebc5433ee90","sha512":"e6e0c2593d42445fbc45e40c48a83635d145466288ec69166849ad6df3247b044106542c41cb66263853295106a570df338211f113555a7ebd5aab843e0456c1","ssdeep":"768:sXN9E95eRwb9lPftVDK2/dOxprEbBunVZBxxqKj/3kgQpD7dlr3efuQBx3mf8oZP:UvwBl7gpO4Vf/Sdl3ZLffbna5J515Ev7","tlshash":"e3c3d8b671d0f8e207a744e1843b400af3791c3b146f74a0a7a5cdd9b5a44eea1a3f5e","size":124727,"data":"","first_seen":"2025-12-15T12:55:12.934445Z","last_seen":"2026-08-28T16:21:06.237052Z","times_seen":1609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/5074-570fb5d0872de9a5.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"744c909ea0be6716054b42de4b6d5c43","sha1":"95019b6deeab9ae0b84cfb807c6eb4114faced0f","sha256":"05801987f98911e5ecfe99491d1020a63217cdd82d717a5ad00bc8ec495cba55","sha512":"aa6ffff51bc081dca80a3f5680a301c6fb064f964d1ff1b23c610d757d8f7a5350af648e6a7d0f98f86c94757ecb719de97bf61451666ddd06e833e1771b8767","ssdeep":"","tlshash":"124111cff181b0056113003141bb472dba0e964a9c3e4fa1951fe28c35a2f7c466bb4c","size":1925,"data":"","first_seen":"2026-08-28T13:23:48.662099Z","last_seen":"2026-08-28T13:28:47.51755Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/1215-6855a19e2ec5bb3b.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ef986781a2debb5b5eedae33288939f","sha1":"c6560fa726295c7cd7336e03cae67f6f1453de25","sha256":"16c79f0a4f1f656374900257b0e51fe3fa2a10ffad3dd471adc61b1d2bdd198a","sha512":"b997f0f3e2146c5b37335bec7e67cbe087d992f5ce61018f0c63d229b01ca80953fd3ad6226a3e1c4028983ec8d9e98a5f9b9be865e7c3738b17696da7856513","ssdeep":"192:lrFOkMxAWyR9YlFlsFGC8cYl25q/XsvbfKUrfVeVc3VI1e:lrFxMxAWyR9YlFcXk4cDsfVgclIg","tlshash":"d842d8e1f3927bbcb62716da182f8018f22e2f58c61e0421f579bc5129591e477a3f8d","size":12541,"data":"","first_seen":"2026-08-28T13:23:48.638058Z","last_seen":"2026-08-28T13:28:47.460916Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/main-app-c7ee9fab2d0200d3.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d5005704afa8a2c40d99ca3bd07451a","sha1":"affe42c5f03f8272785c6e40a8bd806e61367a82","sha256":"8e5697bb24e18d15e5ebab52cf62c3addf093b6d9831bdb37bed5212ad855f65","sha512":"c48671595da3bef83e7879817828c50f277f688fb88e85f529ace92a13c76ec89ae773eac02eea120a6b2bdbd48af38c80c7e6edb81f607b5163ed73bc20f013","ssdeep":"","tlshash":"0ff082992a4cb02f2913ad20fed76c2e255e416028ab5c642608dda12c336ac93f1c78","size":471,"data":"","first_seen":"2026-08-28T13:23:48.654206Z","last_seen":"2026-08-28T13:28:47.455846Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/9568-aaf4c61ee0263563.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"18181f2cd8f694540a47f5d8fb33fc08","sha1":"ad90d793bca26464e729c83abd0476ab8bd404a5","sha256":"518fec486d3dab65ebbd6d0485c6b760755c3417d9f8b5fe5956acc6396f5b75","sha512":"8e138be84ffbdec17c483feb2fc922638b8c24970c8ad6da2729bd2f384d8c40f8fdf0f31b447781187e3229bb3bc5b6c00d4f57366b692c5a5e50e5340f9bb2","ssdeep":"96:Rjv8nKMDb09/LGZ+uGunYowfIL8DDP2IO5OR13QZmeGTX2J+wsAMy2LDTn0nnrVj:RjvKd09rVIGMi2mem2Jrs5y2L/0npj","tlshash":"9ac1b735e2d73729879d51d6414b4a22732df575ea060cc8916ec88d1068cffc2b7b94","size":5762,"data":"","first_seen":"2026-08-28T13:23:48.648972Z","last_seen":"2026-08-28T13:28:47.511004Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/6360-dffa8439eda071ae.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"332c05f699b41471d3f04ab09adab262","sha1":"225ae5a09e4a7f38281a51069cc5571aa1baf67f","sha256":"810b9e194e523a48115abc5b82c510b0e905ba077ca789d0c5fb81c68ab4c762","sha512":"69708d9e92f289807c6ce1526aa9d1fb73e638ce4bf9c038d349044fcdd85c37f9a5c2d7b9b124aeb3d914d1905fb6bc2aabd412a680ad07b3607cda7803753a","ssdeep":"1536:CmVecLhYi2gA6V3MYq9PG5NHfEipw8x/Febk8KY01lBrqX:CmV2uV8rB+NH8T8tFebklYyBrqX","tlshash":"9043a791e341bbacb96b09d9655f900cb22f1f18cb2a4874f8f978052a590d87b53fdc","size":55440,"data":"","first_seen":"2026-08-28T13:23:48.60552Z","last_seen":"2026-08-28T13:28:47.542702Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/1271.c46824b3376cf03e.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f044775cf8f17276f99e02f8ffe3da8","sha1":"47094745f07aec354c8b6c8c4df6304b2be12c29","sha256":"225e402208a095c6dbfb50347ac3f0971b4b1c98f9f7fe297379ffdf3f3035ab","sha512":"2473f8fc09b61cb653c6223eddcd6e171862dbc5c500cb29adb35e2a7c63fbba62e56be20552012aa1b41b0219e05af70da71de3c346166e23d6db288a3ca16d","ssdeep":"96:c8z+pilTNtMvi39TWtyei4p4ut6KK4tJBztP+BR:rqpiD470sd9s","tlshash":"9ab1656da5b96ceedc37e48fdc28670e8020bf17ee0449b1a999db4e1f25818b0e9540","size":5246,"data":"","first_seen":"2025-09-04T11:45:19.028234Z","last_seen":"2026-08-29T06:07:23.567643Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/809-a60d6aceddd0233b.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d91b07e10568a31c3bceb1eb1ae8ba4","sha1":"d70169336973653143a009b51883e9a4da807bd1","sha256":"6cf3fef18c2de9a80b0baccf526a2e63a49e34b53401df6c1d46152370fa4ecb","sha512":"4ebb5f75a140d7f2964b667f503d3ccdafe8121b28ab53c6d308994b8b03979c03e221c3a19a770266af911322b68c44eb5bfe13124d316234a7fce9721880c4","ssdeep":"","tlshash":"fb8155f6f3e37050232310dc686b1121f12dac85981da6d8d6a691867d3072d93b3fbe","size":3882,"data":"","first_seen":"2026-08-28T13:23:48.607967Z","last_seen":"2026-08-28T13:28:47.485562Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/7833-54c59218d02dbc08.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f11a3ca762ce37e2db5cc18e5b7ad0f","sha1":"67e1e0b104f8aca2a32d8ba88e6a3def89790d22","sha256":"86b6a2d5f35f758e0ea4458487557a820aa4ad399a4bc8d2c67a5eb933e15102","sha512":"ef454d82e2d1bc2339ad0dcc089ae1115e0b8d35e1712e0f37091c0492e077c6b4050c885c2621dd75f4c78f49c0d676bf7c17d90c7c2ed359833f20c202f804","ssdeep":"192:qOSAr9u4+QkEJBuWYb5Ezg965Jyk9OV4FfnBlH8Jy8HRx8BwHfQ5bW/MlwHh0p6K:zreQlBuZxitp8WE9KFpJ7","tlshash":"88321b95b2e074e1d3de50aac06b0719b2787a4c220f042cf6bd6caf57a84ed91d3f58","size":11940,"data":"","first_seen":"2026-08-28T13:23:48.593006Z","last_seen":"2026-08-28T13:28:47.545403Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/8063-53b053cdc2f2972d.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd40ad720adc7671e3f413ba78eb1c11","sha1":"7c738259636097d8355a688015f7b619aae498e4","sha256":"f077024404fb2bce27f18000af6d6ba31512b6ea485cb2618ccdca5eff77cb7b","sha512":"d3f8863b5aa82defdeb6fc45a6a508d81076d96eb3d29ead9dd6faa0986e3e4a8776c440e3e0c6e4d4e37d216e6146f0c246d0d367f6820b9cb07a3b5cc504b2","ssdeep":"768:fXuXXI9U/2rZIt/1gGq7XmXrE3uZTuLoEJ:fsI9U/2SrQQV0","tlshash":"b3330885b3d1b47657db82a6643f1006e2385cd1180d046cb7b4a9ebfda368dc1faf68","size":51320,"data":"","first_seen":"2026-08-28T13:23:48.657342Z","last_seen":"2026-08-28T13:28:47.502548Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/1216.8b5416b871c66816.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d7161568dbbbd527c7645ac1e833fef","sha1":"08d45957eae38800b5fba6a2ac2538c147c94f55","sha256":"3d437f75b0f62bdfd1d4584c1403fbc56fb47a1b752b7492a52cef0b8c53c597","sha512":"306780f5f7db8b30ed2bb7e70bec183062c201a1c4b573274e465d964091c1e9a8250bc69e767c36603bec65b72a18b9ec610bffdbe9f766d0e829117082d438","ssdeep":"","tlshash":"bc116abca1643cce7822d56355392688e223ade6bcb104c2ec96b603cd14908624dfa4","size":1028,"data":"","first_seen":"2026-05-29T20:00:20.618884Z","last_seen":"2026-08-28T13:28:47.458038Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/create/page-82e112ac4a354e5f.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d24fb1091ae042330a46794c1ff1984","sha1":"a0e747fec8981f50035a3606b30c1c5942967efd","sha256":"285e666cd0e1617707e0206ddf55cbc24197b4b324c939503cc75c0b7b3d557c","sha512":"b93c80d2a3f4c5be3f5102bbd428366759f178496b54f28048f83704a6fa71bf99975b6acddf115aa432a00c9e6e5173914575862d5a9a2355faaeacd030564e","ssdeep":"768:Tbqi83t7Pyo7bxPX5M7qYqc3JbPGUnrlYKPzOKSvZ8crbtDZ+TaX1i1RA3UmhNPo:67qo7bLM77qcb8Z8k/gzYhNPI1YJuIW/","tlshash":"b353d950f341b7aca9ab09e4655f910cb22f1f54cf6a4474f4f8b8012a494e97ea7bc8","size":65759,"data":"","first_seen":"2026-08-28T13:23:48.640068Z","last_seen":"2026-08-28T13:28:47.42647Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/4707-256ed843c24da788.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"88afc3c3ae59e2099a2125dc3ac5278b","sha1":"18d47a2c49d0704fb3963daea8921eacf4b66887","sha256":"afc8be2222d8b428680ceef2f529775776087209536f99a6ab12e097839eb6b0","sha512":"29a4fe08fe9ed0e5c163495bd40fcbf476cd80bf28fe850645a6e0dbf51e045bb54e1c87dbc22491d2adfecb2b152d20a26f921da83fa69b62a3cf29f142705c","ssdeep":"192:VpLzph76/k8uQRl+KPhVHJ8KeAukoxuGkjt:VpH7QDZn+KbJoXLO","tlshash":"4812b7f530d6749a87e74099002b0108f3356de1260e8554a739c8f9fdb62d9e1eafaf","size":9544,"data":"","first_seen":"2026-08-28T13:23:48.64322Z","last_seen":"2026-08-28T13:28:47.481127Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/6681-a86e5de1d5e4717c.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bcfa57298e68f3c17d608c1208236a7","sha1":"df4eb5f0e5a02f563cf6564300f10bf25e7b7e92","sha256":"63221e736928038b3ea73b40b52c1d89fc6ea3056a623f4d4735838671bda70e","sha512":"6a97f99cfdddd23e910a0718520d3813348c826a3e20bcda675a7d786ae4527c6553edbf3aa2aa4f487840428c4a4e69689d99cab6bee6a249a9235619bbb630","ssdeep":"192:nMoVWa9sXJZpxFdQzuqRbEHYm1Y31dQCe1KHUCP:MUWa98xHWhP/31dQF1hu","tlshash":"9b92128dd44039cdcdb259a59caf7624d8f578e348cc9c0273aa9d6f1a946e4423bb0f","size":21032,"data":"","first_seen":"2026-08-28T13:23:48.682079Z","last_seen":"2026-08-28T13:28:47.464544Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/layout-3a3e8da463fea12a.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"b33e04448b9513b5a5b5595e016c7146","sha1":"a3ba2a9823f200803379a68da5978fb6c5ee4dac","sha256":"981927b201303eda590025c3fe1f6d7f6ec2f543c526c499d96f5533258d477a","sha512":"245f707cdb0098de0ffc99688bc7962fffa39de74b72ec89e3258ef08bb8417fd592d43e4d1b273f02313bed1a97df5561b10904720bf30178c427daea621b1e","ssdeep":"768:vO/HVEHVXj3p+C+WomANi7ioxTSaxTej0gjihFErET4hXK3wKVjNr5isWwrAZYur:vO/HVEHVXdofmZOqGo4RKhNsuAuuuxW","tlshash":"63431b55b2827aaca6a705ed64afa10cb23f1758d40e0824f6bdbc05251a6d4f373fcd","size":55546,"data":"","first_seen":"2026-08-28T13:23:48.631615Z","last_seen":"2026-08-28T13:28:47.462725Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/7678.ef405702e7864f7d.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4d5b8353bf16525807304053e1a0129","sha1":"66c0a5a5f3b4a1800013e07af0e4f50478773593","sha256":"688700c1a4680f42bfe44634ac2d53140eb7b7b5750471fd4a537792e068d69c","sha512":"094a4602eeee29ca00926d5f0858c2731a04aa9b41d88b339499dec2451ecefa1ac76deaacc0586808071a9598e422d09946b7f556ec4adbc864c6d0aff8da11","ssdeep":"","tlshash":"aa4144be29322e4e68739c57df891d0d7122ef7bce146861ce690208cd2371971e0a31","size":2328,"data":"","first_seen":"2026-05-29T20:00:20.615606Z","last_seen":"2026-08-28T13:28:47.515104Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/2957.c62f3abb6b8b7f90.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea13f4b915ae12c51b2f213294a0737a","sha1":"81cb066757bce74d8e459b56089a633952544103","sha256":"91cc3adee0be5a6661a9c388ea64805784d46b57757dc1da527352483b543f4a","sha512":"f0baf0735038d61216a37274d5dc3cdac8233ee1d48d16a94a5dfa1abbf0fe901ffb4964020c3999036c56ad4b46f7774fb60b4440eee1ebdd62be0358333d06","ssdeep":"384:6nIQA80LbYn1OeOpf3d3UfwNOW54ZImpAwnED8xBsQUtCNuE:W5psBeOpf3d3UfwNOjvfnED+hNb","tlshash":"dec27684f7a5b03603a26291046b141bf279ee79948c58acf260e4f724b68dd94fff74","size":26723,"data":"","first_seen":"2025-03-08T10:39:10.064205Z","last_seen":"2026-08-29T16:10:16.955214Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/season/page-e48d467950540593.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"b143636fc776973c0b3a46c981c12a66","sha1":"5d5db5371d4c8ce04f95fadbbfb4a5d7581be467","sha256":"cb8bbcf307c8f092838f5c96850278f8fb5ea053a4743a1585c99db031e957e6","sha512":"a81e12b2291e89a2b423df71ac6e3e86e338ec5055a03668b8d48b2db6bcb88b11485cb8d17e857bfd5fc4c0d7a8f2027d05507924e0558719b0611874929323","ssdeep":"768:CwqiP9sm4lZlGVmHw+CeJAdr028IKTK18ADMYuCLR96Ptjavdb4clwITOAbgch:PgrHw+CeJAdr02FKTKmdjau+","tlshash":"66036290e355fbecb96b08e9656f900cb22f1e19cb6a4875f4f9b80519440e87b53bcc","size":39049,"data":"","first_seen":"2026-08-28T13:23:48.663583Z","last_seen":"2026-08-28T13:28:47.53795Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/3882-9322532356f01624.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"1509806a1b97ed0174b3b67f7cf1cc1d","sha1":"d127b75eea601eb2b8306336e9eca832a3e2b18d","sha256":"643858be36b6b11fd37d496133c8c423836d52c2dffd81e4e3801b58b0e83718","sha512":"207ba73a609297c34e9b21055185cf512e4cd4973d6e026969eb4603131694906c93840bd5e0f1b24791e9d8c9172870093126d7ee8c40e6131b367483d98af1","ssdeep":"6144:S3bsUavtqv1vul3BLTRJeDSkDksWRkbTta:SLDta","tlshash":"fb343ce477a1b0a187db61a1546b2001f279e8d5654d0058f2b8e8e73fbed8c85f7f28","size":239056,"data":"","first_seen":"2026-08-28T13:23:48.661087Z","last_seen":"2026-08-28T13:28:47.520128Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/1582-90bfae45b10ad55b.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"90c00a5ab76e202c4fd839d5e1f5f470","sha1":"57a1c476172de97ebd29e6377e57cbe2b3474bc4","sha256":"008fe57028b06c3b9776fea6836d118cebe1f33672798fb9002a9e3ef1f504df","sha512":"4a4282a8346fe7c3f91d521e2c5d307c2599d452617bb6c35e50cf71ac8e01f58dacbb81ff4ccfcfb6c492be4f02e5a9f8087cc890cdbaae71d0364c91d40e8e","ssdeep":"96:xTOIcKK0Ge6bGU6wK78KxU/+GEWy+1VXS5OGAk4umld0syUY5gk+dJDEe48m/kTb:tJniRH7/4WyuYNjyFyjBWjikSIT","tlshash":"99c10794b3a371aa97579264907f5523f27c737011cd4820e2027a96a4383afe03bfad","size":5745,"data":"","first_seen":"2026-08-28T13:23:48.628311Z","last_seen":"2026-08-28T13:28:47.48009Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/whitepaper/page-13d670f4857a12ea.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"944f0daac6827262e03a439de3a1c8f0","sha1":"cc88ab264aa4fb96a678f8cf84263c11153d70c8","sha256":"d0b8b7c137d68c870128f699a94472e44e366a80ac4d6e7667c8a8ada4751c00","sha512":"67586c690b82487dc6df04c5dad8e7f7d152207869f1be8989349a02969911f7a035dbb50ef718546e90dc7f9b55239664281e59a37a5a7f6effe78f43cfa7e2","ssdeep":"768:24dvPCL7wCLzoZTgGC+tPXSzK+VLsWR7B40lixX:zWoZTnpbj0IX","tlshash":"dcf2c850b146b7acfa7708a862bf800c723f2b54da0f8874f5b97c251a5a1d87753bc9","size":34615,"data":"","first_seen":"2026-08-28T13:23:48.624481Z","last_seen":"2026-08-28T13:28:47.521076Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/fd9d1056-5bd29454b8b8b5b5.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"a69d5e780ddfc8b6b228f594dce5b7e1","sha1":"17725b0e4599ecdd6f4c83f741b6696d36ebd68c","sha256":"865cad64a44a0c49b5bdadd6c3e9a9a363f6943fb9a70efc1b6292ebab67276f","sha512":"445be2ed5e1bdb44e6b3b14022fb88b9ac101aeafd8d492e29720041cf7868ded43b563879502eaee687300dafa76350c075512e7120f861dd9bb5e47a56e75b","ssdeep":"1536:WVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:kzug758kkEiXjOAprX2wd5WjguGOK","tlshash":"27f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172837,"data":"","first_seen":"2024-12-27T03:29:10.636706Z","last_seen":"2026-08-29T18:47:23.010006Z","times_seen":7793,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/error-b57eb14b86c9229b.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff2168bfca3a64fd3074d3b0ca392521","sha1":"58c66a764e8fd52c0810481a7a14f190d60f9217","sha256":"4b7eeb2328bd2177191d245bfba090714874e1c62d90b49c07959b885d163850","sha512":"8fed557976a655b169e30249e0a833627244555f56190ad14b17b55262ecb7e70f7bd1b0529dc0488983420d0ad3e916f638cdcf949d8e3b8999b0ea9964989e","ssdeep":"","tlshash":"e851630430cab9ce2a970ce465afb00eb13f4668dd1e9825daf56ca114921f93363fcc","size":2885,"data":"","first_seen":"2026-08-28T13:23:48.644679Z","last_seen":"2026-08-28T13:28:47.423729Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/profile/page-90dedd66cb8570e6.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7897c80d9a4aff54c8aa84afaa8c958","sha1":"f71807d0acad8f92af042dff9ac1ae776d2cd364","sha256":"767cb7fa4186698859eaeda2ce82afd073414efd535b7a33f719f05374aad4a0","sha512":"37555ea920fa9b56ecd599bd9983315093b5bcd4b3402bda5823945d10cd4494be699effeab57ba7f9e9f8dcfd845acab8635305ba2b522014c6f600b0789284","ssdeep":"","tlshash":"4d51d198e355bf9df56304e4246fa01db52a0e48d71e48b4b9fc58125ca10e83a63fde","size":2447,"data":"","first_seen":"2026-08-28T13:23:48.66659Z","last_seen":"2026-08-28T13:28:47.50024Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/4745.bd1deb8d3a71da8f.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e0daf86f95de600d8de7d5dd07ccb1a","sha1":"51ed7b30ec79c84d2eac0b903773e77557541294","sha256":"616ab2c8ad0cd4c9c45022ab94d7b86116ce81abeefd0d6c8a2c7a435e1dc385","sha512":"a90e5549a7d291c86c8d89d4db88a37147bdbc0c561054e444b8b525aa348f90613841b66183c0652a54a2f1aa3c4933caaaa0a980336f25851874ad4b92e336","ssdeep":"6144:6R4fYVYIrac5QNoJy3M6fk9bTh0mkjeiKvYWY+LHTye28dpaxYF6uK5ja486RuvX:DaykDtNznWB0BIrBNtVY","tlshash":"34c46c617372f436439b819ea4691204f2385899140a843dfbfca8dbef845c995bff72","size":550436,"data":"","first_seen":"2026-08-28T13:23:48.602704Z","last_seen":"2026-08-28T13:28:47.489296Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/8004-4bfc782e0d8cbe74.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"daa8987d110ad0469fdbf5ef1ed2dcca","sha1":"30b24bd8ee72f75d44fd2cb210dd38d27c812ff9","sha256":"612726fe51dd8c3c99d21dd709257c4e5dc12549b8bfe79cfde314e222180438","sha512":"0dcb9fcb2d3a984816df241ad6bfb30062d2f92ba1ab85dcc1de91816e602335fc6480df34d5c1392813630b75d5a2f79f75054863a16e1039200661ea91a2d6","ssdeep":"","tlshash":"e451751b74e37420a79f126520bb2502f33aacc1249d4c95c15bb6d69d30f04c27bfa9","size":2760,"data":"","first_seen":"2026-08-28T13:23:48.679085Z","last_seen":"2026-08-28T13:28:47.541266Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/reply-launch/page-32657a78d4a4809a.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d2c226cd6f6c58f734500b6eb0395f4","sha1":"a425b3485ee787404324c0bd3b2b0449dba0ed75","sha256":"b002f56b08c8c3ca9688a319031dabb0687ad9aa9600235d89f7804ab8eeb342","sha512":"0c3360a241b652e6d26de94051cabe35c22d26d397b029c0c2316d5c756d65bec34b4fea6605787e08ddc9ccf740ba9fdbe22e16ee2ba60f6d0fa173fef02cb2","ssdeep":"384:0FlyNcQZPHMmBbVX0gjqrn+CLR9vgCLR9NPgdwzxLdg0YCLR9fjMB2FIXpejHCLY:wyNcQZPsmNNrg+CLR9vgCLR9NPgdwk0R","tlshash":"67a22151e205bfadb97b08e9656f900cb21f1f58cb2a88b1f8f9780519590d83b53bcd","size":22286,"data":"","first_seen":"2026-08-28T13:23:48.728886Z","last_seen":"2026-08-28T13:28:47.562757Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/error-b57eb14b86c9229b.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.670Z","timestamp":1787923619670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/app/error-b57eb14b86c9229b.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"b45-19fd95fb6d9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2885,"size_decoded":2253,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2883), with no line terminators","md5":"ff2168bfca3a64fd3074d3b0ca392521","sha1":"58c66a764e8fd52c0810481a7a14f190d60f9217","sha256":"4b7eeb2328bd2177191d245bfba090714874e1c62d90b49c07959b885d163850","sha512":"8fed557976a655b169e30249e0a833627244555f56190ad14b17b55262ecb7e70f7bd1b0529dc0488983420d0ad3e916f638cdcf949d8e3b8999b0ea9964989e","ssdeep":"","tlshash":"e851630430cab9ce2a970ce465afb00eb13f4668dd1e9825daf56ca114921f93363fcc","first_seen":"2026-08-28T13:23:48.644679Z","last_seen":"2026-08-28T13:28:47.423729Z","times_seen":2,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/create/page-82e112ac4a354e5f.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.880Z","timestamp":1787923620880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/app/create/page-82e112ac4a354e5f.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"100df-19fd95fb6d9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65759,"size_decoded":21168,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65300), with no line terminators","md5":"9d24fb1091ae042330a46794c1ff1984","sha1":"a0e747fec8981f50035a3606b30c1c5942967efd","sha256":"285e666cd0e1617707e0206ddf55cbc24197b4b324c939503cc75c0b7b3d557c","sha512":"b93c80d2a3f4c5be3f5102bbd428366759f178496b54f28048f83704a6fa71bf99975b6acddf115aa432a00c9e6e5173914575862d5a9a2355faaeacd030564e","ssdeep":"768:Tbqi83t7Pyo7bxPX5M7qYqc3JbPGUnrlYKPzOKSvZ8crbtDZ+TaX1i1RA3UmhNPo:67qo7bLM77qcb8Z8k/gzYhNPI1YJuIW/","tlshash":"b353d950f341b7aca9ab09e4655f910cb22f1f54cf6a4474f4f8b8012a494e97ea7bc8","first_seen":"2026-08-28T13:23:48.640068Z","last_seen":"2026-08-28T13:28:47.42647Z","times_seen":2,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/api/earn/pool","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.024Z","timestamp":1787923620024,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /api/earn/pool HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\ncache-control: public, max-age=30\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109,"size_decoded":946,"mime_type":"application/json","magic":"JSON text data","md5":"57bdb8f2aca0d36df3cba20c7124eb0b","sha1":"130eadf7668e2dcae86aa1703775204b8ddcc275","sha256":"317c8d94458b379e4d5e27beecaec43548aa575ef55cde9b08253e02fd8c4231","sha512":"886d91f9c50f6ed3bc4d0b131c35ab57355087455f35a5ffe8f4a1e5895877e7800eccaf77bcc70f80e93b0dd9289245e2dbe7dfe0a65025b7f276bc462d7bdb","ssdeep":"","tlshash":"8ab0011fd9165bfde32f48c072bc31631882bb3091c9386489e68e70c5ee0aa002da1d","first_seen":"2026-08-28T13:23:48.651164Z","last_seen":"2026-08-28T13:28:47.430553Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/api/token/0xDC478D8E49086B971c490147bAB5323b6f314CF7/image?v=7pkayaekdw","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.754Z","timestamp":1787923620754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /api/token/0xDC478D8E49086B971c490147bAB5323b6f314CF7/image?v=7pkayaekdw HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: image/png\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"0xdc478d8e49086b971c490147bab5323b6f314cf7-7pkayaekdw\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":269774,"size_decoded":270682,"mime_type":"image/png","magic":"PNG image data, 315 x 316, 8-bit/color RGBA, non-interlaced","md5":"7f528d9bc80284666d65cbfef903ae47","sha1":"5ce19d918eae130cc3bc6fadaae7cb0a23deb0fd","sha256":"3c60c0d599e3021736d6af1f028683c0c0e3032597335188baa12591ace54c8d","sha512":"009677e81f8580a0b69f8a376c0f641528bdf442d54f72d45495f460897e2225ce3ed64e770064525fdf695b0049a2bc66ed1791eee97258700b2bd96f5c7a1e","ssdeep":"6144:k7UFyxvA5WdZ5jeCeyUp+e2xOvt/gGdsf1wrVHyAfegT9Od0OTl85ovpqk0:2UGA5W5UyO2ayGdsf16VHyk8/Trpqk0","tlshash":"a2442335e5923af09d2baf2db7276ab10d3971f7ba5502528f29817f62933b4340472c","first_seen":"2026-08-28T13:23:48.596228Z","last_seen":"2026-08-28T13:28:47.434479Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/media/02d655c1dbb838f4.p.woff2","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.623Z","timestamp":1787923619623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/media/02d655c1dbb838f4.p.woff2 HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15284\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"3bb4-19fd95fb6df\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15284,"size_decoded":16183,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15284, version 1.0","md5":"3ac74888987457bd15f9307b7d9065eb","sha1":"096a424326b15c80f93bcbfc71593205bab80b72","sha256":"e748ea11c49f39ae2375dce4fbda8dc971c5ca8b64ac8a838b5daba96f61a10a","sha512":"a6f0ee34f968b766775a0c61d9612d268e26349932b5777e9deb7df2b7e980293794f977f8416c3295b5b22a238d91fe77ab8e61032445e67ea103b128ea7dd6","ssdeep":"384:7Pxrrr7B/jSMPbQXN3L6+I3ZYLHLo3Qiqy:7Jrfl01L6+IOLHkd","tlshash":"9d62cf93e5a156cc84c9d530a31ee75d80d310e8ce01b51dfa63e494f7a33af91879ae","first_seen":"2023-06-28T08:43:29Z","last_seen":"2026-08-28T13:55:34.28181Z","times_seen":806,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/media/086a70ddba625929.p.woff2","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.625Z","timestamp":1787923619625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/media/086a70ddba625929.p.woff2 HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15272\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"3ba8-19fd95fb6df\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15272,"size_decoded":16171,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15272, version 1.0","md5":"b94bd658459625ee92cffaf00bb38548","sha1":"f49f8bb2db96e88f376d6dfcb0aa9e78366eef47","sha256":"6de911fc824613ef7325c617b359262bedba2dd6499e7e93794fc9414ca24960","sha512":"e99c0796922d7c423195a8eee15e6220999922aec69d763eb9d1ee3fc73ff168884c1fdad86185b060468fd08ffc46215ee4cd8dd4086f6e736fb5afe35dfa4a","ssdeep":"384:29rPcxG2u1M5ZT50WLWX0TmIcJXCsZz0LJ:2hUnMM5Z10iW0u9CsB0N","tlshash":"c562dfa7ca17e91ee192aa78f3214bf20a1446a09135d0c5c66fe15aac7a370c7f8830","first_seen":"2023-06-28T08:43:29Z","last_seen":"2026-08-29T14:41:21.123119Z","times_seen":861,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/api/tokens?limit=1000","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.020Z","timestamp":1787923620020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /api/tokens?limit=1000 HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10443,"size_decoded":3127,"mime_type":"application/json","magic":"JSON text data","md5":"79b82758daa4b68df132b721f8d9e151","sha1":"2e72a6065044c137f51f1bb07207cdf3abf5250e","sha256":"67a9cfcf6465ff9387d22c755230c0db6ace879ced235334350625a9397408c2","sha512":"fe7cdf869cb88a4f487cfcdccaf870d416887a9a6db27ecec00e311c8b5e6c9d798e51787b505fe645891b075fdaacaef05a4b97962982c7ed2c1b9e3a63b174","ssdeep":"96:TAAxdNP0sinHN2ULfbdsp4ZyfECHUW32yfLI/4Zyf99n4ZyfXC+J4Zyfeg4ZNfuV:0MddyHEemUE3IQ44SlWJWwaYSo0qq","tlshash":"592254af320d2d3fe253208388677f5a469632e65cdc2955de4fcdc49ac58f1532a38a","first_seen":"2026-08-28T13:28:47.438487Z","last_seen":"2026-08-28T13:28:47.438487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/api/token/0x108D6Da4e278a9329Bd1ce05fb116dE08317dE05/image?v=ct314sn8x5","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.751Z","timestamp":1787923620751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /api/token/0x108D6Da4e278a9329Bd1ce05fb116dE08317dE05/image?v=ct314sn8x5 HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: image/jpeg\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"0x108d6da4e278a9329bd1ce05fb116de08317de05-ct314sn8x5\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12432,"size_decoded":13341,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 400x400, components 3","md5":"2b09ef01a75eb2e26c9e38c182988216","sha1":"d7c12053f588b3e27b45449262acf87cb500424d","sha256":"f1fd20d9d1cb8cbd738b1f2626bbb3630d8413caf4aee8e10b3bb34f3e56407b","sha512":"4884af25170fcd6c4f5d788a345f3299e0b105b366229c75e8379216d37a37229bbb647b353d92be790cba83011aa7bab1052aa246a9c7f415cb55a7eff3ce90","ssdeep":"192:OAyb/iAy6M8dBJCV58RRlgrvA1hPoXkchK/FDGmqCDI9z:OAyb/iAy6M8dBJCVaRlhPULhyDGmvE9z","tlshash":"b5425a632b090703d80db3b62ba04ab8f3d19db45c5fa7f2b1936536a75a1838c179d3","first_seen":"2026-08-28T13:23:48.647068Z","last_seen":"2026-08-28T13:28:47.440833Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/api/token/0x23075Cc6D85233bc689461a82287ccb58810570c/image?v=1cr15c8p8t","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.753Z","timestamp":1787923620753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /api/token/0x23075Cc6D85233bc689461a82287ccb58810570c/image?v=1cr15c8p8t HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\nvary: Accept-Encoding, RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\ncache-control: public, max-age=30, must-revalidate\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1013,"size_decoded":1336,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"f44532abae033d10ac21026b3f1de738","sha1":"43982005e74495d477f6f5d0d8f637e617dcc108","sha256":"a1acc940f4c669b67dbefeec913f03c6001457310bcb1fb8d5364ae2132cadc1","sha512":"31b972b9d3c40076b5a304cdb5935e4035e8b3fc2711989a55f6650bfde46e9082bb24c713dedffa3b36304407e35fe6f367d5650828782b1a7b5aac3d29193f","ssdeep":"","tlshash":"f5113839e2bcf83b8204e59c972fb5a4232b61589787971af1a06e4e19154673a0e374","first_seen":"2026-08-28T13:23:48.709996Z","last_seen":"2026-08-28T13:28:47.442314Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/coin/0xfeF5291b56C763396b2cf1cDc3FB9745a80895A9?_rsc=19zvn","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.886Z","timestamp":1787923620886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /coin/0xfeF5291b56C763396b2cf1cDc3FB9745a80895A9?_rsc=19zvn HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: text/x-component\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":174,"size_decoded":1065,"mime_type":"text/x-component","magic":"ASCII text","md5":"581b8610e0323f1a6384e3f0d6705633","sha1":"a5de533554500a505d9c76f40ea2e50d500538a9","sha256":"43c79eb9f6136838854cdda43c2a38a7f0bf5dce7c7aa7d70b4799e48ecdc5c6","sha512":"3a5376cdfcd7a08086b394de6c034960b8bb9d8e969e42e573a16d4989d57217f964e1653789d1e1bde391a8bf3098d7822e2727f94379e3b99817847addbe6d","ssdeep":"","tlshash":"fcc012720260b9a6a87631c2103de41bb94f164a205c057180d119627365233052b5e5","first_seen":"2026-08-28T13:23:48.634729Z","last_seen":"2026-08-28T13:28:47.443479Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/media/271f77516f49b23e.p.woff2","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.629Z","timestamp":1787923619629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/media/271f77516f49b23e.p.woff2 HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14544\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"38d0-19fd95fb6df\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14544,"size_decoded":15443,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14544, version 1.0","md5":"ea80c2358066cc2cca1eb4e6daa87564","sha1":"4db2bf49d9a1ca07a0e947adc25d4af8be29b11d","sha256":"532795f825c5a28b807c0323e27939c638e6289d5870c05b962b6c0916407476","sha512":"f83b4260139d11f2d8a12d8b9164a561afdcce49958f8792a7c995e9cb1e6800e384c9732e1562ecfc82e138039e274d09f5d92fd91abd70201ecddbe0eb4213","ssdeep":"384:kZKJGF0uIIRqYq3c431Aw797Uln065Qoh:kZKJE0uJi3cO956Ph","tlshash":"1c62d09758b097b0c737d9700f918a888c008ff4fdd38a941d675dfab2d816302ae8e2","first_seen":"2023-06-28T08:43:30Z","last_seen":"2026-08-28T13:55:34.280372Z","times_seen":1531,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/earn?_rsc=19zvn","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.150Z","timestamp":1787923620150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /earn?_rsc=19zvn HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: text/x-component\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98,"size_decoded":1005,"mime_type":"text/x-component","magic":"ASCII text","md5":"0f58de4ac95877f0b45a44e24f124868","sha1":"a1f9e27680ff93d12e6ed4f607e75b2b0e36362c","sha256":"3a54cb6b0ef28e7e92f03f3637553e602bcf230616b8b1c152fa86d4c5cfa368","sha512":"9180163d682e0b80abb4b93cff2c2071cbf35132eb1f29dc50c47f0d71d2df27ad809e88ae7e14a57a39d4914c9ab145fe73391f2cda544c99b583ec0ac99d1e","ssdeep":"","tlshash":"6eb0126382b0aff36c7436d1022dc54f750f430b204414b041d20d1537320670a0b1e0","first_seen":"2026-08-28T13:23:48.601728Z","last_seen":"2026-08-28T13:28:47.445838Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/create?_rsc=19zvn","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.757Z","timestamp":1787923620757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /create?_rsc=19zvn HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: text/x-component\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\ncache-control: s-maxage=31536000, stale-while-revalidate\r\netag: \"erg8j02wohfy5\"\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20692,"size_decoded":4088,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4349)","md5":"2a66dbf4d281dd6404241263f9fc2775","sha1":"02c7af0c9b216b39c05a69deaba876a0f345def6","sha256":"b482934b6ec636ccd169ff00ff05ca1c31694ae2a8d385f26a8274ec718ec939","sha512":"d3176a92aa29a77b361020bc1a3f2c1ec76d5ce71e9310993ad189b5ec3b19a02160d6c9edceef95d94d7e37c0b9bd57d6310279d6f0f024b088e60a9989a518","ssdeep":"192:C77FgBgB3zBwB3Bz+BvwBgB6BfBVzBqBHMJ9A9QASqYm/B0fOsqNmEXzxClLZkmw:C72ClSlJ+y2QFrz80aGqRPlCM","tlshash":"d792a72b8619fd254efacd890d4fab7bd9c9c933923006d6c7dd0e3d01c21636b59266","first_seen":"2026-08-28T13:23:48.597136Z","last_seen":"2026-08-28T13:28:47.447321Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/coin/0xFc672679B17F6Cc2166e133B61F1EccA01811591?_rsc=19zvn","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.762Z","timestamp":1787923620762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /coin/0xFc672679B17F6Cc2166e133B61F1EccA01811591?_rsc=19zvn HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: text/x-component\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":174,"size_decoded":1063,"mime_type":"text/x-component","magic":"ASCII text","md5":"7a30402db02ab03a4c50d91784d9d5fe","sha1":"d76f3c0bb1989aafa027a6057ff4992ff667a143","sha256":"fc658c5151fe43d92ff6712bc41b3c876623579cbda8e99e8d21111aa8652bce","sha512":"75ce3ddb0b646644c6a571c0cb311e96d47bd02a059829754cb3930fb1b489a8bf4ab83dc44e7b1fe3e3c57df19ac4de858ee7a2a79e48ea2e638ffd6184afcf","ssdeep":"","tlshash":"87c012734120fda6797631d1112ed96b748f265b215844714196492237e21bb906b1e1","first_seen":"2026-08-28T13:28:47.453107Z","last_seen":"2026-08-28T13:28:47.453107Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/main-app-c7ee9fab2d0200d3.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.640Z","timestamp":1787923619640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/main-app-c7ee9fab2d0200d3.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"1d7-19fd95fb6da\"\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":471,"size_decoded":1139,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (471), with no line terminators","md5":"3d5005704afa8a2c40d99ca3bd07451a","sha1":"affe42c5f03f8272785c6e40a8bd806e61367a82","sha256":"8e5697bb24e18d15e5ebab52cf62c3addf093b6d9831bdb37bed5212ad855f65","sha512":"c48671595da3bef83e7879817828c50f277f688fb88e85f529ace92a13c76ec89ae773eac02eea120a6b2bdbd48af38c80c7e6edb81f607b5163ed73bc20f013","ssdeep":"","tlshash":"0ff082992a4cb02f2913ad20fed76c2e255e416028ab5c642608dda12c336ac93f1c78","first_seen":"2026-08-28T13:23:48.654206Z","last_seen":"2026-08-28T13:28:47.455846Z","times_seen":2,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/api/activity?limit=30","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.025Z","timestamp":1787923620025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /api/activity?limit=30 HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18147,"size_decoded":4981,"mime_type":"application/json","magic":"JSON text data","md5":"5c3f4340e2263a0a4a102056160c1b89","sha1":"903cfa447caf48108ff6a08f87d66ccc85f74ff6","sha256":"5b8c2e0f7ac44355da09e1d5a57cadab253c8d83206679a830de6d06a7633e46","sha512":"fa3e89b0a7f2265fc1d51e2c5833a8fe6b953c52e8aad4242348d2fdae93efe0673e4a9189ebcd07d7e7561b900fdf54648fe46b3c0bc674a2093688ec050bd9","ssdeep":"192:pGJLVJsCQEFaO6CxunCeIl/XgQrrmoB5NO9rftTgD:8LDslEH6CACVl/XgSrmozE9rf5gD","tlshash":"1582e71127653dbfc15438653e46be3a462e729349ed8f414039ccee1ee6a0605bb2bf","first_seen":"2026-08-28T13:23:48.639044Z","last_seen":"2026-08-28T13:28:47.457Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/1216.8b5416b871c66816.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.043Z","timestamp":1787923620043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/1216.8b5416b871c66816.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"404-19fd95fb6dc\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1028,"size_decoded":1428,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1028), with no line terminators","md5":"4d7161568dbbbd527c7645ac1e833fef","sha1":"08d45957eae38800b5fba6a2ac2538c147c94f55","sha256":"3d437f75b0f62bdfd1d4584c1403fbc56fb47a1b752b7492a52cef0b8c53c597","sha512":"306780f5f7db8b30ed2bb7e70bec183062c201a1c4b573274e465d964091c1e9a8250bc69e767c36603bec65b72a18b9ec610bffdbe9f766d0e829117082d438","ssdeep":"","tlshash":"bc116abca1643cce7822d56355392688e223ade6bcb104c2ec96b603cd14908624dfa4","first_seen":"2026-05-29T20:00:20.618884Z","last_seen":"2026-08-28T13:28:47.458038Z","times_seen":11,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/api/token/0xbe5625708B8cCB49ed404D410a95B5FF6c8dB955/image?v=6ugf12ciw02","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.745Z","timestamp":1787923620745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /api/token/0xbe5625708B8cCB49ed404D410a95B5FF6c8dB955/image?v=6ugf12ciw02 HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: image/jpeg\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"0xbe5625708b8ccb49ed404d410a95b5ff6c8db955-6ugf12ciw02\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":239538,"size_decoded":240448,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1200x1200, components 3","md5":"3ddaf695c9a3f6c536cec774c09e0edd","sha1":"0d512fb8742246f023e98491d6f7694c75f408ec","sha256":"f7c6f49ceb7a91b4c682ccf6130214c5f590b0027f3393aa5880a63d63333e8a","sha512":"938af37db2fdaf5fb5b476cfab22a7cdbb1983cc340f2958d60380ba8ab3ec4bc7d4c090815fdf5a9396350c62c07e6e7c265861795422a1aa26581e2e4d5b2e","ssdeep":"6144:0/n7M17kf8rW6QgV7K5iaLlQw2TZp5LOk+7go:iY766nQvLOwcLJPo","tlshash":"e234f086b9084d81debe1efa0dc28517c0826130fee7f87e6d826d6af450f5d939a354","first_seen":"2026-08-28T13:23:48.610332Z","last_seen":"2026-08-28T13:28:47.459157Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/profile?_rsc=19zvn","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.154Z","timestamp":1787923620154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /profile?_rsc=19zvn HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: text/x-component\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\ncache-control: s-maxage=31536000, stale-while-revalidate\r\netag: \"q9pcdw4s79eg0\"\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18735,"size_decoded":3853,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (3340)","md5":"8b9d738013c7f6c8058b3b0be160a1ad","sha1":"5a71d780d4b66e158453ccc93ebeae3a27fa5b80","sha256":"965249a8db1232b16b2ad6559a95446af558276b93a9ee08ecebf23800aa1cdd","sha512":"f672e7dbdd09ba5331e62fd1a0f884fca2cb60981bec62d0a11410ad3a506194c951efc85d9e23eead9fd9d5c15b5ff3df3f285e2b7dfac050375ddb7137da27","ssdeep":"192:lPhaBDiB3RBtBkBkBvSBKBcBzBJ8BfBRfXqXYXzxClLZLI9cfTsn8pYbKs++FDRh:lPk8fnWWQ0uF385dlCS","tlshash":"7682992b8619fd154efacd894d4fa77bd9c9c933523006d6c7ce0e3d01c2263ab5926a","first_seen":"2026-08-28T13:23:48.692222Z","last_seen":"2026-08-28T13:28:47.460044Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/1215-6855a19e2ec5bb3b.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.666Z","timestamp":1787923619666,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/1215-6855a19e2ec5bb3b.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"30fd-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12541,"size_decoded":5344,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12533), with no line terminators","md5":"4ef986781a2debb5b5eedae33288939f","sha1":"c6560fa726295c7cd7336e03cae67f6f1453de25","sha256":"16c79f0a4f1f656374900257b0e51fe3fa2a10ffad3dd471adc61b1d2bdd198a","sha512":"b997f0f3e2146c5b37335bec7e67cbe087d992f5ce61018f0c63d229b01ca80953fd3ad6226a3e1c4028983ec8d9e98a5f9b9be865e7c3738b17696da7856513","ssdeep":"192:lrFOkMxAWyR9YlFlsFGC8cYl25q/XsvbfKUrfVeVc3VI1e:lrFxMxAWyR9YlFcXk4cDsfVgclIg","tlshash":"d842d8e1f3927bbcb62716da182f8018f22e2f58c61e0421f579bc5129591e477a3f8d","first_seen":"2026-08-28T13:23:48.638058Z","last_seen":"2026-08-28T13:28:47.460916Z","times_seen":2,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/api/token/0x0464233DF1D075095ac1C7a4C2631928560eC295/image?v=pm6v17x0by7","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.750Z","timestamp":1787923620750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /api/token/0x0464233DF1D075095ac1C7a4C2631928560eC295/image?v=pm6v17x0by7 HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: image/jpeg\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"0x0464233df1d075095ac1c7a4c2631928560ec295-pm6v17x0by7\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":896351,"size_decoded":897261,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=1093, software=Android RMX5061_16.0.9.400(EX01), orientation=[*0*], width=1079], baseline, precision 8, 1079x1093, components 3","md5":"7d388adc728c2bb6ffcfb0781d3f4442","sha1":"8503b8015c163b7568965f47acef29a9f3257343","sha256":"3915f1c5505080d15eba486687ee5f074ad96d861d41a566527fe717fdf68cb6","sha512":"e2425d460a37b2d54fb719c5e703b45e671cb66e07af6e2a16975b3a5aacfc69e4dce441ef8f66d199f18dfad13183ac887322a21f6a0f986385ce4c0bb6c86d","ssdeep":"12288:A3fWQ0nI1VDc656wdde/A9NaM1vXegdKER+Pi2jaETgIcHGIVyOSUi8NBrn+ag:APonmyGeoqGNgO8Izg","tlshash":"cd15235af6a5e2a7c9434130be9cdb04a6985d04c657bce520189db37bfeed44c20fca","first_seen":"2026-08-28T13:23:48.600668Z","last_seen":"2026-08-28T13:28:47.461721Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/layout-3a3e8da463fea12a.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.668Z","timestamp":1787923619668,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-3a3e8da463fea12a.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"d8fa-19fd95fb6d9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55546,"size_decoded":18655,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55486), with no line terminators","md5":"b33e04448b9513b5a5b5595e016c7146","sha1":"a3ba2a9823f200803379a68da5978fb6c5ee4dac","sha256":"981927b201303eda590025c3fe1f6d7f6ec2f543c526c499d96f5533258d477a","sha512":"245f707cdb0098de0ffc99688bc7962fffa39de74b72ec89e3258ef08bb8417fd592d43e4d1b273f02313bed1a97df5561b10904720bf30178c427daea621b1e","ssdeep":"768:vO/HVEHVXj3p+C+WomANi7ioxTSaxTej0gjihFErET4hXK3wKVjNr5isWwrAZYur:vO/HVEHVXdofmZOqGo4RKhNsuAuuuxW","tlshash":"63431b55b2827aaca6a705ed64afa10cb23f1758d40e0824f6bdbc05251a6d4f373fcd","first_seen":"2026-08-28T13:23:48.631615Z","last_seen":"2026-08-28T13:28:47.462725Z","times_seen":2,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/not-found-9fe7527f9383eb33.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.671Z","timestamp":1787923619671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/app/not-found-9fe7527f9383eb33.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 247\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"f7-19fd95fb6d9\"\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":247,"size_decoded":1192,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6beb19ca0b2ce391aab3ee6240121915","sha1":"ee49dfd590acef9593affe384917e6929f3fa0ac","sha256":"9ee50e49b5613495a0249fb4fc2a6fa27b1eb5e5ca64d8648751492adad9c301","sha512":"feb9a08ca54e46ca4ded7f7efdc446a7d4a1b786b8d2923bbb70e0143d04077da7eceb6e516d45d82230754fa2d3a8eb989cc2215c8c5e3e8684cfba5fe6f8bf","ssdeep":"","tlshash":"1dd097557781b82e796b6ab8f8bb086139fe041438bba4c162218cc11c333bc8351c8c","first_seen":"2026-08-28T13:23:48.599405Z","last_seen":"2026-08-28T13:28:47.463602Z","times_seen":2,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/6681-a86e5de1d5e4717c.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.657Z","timestamp":1787923619657,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/6681-a86e5de1d5e4717c.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"5228-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21032,"size_decoded":5803,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21020), with no line terminators","md5":"6bcfa57298e68f3c17d608c1208236a7","sha1":"df4eb5f0e5a02f563cf6564300f10bf25e7b7e92","sha256":"63221e736928038b3ea73b40b52c1d89fc6ea3056a623f4d4735838671bda70e","sha512":"6a97f99cfdddd23e910a0718520d3813348c826a3e20bcda675a7d786ae4527c6553edbf3aa2aa4f487840428c4a4e69689d99cab6bee6a249a9235619bbb630","ssdeep":"192:nMoVWa9sXJZpxFdQzuqRbEHYm1Y31dQCe1KHUCP:MUWa98xHWhP/31dQF1hu","tlshash":"9b92128dd44039cdcdb259a59caf7624d8f578e348cc9c0273aa9d6f1a946e4423bb0f","first_seen":"2026-08-28T13:23:48.682079Z","last_seen":"2026-08-28T13:28:47.464544Z","times_seen":2,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/2972-f0b676fee74d71c7.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.643Z","timestamp":1787923619643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/2972-f0b676fee74d71c7.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"6608-19fd95fb6da\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26120,"size_decoded":9682,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26120), with no line terminators","md5":"6cb033ff6ba560bd17d4c049ff7f3c3b","sha1":"2da34fd81c6a0d28fc659a0c7e08e501452dfca1","sha256":"6e502a26091acaa438e2968708f1c772eb06b83feb401adcaec76ef0cc1d0fd4","sha512":"481777b22f1929da6ba2cb9dfeec2875e924ccfd7cb7ea65f011f06c3ba79e4823449f77432240dd295828a5817656621393056f60282c5f8b1efd5c6185ccc4","ssdeep":"384:l5k1IdRMt34LG1DmLDRwqdggPG1kyDfLxrQKVhUEOAdONU7tpU2J91wMVG4x:zkgRMtIadmLbRKk5AE4tpU2ZhVJ","tlshash":"22c2e9fa71d2f8a247db1061443b1006f2be4caa145e6244e7b4c8dbf57056da1b3fad","first_seen":"2025-04-11T12:57:47.023791Z","last_seen":"2026-08-29T18:47:23.015209Z","times_seen":1406,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/icon-192.png","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.821Z","timestamp":1787923619821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /icon-192.png HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 4492\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"118c-19fd95fb6e1\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4492,"size_decoded":5371,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"ae502b195aa50849e57b52abcfd3e3bd","sha1":"c286d3a31bc0d4d2fdbe8c71ab95e26cfe6e2d1a","sha256":"6fc0c61876f8048f7e12977f54ed168b0dc51251e9c4fbc79d0f300f32413478","sha512":"86d3eff9472c9958e78866af4e9f4ed6605bf4ae577a1afdfb24fdadd2493ad8ba4d40db503cd9152f979e13845b8fe7afbf0eb8de1507e93436b48312b394b2","ssdeep":"96:pddwNz2e0T8Fa51KFZvsQ8iWHPVdOz6k/u+p9Ega0LNi3YZ5l:9qz2e0T8MCCi67MHB37l","tlshash":"08917dbfd99907951f20b830033e0757f0e7a60a694a20537a151d6d53b4f9359dbd8c","first_seen":"2026-08-28T13:23:48.588256Z","last_seen":"2026-08-28T13:28:47.476692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/1271.c46824b3376cf03e.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.041Z","timestamp":1787923620041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/1271.c46824b3376cf03e.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"147e-19fd95fb6dd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5246,"size_decoded":1992,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5246), with no line terminators","md5":"5f044775cf8f17276f99e02f8ffe3da8","sha1":"47094745f07aec354c8b6c8c4df6304b2be12c29","sha256":"225e402208a095c6dbfb50347ac3f0971b4b1c98f9f7fe297379ffdf3f3035ab","sha512":"2473f8fc09b61cb653c6223eddcd6e171862dbc5c500cb29adb35e2a7c63fbba62e56be20552012aa1b41b0219e05af70da71de3c346166e23d6db288a3ca16d","ssdeep":"96:c8z+pilTNtMvi39TWtyei4p4ut6KK4tJBztP+BR:rqpiD470sd9s","tlshash":"9ab1656da5b96ceedc37e48fdc28670e8020bf17ee0449b1a999db4e1f25818b0e9540","first_seen":"2025-09-04T11:45:19.028234Z","last_seen":"2026-08-29T06:07:23.567643Z","times_seen":32,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/1582-90bfae45b10ad55b.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.735Z","timestamp":1787923620735,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/1582-90bfae45b10ad55b.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"1671-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5745,"size_decoded":3043,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5741), with no line terminators","md5":"90c00a5ab76e202c4fd839d5e1f5f470","sha1":"57a1c476172de97ebd29e6377e57cbe2b3474bc4","sha256":"008fe57028b06c3b9776fea6836d118cebe1f33672798fb9002a9e3ef1f504df","sha512":"4a4282a8346fe7c3f91d521e2c5d307c2599d452617bb6c35e50cf71ac8e01f58dacbb81ff4ccfcfb6c492be4f02e5a9f8087cc890cdbaae71d0364c91d40e8e","ssdeep":"96:xTOIcKK0Ge6bGU6wK78KxU/+GEWy+1VXS5OGAk4umld0syUY5gk+dJDEe48m/kTb:tJniRH7/4WyuYNjyFyjBWjikSIT","tlshash":"99c10794b3a371aa97579264907f5523f27c737011cd4820e2027a96a4383afe03bfad","first_seen":"2026-08-28T13:23:48.628311Z","last_seen":"2026-08-28T13:28:47.48009Z","times_seen":2,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/4707-256ed843c24da788.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.644Z","timestamp":1787923619644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/4707-256ed843c24da788.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"2548-19fd95fb6da\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9544,"size_decoded":4251,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9544), with no line terminators","md5":"88afc3c3ae59e2099a2125dc3ac5278b","sha1":"18d47a2c49d0704fb3963daea8921eacf4b66887","sha256":"afc8be2222d8b428680ceef2f529775776087209536f99a6ab12e097839eb6b0","sha512":"29a4fe08fe9ed0e5c163495bd40fcbf476cd80bf28fe850645a6e0dbf51e045bb54e1c87dbc22491d2adfecb2b152d20a26f921da83fa69b62a3cf29f142705c","ssdeep":"192:VpLzph76/k8uQRl+KPhVHJ8KeAukoxuGkjt:VpH7QDZn+KbJoXLO","tlshash":"4812b7f530d6749a87e74099002b0108f3356de1260e8554a739c8f9fdb62d9e1eafaf","first_seen":"2026-08-28T13:23:48.64322Z","last_seen":"2026-08-28T13:28:47.481127Z","times_seen":2,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/8708.df46ec63f0730c2c.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.982Z","timestamp":1787923619982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/8708.df46ec63f0730c2c.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"67952-19fd95fb6dd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":424274,"size_decoded":119583,"mime_type":"application/javascript; charset=UTF-8","magic":"data","md5":"222bb60ce15b032116dd1c303b19a32e","sha1":"cd390240f9a5c7d209896bc8e03c53fa4ca3df47","sha256":"de5e05d4269d63f04f8039e0e6fa26df0facf8830cc0e89437806c8c94f2c124","sha512":"35b46856e6ae592171421df2bac803e9ea537865f0bd924b25daea324f5560507f5141fb548afd68309fd2663baa7fd87ff51c7198d047ae21a0e2479af4f9f6","ssdeep":"6144:rWimJ3YgY8Q6Krg5Fzv4yyCiCsT0SpG05Ndvr+QYRYQObtjLodre82z2pXxgwykm:rVOyLbipOKi","tlshash":"1d943ba57372f43343de915ae42a1201f3395868140d842cf7b8acdfea94998967ffb1","first_seen":"2026-08-28T13:23:48.621991Z","last_seen":"2026-08-28T13:28:47.482182Z","times_seen":2,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pulse.walletconnect.org/e?projectId=a59d7d7699cee77887711d3ac255b863\u0026st=appkit\u0026sv=html-core-1.7.8","fqdn":"pulse.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.955Z","timestamp":1787923620955,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 22:29:58 GMT","end":"Wed, 04 Nov 2026 23:29:15 GMT"},"fingerprint":{"sha1":"DC:2C:A2:F6:6F:BD:FF:1F:63:4D:26:F9:76:6F:09:F8:A4:BB:94:A9","sha256":"3A:2B:3B:46:D8:5D:7E:5E:B8:AC:B3:5F:20:89:81:38:30:56:39:FC:3D:A7:AC:22:F0:0E:3D:9F:E4:9E:CD:06"}}},"request":{"raw":"POST /e?projectId=a59d7d7699cee77887711d3ac255b863\u0026st=appkit\u0026sv=html-core-1.7.8 HTTP/1.1\r\nHost: pulse.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 653\r\nOrigin: https://kaching.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 202 \r\ndate: Fri, 28 Aug 2026 13:27:04 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: a323a6ba6a5b712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1489,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T20:22:58.661106Z","times_seen":18172180,"resource_available":true,"data":null}},"time_used":3366,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":258,"receive":0,"ssl":3104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/css/baaf2352d144616c.css","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.635Z","timestamp":1787923619635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/css/baaf2352d144616c.css HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"740a-19fd95fb6df\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29706,"size_decoded":5948,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (29706), with no line terminators","md5":"f96035b09cb9976c98c9dd0a61bd05a6","sha1":"ed04ef058d4182893d522440188278a3b6cb10a8","sha256":"c8db2ae1286838e5aefe697a78e4333b2a1843693043b5528cfa87af99c6d66e","sha512":"1ccb0b8dca713fc815430560ace111fed50d7dbec0e116d07ce9deb07b75aa02ce139e55f7c1b953c148036f89dc5f589f3f44fb7d159a8236483eb1b7cb08ed","ssdeep":"384:g9pSed283Zcy23qWF7O36AgzyAIfPoKPFEIN4:g9pSUJCAgzyAcoKPFEw4","tlshash":"ded20d097e2d3f38b923a32441c0849c620b775feebd4797ac91235d9d9d78432aca39","first_seen":"2026-08-28T13:23:48.668086Z","last_seen":"2026-08-28T13:28:47.484582Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/809-a60d6aceddd0233b.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.653Z","timestamp":1787923619653,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/809-a60d6aceddd0233b.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"f2a-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3882,"size_decoded":2580,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3880), with no line terminators","md5":"8d91b07e10568a31c3bceb1eb1ae8ba4","sha1":"d70169336973653143a009b51883e9a4da807bd1","sha256":"6cf3fef18c2de9a80b0baccf526a2e63a49e34b53401df6c1d46152370fa4ecb","sha512":"4ebb5f75a140d7f2964b667f503d3ccdafe8121b28ab53c6d308994b8b03979c03e221c3a19a770266af911322b68c44eb5bfe13124d316234a7fce9721880c4","ssdeep":"","tlshash":"fb8155f6f3e37050232310dc686b1121f12dac85981da6d8d6a691867d3072d93b3fbe","first_seen":"2026-08-28T13:23:48.607967Z","last_seen":"2026-08-28T13:28:47.485562Z","times_seen":2,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/kaching/page-cbb8a988eeb50749.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.731Z","timestamp":1787923620731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/app/kaching/page-cbb8a988eeb50749.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"6e9b-19fd95fb6d9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28315,"size_decoded":10782,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28231), with no line terminators","md5":"a7c8028629ece4fb590c38c303874a86","sha1":"44fc53b64a792b97b59f5bf9ebd9abbee9b785d3","sha256":"248d055df780d56d4894976425c69ecede305c4afb79e7fc26898f185287dc0a","sha512":"741fb78c9b32a2dfed147c9b0dd3be6ea122b7459d5cbe2cf01a67250163f4c147a914ee1c6376f5d649a09ed14fedb393b0a6e05e7f028c01ca783a0fe21324","ssdeep":"768:ITGRheDxmlRF1yxT9i+JPgsRBvAo35ydnUeVHzic:woPjeNPgGoEipzic","tlshash":"96d2e824f540b7ace96b09fca5efa10cf36e1768da4a0478f5b8b4111a570e87743f88","first_seen":"2026-08-28T13:23:48.603558Z","last_seen":"2026-08-28T13:28:47.486513Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/api/token/0xFc672679B17F6Cc2166e133B61F1EccA01811591/image?v=1cs17lsuqu","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.755Z","timestamp":1787923620755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /api/token/0xFc672679B17F6Cc2166e133B61F1EccA01811591/image?v=1cs17lsuqu HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\nvary: Accept-Encoding, RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\ncache-control: public, max-age=30, must-revalidate\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1014,"size_decoded":1333,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"51211e864c42da2f90d7847cca4bca81","sha1":"36e39f8bf75fc42c536ef9968a83c6950973d528","sha256":"4a7499fcaf850ba1d7018724e5b4c836fee3b3b53833a28302b5ca252f0afead","sha512":"bb83d9ce65988c4f81e493c09fb5ce2c8d942a3dd2f395a437e0c039b9cd6eb76fc7760c684f0262e81992c3f6fa315812e15b74840265da6e0a07041c4adc67","ssdeep":"","tlshash":"0b112639e3acf83a8604d59c862fb5a4632b615c9746971ae0a05f8e19118673a0e364","first_seen":"2026-08-28T13:23:48.612083Z","last_seen":"2026-08-28T13:28:47.487493Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/create/error-acca604b295d7329.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.881Z","timestamp":1787923620881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/app/create/error-acca604b295d7329.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"b69-19fd95fb6d9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2921,"size_decoded":2276,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2919), with no line terminators","md5":"03238700447db1f2e3c2fa5e0fcb522f","sha1":"3d19be09a4c6980cb04b96841867c0c271fcfea1","sha256":"d17a8c7426f490346ddb116f89c5dd88b2a5542794750ebd70d0766f711e901d","sha512":"2ba7318d8a7a3cad67411fe8ee1a246b922c479b8342b7dfb2ea46861eb6cd090d2547e53db7c0e9e86a0ebe76c33b6115e708bebd810825b1f49d9974c4fb09","ssdeep":"","tlshash":"5951630430c5b9cd2a970ce466afa50eb13f4668dd0e9825daf56c9155921f93723fcc","first_seen":"2026-08-28T13:23:48.633735Z","last_seen":"2026-08-28T13:28:47.488393Z","times_seen":2,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.910Z","timestamp":1787923620910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding, RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=31536000, stale-while-revalidate\r\netag: W/\"cc69ut8n5k1sdb\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":983,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T20:22:58.661106Z","times_seen":18172180,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/4745.bd1deb8d3a71da8f.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.742Z","timestamp":1787923620742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/4745.bd1deb8d3a71da8f.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"86624-19fd95fb6dd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":550436,"size_decoded":154359,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8e0daf86f95de600d8de7d5dd07ccb1a","sha1":"51ed7b30ec79c84d2eac0b903773e77557541294","sha256":"616ab2c8ad0cd4c9c45022ab94d7b86116ce81abeefd0d6c8a2c7a435e1dc385","sha512":"a90e5549a7d291c86c8d89d4db88a37147bdbc0c561054e444b8b525aa348f90613841b66183c0652a54a2f1aa3c4933caaaa0a980336f25851874ad4b92e336","ssdeep":"6144:6R4fYVYIrac5QNoJy3M6fk9bTh0mkjeiKvYWY+LHTye28dpaxYF6uK5ja486RuvX:DaykDtNznWB0BIrBNtVY","tlshash":"34c46c617372f436439b819ea4691204f2385899140a843dfbfca8dbef845c995bff72","first_seen":"2026-08-28T13:23:48.602704Z","last_seen":"2026-08-28T13:28:47.489296Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/7122-0d1958c889c465cc.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.650Z","timestamp":1787923619650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/7122-0d1958c889c465cc.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"106d8-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67288,"size_decoded":22151,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"919243f58564c34b2afff055c97f073a","sha1":"a702fed298c8e1e7ff3089f75009be65205edb3c","sha256":"477035b6cbb0fec160815c65bc96c455a49dc53a6f2ec3cc371e179977e91048","sha512":"d8ee4d60919679621cd8adcd48c23e88d8cfeac7a9d31bb6d34729780d3df941a328934bda642861895bc5c40ad2d7387afe1f512653adccb020da4a0afa8c93","ssdeep":"1536:cmNcjk7Z0tx1JiDEGjGP4vL7kz15T6E55VD:cmNcWqOsB","tlshash":"4e63f7d673613661d3cb91a8c06f0741733754d82449803c7a7ee9cb6870a9a62fbb7e","first_seen":"2026-08-28T13:23:48.629403Z","last_seen":"2026-08-28T13:28:47.490214Z","times_seen":2,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/9654-e6220574c1f29128.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.648Z","timestamp":1787923619648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/9654-e6220574c1f29128.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"3b422-19fd95fb6da\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":242722,"size_decoded":82836,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3ba0564c051e10b529b44ab5b70c84a4","sha1":"96b82add0c2230a253a29b68cf129ddef46b3088","sha256":"579b73ed59d7a015d0bc833500f7789911c7a5250b9dc8e9739a12719e1542cd","sha512":"c83b9429d00e6a82dc83bb93da945187b3ed2b73c9d136f0cc556b0d66ced5892e0a1cb9fe033032f2f48c15d096b7d72ec8543737293b45998516cde9bc61d0","ssdeep":"3072:T3707fNNWy9PzStWk29B+vnJQ3ZF468ztCregWYGAG0uiv:m1Nf9PzS329B+vni3ZF468ztOfW3AF9v","tlshash":"89342aaae3557b32038b128a583e0594b3387b5c5609402d3e9c90ef63b9ed6c4e7f75","first_seen":"2026-08-28T13:23:48.591894Z","last_seen":"2026-08-28T13:28:47.493963Z","times_seen":2,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/season?_rsc=19zvn","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.153Z","timestamp":1787923620153,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /season?_rsc=19zvn HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: text/x-component\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\ncache-control: s-maxage=31536000, stale-while-revalidate\r\netag: \"ig1aiww3vrf1k\"\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19511,"size_decoded":3805,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (3375)","md5":"eea11570c95403dd18eabcb4a435ecf3","sha1":"1d567d3e70afeefbd55caed262c4daa786f71f6e","sha256":"d9f17d00e0d98ef369481c6c90f9fe87cc76079ff43c7cf41130c2e972265007","sha512":"4c0ee9a7c74d55e88bf9722e50eb6ab6e653f50975462d9501caf079706af5bb5f2d642e8ca212de2c1eee1690266b7a137db90340ad34a2fd6d6f4eb902040c","ssdeep":"192:pVUueBTB32BoBcBnBvzBvBpBIBKqBqBVfEq+cXzxClLZ2U9xfv2yqbzDmH:pVopQa+F5NTmAq8dlCl","tlshash":"e092ba2b861afd154efacd894d4fab7bd9c9c933523006d5c7de0e3d00c2163ab5926a","first_seen":"2026-08-28T13:23:48.61324Z","last_seen":"2026-08-28T13:28:47.494838Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/api/token/0x2bC0D350eDfA83bE6E8f71F534315c6ca2aA95e5/image?v=jsa1dy8wec","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.744Z","timestamp":1787923620744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /api/token/0x2bC0D350eDfA83bE6E8f71F534315c6ca2aA95e5/image?v=jsa1dy8wec HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: image/png\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"0x2bc0d350edfa83be6e8f71f534315c6ca2aa95e5-jsa1dy8wec\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19213,"size_decoded":20121,"mime_type":"image/png","magic":"PNG image data, 640 x 640, 8-bit/color RGBA, non-interlaced","md5":"bacf73a594d6c6292a530fc3022b6a3f","sha1":"558d2cd8671f34cc5dfef2d412d9d7ea520c80d5","sha256":"d188d004ad2bb3a488411a8eae3cadb68a53b7fce323684c23ec010abd6980be","sha512":"93d383fb11fb889b4eed31d3a3e85f47f9229f6f0f7e66b3a80a027997362042c02545419ecde39234cf354a4f29fbb7fbb85c94069d86343e818e84a40bf1bf","ssdeep":"384:K0n1ACL6CC268QC0euQ2h9GDTOqe4YmMXR7Jmae4O2fAtO6yLbiT:514CC268/z2h6lMXRlmae4OmAtO6UbiT","tlshash":"3a827d89c78a4133ba091066e03331075e91ec777622de062ad77a9ea353f34bef4d65","first_seen":"2026-08-28T13:23:48.589297Z","last_seen":"2026-08-28T13:28:47.495715Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/coin/0x28F1519fcdB8278A815A758d27465EFc94863698?_rsc=19zvn","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.759Z","timestamp":1787923620759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /coin/0x28F1519fcdB8278A815A758d27465EFc94863698?_rsc=19zvn HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: text/x-component\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":174,"size_decoded":1064,"mime_type":"text/x-component","magic":"ASCII text","md5":"244c03db90572d021beac9dec0f93058","sha1":"965b16daa7812c483e9dbe6b6e6c0bcaedc75270","sha256":"f0c8bb76d2457d23f93baec838f2fa34aa4386e90e3caf99abe3696e0a4bc83e","sha512":"5311530c89d4247610be9e402b9bb85f821e50aef4ed4a899318362b4078e7262b37f4ac5dab333148ef6c326b39042e6029d45b6ab3c83465aa3e7eea4ab636","ssdeep":"","tlshash":"6cc012630220aea73ebb32c2413ed01eb40e669b105949e180d60e2133a6232442b2e5","first_seen":"2026-08-28T13:28:47.496555Z","last_seen":"2026-08-28T13:28:47.496555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/2117-0c2919f6fb137799.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.639Z","timestamp":1787923619639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/2117-0c2919f6fb137799.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"1e737-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124727,"size_decoded":32952,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"222a52b0edfb68aa8b9ec02fe32781ff","sha1":"e2a6cd5483850dc7f04a33e1f0429581bcf65ad3","sha256":"93552ef42437efdda5f51b9a7a000a1bda08bffdeb77a31ec0ffeebc5433ee90","sha512":"e6e0c2593d42445fbc45e40c48a83635d145466288ec69166849ad6df3247b044106542c41cb66263853295106a570df338211f113555a7ebd5aab843e0456c1","ssdeep":"768:sXN9E95eRwb9lPftVDK2/dOxprEbBunVZBxxqKj/3kgQpD7dlr3efuQBx3mf8oZP:UvwBl7gpO4Vf/Sdl3ZLffbna5J515Ev7","tlshash":"e3c3d8b671d0f8e207a744e1843b400af3791c3b146f74a0a7a5cdd9b5a44eea1a3f5e","first_seen":"2025-12-15T12:55:12.934445Z","last_seen":"2026-08-28T16:21:06.237052Z","times_seen":1609,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/4e88bc13-46ae4cf1df85ab1e.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.642Z","timestamp":1787923619642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/4e88bc13-46ae4cf1df85ab1e.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"23f12-19fd95fb6da\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147218,"size_decoded":37939,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"9b25f00912a0fbeec73de9ee0be77e67","sha1":"aa9bdbc0674c9e1b40a609044372f568c01ed2f4","sha256":"daecdd5267fdf87b27fe09eb7bdc351b2c9ef73d25b170470b4ce9e63ed4c8f6","sha512":"a27fb4f5f8a99a22147ee7fa8d4393a2b0dc5c608f04b96b3ab00c54b2de4104a831a8c8dc8ee14b6e165598ea826dd210a55253c24ea3e0385aab5058206e1b","ssdeep":"768:Z2oe5Y5hERLYNX8IZWx58CFT8R7yKHHdyV+FqPRnxAS0AADA4ztXn+7YFt4N2PfV:dtwLY5WJFTsAVJHc4MM7tFtxzd90lsU","tlshash":"6ae3e706b760a00c7247c12e55fa5a18f2562f6cc53d6a3421f2af392971fc0a5b67fe","first_seen":"2026-08-28T13:23:48.65981Z","last_seen":"2026-08-28T13:28:47.499295Z","times_seen":2,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/profile/page-90dedd66cb8570e6.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.737Z","timestamp":1787923620737,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/app/profile/page-90dedd66cb8570e6.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"98f-19fd95fb6d9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2447,"size_decoded":2131,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2445), with no line terminators","md5":"e7897c80d9a4aff54c8aa84afaa8c958","sha1":"f71807d0acad8f92af042dff9ac1ae776d2cd364","sha256":"767cb7fa4186698859eaeda2ce82afd073414efd535b7a33f719f05374aad4a0","sha512":"37555ea920fa9b56ecd599bd9983315093b5bcd4b3402bda5823945d10cd4494be699effeab57ba7f9e9f8dcfd845acab8635305ba2b522014c6f600b0789284","ssdeep":"","tlshash":"4d51d198e355bf9df56304e4246fa01db52a0e48d71e48b4b9fc58125ca10e83a63fde","first_seen":"2026-08-28T13:23:48.66659Z","last_seen":"2026-08-28T13:28:47.50024Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/webpack-ac9fec7c65b532dc.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.636Z","timestamp":1787923619636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/webpack-ac9fec7c65b532dc.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"1fd9-19fd95fb6da\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8153,"size_decoded":5357,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8153), with no line terminators","md5":"3ba26a85fea24fb262001ce996a6c783","sha1":"6424e5a33b8d3cefbbd94d817a49210a98ee85de","sha256":"10e6d031c3317db6c4747fdd6b6c608f0189cf77ff7c3c3fab077a6d24f7247b","sha512":"0cc72df8aee110e617ad7b64630aac1340a0edf3bed7d340ca59d678c3e7001b57a0ca50632d363d4c4bcf0dd6e4dbc7438b32822ea1714321ef85cd6101e34c","ssdeep":"192:LwWpQL7+XJTubQVlK1jy4vTvu8m+zBJ0qhG5MCMZmp:LwWpQAEX7qX+L0OG5mZ4","tlshash":"b9f10ace736dfce51e6255a11d3f18b5e22e6473381e8890d205c9b12c70929c627fbb","first_seen":"2026-08-28T13:23:48.614447Z","last_seen":"2026-08-28T13:28:47.501338Z","times_seen":2,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/8063-53b053cdc2f2972d.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.645Z","timestamp":1787923619645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/8063-53b053cdc2f2972d.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"c878-19fd95fb6da\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51320,"size_decoded":16592,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (51320), with no line terminators","md5":"cd40ad720adc7671e3f413ba78eb1c11","sha1":"7c738259636097d8355a688015f7b619aae498e4","sha256":"f077024404fb2bce27f18000af6d6ba31512b6ea485cb2618ccdca5eff77cb7b","sha512":"d3f8863b5aa82defdeb6fc45a6a508d81076d96eb3d29ead9dd6faa0986e3e4a8776c440e3e0c6e4d4e37d216e6146f0c246d0d367f6820b9cb07a3b5cc504b2","ssdeep":"768:fXuXXI9U/2rZIt/1gGq7XmXrE3uZTuLoEJ:fsI9U/2SrQQV0","tlshash":"b3330885b3d1b47657db82a6643f1006e2385cd1180d046cb7b4a9ebfda368dc1faf68","first_seen":"2026-08-28T13:23:48.657342Z","last_seen":"2026-08-28T13:28:47.502548Z","times_seen":2,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/120-6736d5f20c72a297.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.649Z","timestamp":1787923619649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/120-6736d5f20c72a297.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"10901-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67841,"size_decoded":23996,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"eaa1c7d6ce8c0d20753fd99a86645358","sha1":"52a85e01225f9f4dbb75edc02b4bd8d234deedef","sha256":"e28de09bc92e17f99d06c9bf59efe424a6148209b959b351235e3957be7b259f","sha512":"b01b6cb926cb3293402fb90cd03e63a5e7ca5b8799ad153a01a57fe6726f68f906a95d01332c05238ef707637626057866adf02ef9c21572a9e4c82c0f3f7227","ssdeep":"768:fJIsv1QlbJqElArgM8v/iFNiS3bduNB7id7s95cbegDECHLtDZJ609:fJklbJhmU9vs3hQB7idVCgD/Hl/39","tlshash":"0e6393d9b2d1b425d3df11a2c46f060ae27a59d8284a046df2bca8c7ac7054e61f7f7c","first_seen":"2026-08-28T13:23:48.615598Z","last_seen":"2026-08-28T13:28:47.503398Z","times_seen":2,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/2825-df8f856908698fc4.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.651Z","timestamp":1787923619651,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/2825-df8f856908698fc4.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"1a7d-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6781,"size_decoded":4079,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6779), with no line terminators","md5":"a60a5a5b253b5d2322e058bd844185d3","sha1":"89f2f15385a47476800de9b5491966b87191e009","sha256":"00fc2f14a647087a3b5d746c0e2990bee21768f6f23cbfaaa13534e22cda8e9f","sha512":"3932ab62b51e5459402ed561315f4432f4f898ec720f44711f195fea1f27e7c5b3bca67f5657fdae9a1cde67b525d038a3910f551912e6082f6e80af3bb294ce","ssdeep":"192:KQVcBrq9Gal8SlnbAa8rXpT5WuV2ll1fcGh:K0KEl8Qr8tT5xVovh","tlshash":"60e1b6e63392b016839f52a3806f114af6b8aee0250f441df6585ddb283595e42e7f78","first_seen":"2026-08-28T13:23:48.694486Z","last_seen":"2026-08-28T13:28:47.504316Z","times_seen":2,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/1817-fb5f68fc6c342cbc.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.655Z","timestamp":1787923619655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/1817-fb5f68fc6c342cbc.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"127b-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4731,"size_decoded":2681,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4731), with no line terminators","md5":"9b97f23e9b778305c779e6c5bdf93d15","sha1":"7f53142a4088ac4217808e76536505dac0f4de6b","sha256":"bbe9cf02d75a5ad37e1bf5e598f3f41a4ae5eef87c9fc79449416ab7016e3b48","sha512":"11b59aa8dde6116e3f73f3cea4f62ed6fc599ec5b25c0a00e0cb74ba008e724e0de51131b98b7e6ed86a9b46659071a301e62b0981c9c9af6385236c27a40906","ssdeep":"96:8k0wfSkYexqChinshGE8oyHmdCYdSPRMu3f1SzU1PyteSiJkA:GwEChOshT8oyiyzP1SzU1PmeSin","tlshash":"9fa1fdcdb2d775420b6a1050c0bf019a733d0cd6992e0a18b65a9dda7c3de78d2a2f1d","first_seen":"2026-08-28T13:23:48.641159Z","last_seen":"2026-08-28T13:28:47.505212Z","times_seen":2,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/css/b2d0b676f5f3caf6.css","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.633Z","timestamp":1787923619633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/css/b2d0b676f5f3caf6.css HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"1b5de-19fd95fb6df\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":112094,"size_decoded":21192,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (63241)","md5":"14719517a642906894dcd9df12587255","sha1":"c0c7a1e2b71ae3335e27e7333dd1087a1cc441bd","sha256":"8de41fcfef85b1f0261054bf255a078766f65e8e8b2a505d98269789a13b9480","sha512":"d2ce25ad8bc7a38dbce8668d631c46a6547c78f0149261c19f712181cf3345336b22bd475ff732d3853ab1d1d9cec0c98e95d206ac025bdc65728fa1857b7cb9","ssdeep":"3072:GHInkjvBmOlc9GOQuODxAB9f6IGvLc5ql+GzrIrue4A+sgoB0BtMMy7:GHInkNmOlc9GOQuODxAB9f6IGvLrly7","tlshash":"8db386ad7a09503f7c17a5e983f8f6dda12af080dd2217e9bc4252214ee13f71ae7524","first_seen":"2026-08-28T13:23:48.656245Z","last_seen":"2026-08-28T13:28:47.506808Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/api/visit","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.017Z","timestamp":1787923620017,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://kaching.fun/\r\nContent-Length: 40\r\nOrigin: https://kaching.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":40,"data":"{\"code\":null,\"first\":true,\"kind\":\"load\"}"}},"response":{"raw":"HTTP/2 204 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":1265,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T20:22:58.661106Z","times_seen":18172180,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/7307.0391e49da5dba80d.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.741Z","timestamp":1787923620741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/7307.0391e49da5dba80d.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"50c89-19fd95fb6dd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":330889,"size_decoded":126835,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"12daf3796849cbc07ea98338d5160ac3","sha1":"9ece39b56cf95bf17025b7011f95926f19111dbf","sha256":"27a749369f9fd632613638862b28ecff1cb9dc804b766f607d5d806d1f731331","sha512":"594f01cdb7c116c6f487b779cf6fa9e4b7301c3e2f8f5dbec34fdff38729c20b680a689ec198ec11cd8feaea11955959d56497aad4841e9863d64d2b359f8d34","ssdeep":"6144:eZSC6mtuFOeprApzIk5dbz76jBDE3zsn9XdbvUTr3dmT3r30YQFLiINS7m:+SwB34dbvUTt","tlshash":"e3647d94b351b078cfe710aaa0273105f274ad5594ce4854f7e4eaeb29fc88c52a7f39","first_seen":"2026-08-28T13:23:48.627155Z","last_seen":"2026-08-28T13:28:47.508933Z","times_seen":2,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/8761-b6155a6342406746.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.654Z","timestamp":1787923619654,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/8761-b6155a6342406746.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"5a9c-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23196,"size_decoded":8559,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23158), with no line terminators","md5":"6271cac472d1c54c16573fa87adc8131","sha1":"71c49fd93a3a1497c8f1c21e8ea2df1ec0bbed36","sha256":"f655f7acde7546fedd43c4f7bc58f0b629b45116837d7aac2f2fc544804d366d","sha512":"b3f9e7b284351cfccca9c3e4b0e874a65c3dc475dc70ec533e2b0716e2746351039d5adc38bc9b70084b6f8626b18475350c9a273ac0771c095ab40b20908a82","ssdeep":"384:2FdpHRm5/PIHrlpfda5GkYYOhDxIcbl+F0IZT+fh1Rmg4ErYFn4MHr0lwA9f3xUH:2DZ/rlpfda5GJYOhDxIcbl+F0IZyfh1c","tlshash":"bda2846a9fd9788d781b9e6c019b500cebbf566962174c00bf5ef038a5138d4f96bf80","first_seen":"2026-08-28T13:23:48.630532Z","last_seen":"2026-08-28T13:28:47.509978Z","times_seen":2,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/9568-aaf4c61ee0263563.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.661Z","timestamp":1787923619661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/9568-aaf4c61ee0263563.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"1682-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5762,"size_decoded":3379,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5732), with no line terminators","md5":"18181f2cd8f694540a47f5d8fb33fc08","sha1":"ad90d793bca26464e729c83abd0476ab8bd404a5","sha256":"518fec486d3dab65ebbd6d0485c6b760755c3417d9f8b5fe5956acc6396f5b75","sha512":"8e138be84ffbdec17c483feb2fc922638b8c24970c8ad6da2729bd2f384d8c40f8fdf0f31b447781187e3229bb3bc5b6c00d4f57366b692c5a5e50e5340f9bb2","ssdeep":"96:Rjv8nKMDb09/LGZ+uGunYowfIL8DDP2IO5OR13QZmeGTX2J+wsAMy2LDTn0nnrVj:RjvKd09rVIGMi2mem2Jrs5y2L/0npj","tlshash":"9ac1b735e2d73729879d51d6414b4a22732df575ea060cc8916ec88d1068cffc2b7b94","first_seen":"2026-08-28T13:23:48.648972Z","last_seen":"2026-08-28T13:28:47.511004Z","times_seen":2,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/1866.37d7bb321befbded.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.046Z","timestamp":1787923620046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/1866.37d7bb321befbded.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"5cc1-19fd95fb6dc\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23745,"size_decoded":5158,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (23745), with no line terminators","md5":"d9e74e6a766d22342d60b0e1621e97e9","sha1":"929baefba98c8e3ec69a2846d5614eb9904f14ac","sha256":"c179c38a70da5f00e24827cc44092ff1b86326638df9c8a720fb6ec0c26b7eeb","sha512":"6c539d185a2141df93625b32a969ce829719e55d7f059d132c3c654b78f8b6a312a5afcedb5eda08236f191afeede4229968ba3acdf8b70320520cf7f41d321c","ssdeep":"384:apByhqW2xs3dwktSu6foTLEQD4zrlqPqI:apBSqQ3p8BrlqPqI","tlshash":"68b288ada2320d497c3bed6bfa89790db0203fcb8915a4ba8f61b154cbd354df2d0651","first_seen":"2025-07-06T03:12:52.675498Z","last_seen":"2026-08-29T06:07:23.517198Z","times_seen":52,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/coin/0x0464233DF1D075095ac1C7a4C2631928560eC295?_rsc=19zvn","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.887Z","timestamp":1787923620887,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /coin/0x0464233DF1D075095ac1C7a4C2631928560eC295?_rsc=19zvn HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: text/x-component\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":174,"size_decoded":1064,"mime_type":"text/x-component","magic":"ASCII text","md5":"8b1c32b74423aaad93c3607d2fdcb7b3","sha1":"84abf3ebf4a6c596614cd0438dac3ea3f8b99868","sha256":"8fb03b76751c3549cbb94bdc1855189aa70fc5b147abab53d83af29b8b92df24","sha512":"d6a5468406cae39dcc40d6330e1fa57bba5875384ab0ebde773b64014f4c4f5f095ef55dd61cd9b55070fb3837325ed81cd4f33308874d29181ec2c01d9bb19c","ssdeep":"","tlshash":"87c012b32120aea63c7a32c5443dc46ab60f5a47109c047941851e152b62533102b2e1","first_seen":"2026-08-28T13:23:48.693558Z","last_seen":"2026-08-28T13:28:47.513338Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/media/a865edea076e0166-s.p.woff2","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.632Z","timestamp":1787923619632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/media/a865edea076e0166-s.p.woff2 HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40404\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"9dd4-19fd95fb6df\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40404,"size_decoded":41303,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40404, version 1.0","md5":"b058178d7f309414f8f856b99fd80d9b","sha1":"e7277e714521ceb5f174cc9879b51e0f4aa69753","sha256":"18be452724bfdc236c074ca94a249a7f41a86752c7d04ab258ce9ed5651f6a7e","sha512":"0eaceff7dabb62af403cd6fa06f0fcaa4de0e88658b1d781ccd90f58596f945668e99bee1bbfb474788160c459ade4c940f972fc298af82295c262663e049afd","ssdeep":"768:PHic6xtku0k1APPuTtIw9uCZawd5iucW0c+858iSHn1twyVl:fO7hqPWIrCswd/0cJ5+1OyVl","tlshash":"e503f1d7b7502c70885b162d7fc62e0ebe026fb1987a16d9523fc372372688a6472352","first_seen":"2024-10-24T21:44:25.834346Z","last_seen":"2026-08-29T15:52:11.653857Z","times_seen":2978,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/7678.ef405702e7864f7d.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.044Z","timestamp":1787923620044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/7678.ef405702e7864f7d.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"918-19fd95fb6dd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2328,"size_decoded":1929,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2328), with no line terminators","md5":"b4d5b8353bf16525807304053e1a0129","sha1":"66c0a5a5f3b4a1800013e07af0e4f50478773593","sha256":"688700c1a4680f42bfe44634ac2d53140eb7b7b5750471fd4a537792e068d69c","sha512":"094a4602eeee29ca00926d5f0858c2731a04aa9b41d88b339499dec2451ecefa1ac76deaacc0586808071a9598e422d09946b7f556ec4adbc864c6d0aff8da11","ssdeep":"","tlshash":"aa4144be29322e4e68739c57df891d0d7122ef7bce146861ce690208cd2371971e0a31","first_seen":"2026-05-29T20:00:20.615606Z","last_seen":"2026-08-28T13:28:47.515104Z","times_seen":11,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/api/token/0xfeF5291b56C763396b2cf1cDc3FB9745a80895A9/image?v=b7j1jo36he","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.746Z","timestamp":1787923620746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /api/token/0xfeF5291b56C763396b2cf1cDc3FB9745a80895A9/image?v=b7j1jo36he HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: image/jpeg\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"0xfef5291b56c763396b2cf1cdc3fb9745a80895a9-b7j1jo36he\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10878,"size_decoded":11787,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"e1e3322fe883dca9b101cfe5ecbb05b2","sha1":"7119f5e6e83e49671bf492718e776735ed7bf64e","sha256":"cd8d9aca30f5756524f5fb0677db67cc4afa1e0fd913f8871e69f5448b8145a6","sha512":"6885bbe667832d92581df037992c12ed99797ea108431548b34be9403d7964c4f5c4aeb2e32c25c5c7ead468d980e45d94fb5edf54ad0bf9c750a86db1b4b58c","ssdeep":"192:sX5qnCuBVzCqZ38mJL6CnSmssQHFGcZWNJ8gUfMmbzbxPnK4GN:sXJuLx3XJHSLs2ckg+Fi4GN","tlshash":"31229fd26316b615ce6d3f38a5fb0fb2e6193d32d7d9e3a24840c126676f0140d641d5","first_seen":"2026-08-28T13:23:48.595156Z","last_seen":"2026-08-28T13:28:47.51572Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/media/6c596dfcddeca1e9-s.p.woff2","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.631Z","timestamp":1787923619631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/media/6c596dfcddeca1e9-s.p.woff2 HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"bc80-19fd95fb6df\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48256,"size_decoded":49155,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-29T19:33:50.253749Z","times_seen":28363,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/5074-570fb5d0872de9a5.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.659Z","timestamp":1787923619659,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/5074-570fb5d0872de9a5.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"785-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1925,"size_decoded":1966,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1921), with no line terminators","md5":"744c909ea0be6716054b42de4b6d5c43","sha1":"95019b6deeab9ae0b84cfb807c6eb4114faced0f","sha256":"05801987f98911e5ecfe99491d1020a63217cdd82d717a5ad00bc8ec495cba55","sha512":"aa6ffff51bc081dca80a3f5680a301c6fb064f964d1ff1b23c610d757d8f7a5350af648e6a7d0f98f86c94757ecb719de97bf61451666ddd06e833e1771b8767","ssdeep":"","tlshash":"124111cff181b0056113003141bb472dba0e964a9c3e4fa1951fe28c35a2f7c466bb4c","first_seen":"2026-08-28T13:23:48.662099Z","last_seen":"2026-08-28T13:28:47.51755Z","times_seen":2,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/2957.c62f3abb6b8b7f90.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.981Z","timestamp":1787923619981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/2957.c62f3abb6b8b7f90.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"6863-19fd95fb6df\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26723,"size_decoded":8998,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26723), with no line terminators","md5":"ea13f4b915ae12c51b2f213294a0737a","sha1":"81cb066757bce74d8e459b56089a633952544103","sha256":"91cc3adee0be5a6661a9c388ea64805784d46b57757dc1da527352483b543f4a","sha512":"f0baf0735038d61216a37274d5dc3cdac8233ee1d48d16a94a5dfa1abbf0fe901ffb4964020c3999036c56ad4b46f7774fb60b4440eee1ebdd62be0358333d06","ssdeep":"384:6nIQA80LbYn1OeOpf3d3UfwNOW54ZImpAwnED8xBsQUtCNuE:W5psBeOpf3d3UfwNOjvfnED+hNb","tlshash":"dec27684f7a5b03603a26291046b141bf279ee79948c58acf260e4f724b68dd94fff74","first_seen":"2025-03-08T10:39:10.064205Z","last_seen":"2026-08-29T16:10:16.955214Z","times_seen":59,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/api/livestream/live","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.026Z","timestamp":1787923620026,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /api/livestream/live HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\ncache-control: no-store\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12,"size_decoded":871,"mime_type":"application/json","magic":"JSON text data","md5":"7d9b7fe1432a71f7da4cef0cd4a72e94","sha1":"122c4413509e6443d7a8adefbb8d6cf1e660ee1e","sha256":"3267534a96c28b698ce6a7fe33bd7668e68f1ae659fe9427866ca530a872ff1e","sha512":"a804029aa8b612494415684f70387c19c0a9a4bf7fe27a5beebef0bb19ebdd025c72e8884a9c9aaf1e3eadea56d5842eb9b7682e475cf0748b0fe01b68af27e1","ssdeep":"","tlshash":"0860000cc3000f0c000c0000c0000030000000033030c0330cc000c003c00000cc00c0","first_seen":"2026-08-28T13:23:48.689873Z","last_seen":"2026-08-28T13:28:47.519165Z","times_seen":2,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/3882-9322532356f01624.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.647Z","timestamp":1787923619647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/3882-9322532356f01624.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"3a5d0-19fd95fb6da\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":239056,"size_decoded":73626,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1509806a1b97ed0174b3b67f7cf1cc1d","sha1":"d127b75eea601eb2b8306336e9eca832a3e2b18d","sha256":"643858be36b6b11fd37d496133c8c423836d52c2dffd81e4e3801b58b0e83718","sha512":"207ba73a609297c34e9b21055185cf512e4cd4973d6e026969eb4603131694906c93840bd5e0f1b24791e9d8c9172870093126d7ee8c40e6131b367483d98af1","ssdeep":"6144:S3bsUavtqv1vul3BLTRJeDSkDksWRkbTta:SLDta","tlshash":"fb343ce477a1b0a187db61a1546b2001f279e8d5654d0058f2b8e8e73fbed8c85f7f28","first_seen":"2026-08-28T13:23:48.661087Z","last_seen":"2026-08-28T13:28:47.520128Z","times_seen":2,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/whitepaper/page-13d670f4857a12ea.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.739Z","timestamp":1787923620739,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/app/whitepaper/page-13d670f4857a12ea.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"8737-19fd95fb6da\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34615,"size_decoded":11817,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34530), with no line terminators","md5":"944f0daac6827262e03a439de3a1c8f0","sha1":"cc88ab264aa4fb96a678f8cf84263c11153d70c8","sha256":"d0b8b7c137d68c870128f699a94472e44e366a80ac4d6e7667c8a8ada4751c00","sha512":"67586c690b82487dc6df04c5dad8e7f7d152207869f1be8989349a02969911f7a035dbb50ef718546e90dc7f9b55239664281e59a37a5a7f6effe78f43cfa7e2","ssdeep":"768:24dvPCL7wCLzoZTgGC+tPXSzK+VLsWR7B40lixX:zWoZTnpbj0IX","tlshash":"dcf2c850b146b7acfa7708a862bf800c723f2b54da0f8874f5b97c251a5a1d87753bc9","first_seen":"2026-08-28T13:23:48.624481Z","last_seen":"2026-08-28T13:28:47.521076Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T13:26:59.278Z","timestamp":1787923619278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=31536000, stale-while-revalidate\r\netag: \"cc69ut8n5k1sdb\"\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}],"data":{"size":83611,"size_decoded":12657,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65497), with no line terminators","md5":"9319bd821a50a4e49a28386017ea24a1","sha1":"0f4190804820bc3c2524c0e628fd1db258010efb","sha256":"8b43941db2ab01cfaad6cb7e3a4bf2764689748a4ce99b46be49a238859f7df8","sha512":"5de6636723a8d2c683de7c035f1a579a07c9a77999e013f5e4f6a6d4d87f61388b6e80063cf779fc55ba8accaa95b409e09a629ecf9c1718fa6dc1b1fc4dabf8","ssdeep":"768:c+3qbqIlOlj6eeeWeWXsLXZUX+dPNCLRlVeP6ensCLRuVyCLReCLRlCLRgCLRuCJ:pj6eeeWrxX+tKeyeNfTSw/eeWadLD3","tlshash":"2083863a6001da1925b38e8e31b76f6de34ac237d627890dd6dcc19b32d3c79477a981","first_seen":"2026-08-28T13:23:48.655159Z","last_seen":"2026-08-28T13:28:47.522024Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":15,"connect":25,"send":0,"wait":31,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/fd9d1056-5bd29454b8b8b5b5.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.638Z","timestamp":1787923619638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/fd9d1056-5bd29454b8b8b5b5.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"2a325-19fd95fb6da\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":172837,"size_decoded":54695,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a69d5e780ddfc8b6b228f594dce5b7e1","sha1":"17725b0e4599ecdd6f4c83f741b6696d36ebd68c","sha256":"865cad64a44a0c49b5bdadd6c3e9a9a363f6943fb9a70efc1b6292ebab67276f","sha512":"445be2ed5e1bdb44e6b3b14022fb88b9ac101aeafd8d492e29720041cf7868ded43b563879502eaee687300dafa76350c075512e7120f861dd9bb5e47a56e75b","ssdeep":"1536:WVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:kzug758kkEiXjOAprX2wd5WjguGOK","tlshash":"27f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2024-12-27T03:29:10.636706Z","last_seen":"2026-08-29T18:47:23.010006Z","times_seen":7793,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/9520-d80600f3e6d22b74.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.662Z","timestamp":1787923619662,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/9520-d80600f3e6d22b74.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"4d89-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19849,"size_decoded":8355,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19833), with no line terminators","md5":"b03375e644f8fbb67a02f535c19faa0f","sha1":"e61e8bdf8758815d66b3ba5e85e4a52c400753c3","sha256":"bcc23679a77f2c549c277fedee2dd2500015af57230fa6bb624f748ad4b8da81","sha512":"61ca392cb5f363afc0f02d1e3da8f78b295dd4645d420dda03da3c41c5e7a78bb1dd234d6ca5740260a3304505eb65eb22ec49dc9a691dfe4b3e92a14da6dbac","ssdeep":"384:75ZrJWX1byU3nYJ3U834nCNjBq2pVoA7B27CB/06eGa0DfHXdKsX:vJ0P3nYhUc4nCN3Vh7RA3x4","tlshash":"2992e9e9b6c235a5a36b086955af900df37e3e44a80e0814f1bd789539574e4f3a3f8c","first_seen":"2026-08-28T13:23:48.59413Z","last_seen":"2026-08-28T13:28:47.523458Z","times_seen":2,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/page-15a85e0f3973d9a4.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.664Z","timestamp":1787923619664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/app/page-15a85e0f3973d9a4.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"eccc-19fd95fb6d9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60620,"size_decoded":18679,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60495), with no line terminators","md5":"45b7fc0f5b36fb523991e432175ac108","sha1":"db016211a724b5065f37b2d598253bf3672a79a3","sha256":"929900e11ec49b124d9b2b7fe5155b6e51f8911933baeb95fd379045c6f5486e","sha512":"e2fcc8ae4092c374f95218082ac812986df136c30949f828d52f9191cc16776858905533b8cbcf26b958628600635a4fa18df1baea796348f4eac8ee90552a9b","ssdeep":"768:X0uML14NCLR97zyCLR9oCLR9oVatsnCLR3bQRQzIWh6IKV+BnLIT0zp1L6poNmYr:X0uiOJsE9yPu8XiSWZHnwqHU","tlshash":"8743b751e342bbacb87709d565af900cb22f1f14cb6a4875f5bd780929480e877a3bcd","first_seen":"2026-08-28T13:23:48.636672Z","last_seen":"2026-08-28T13:28:47.525297Z","times_seen":2,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/whitepaper?_rsc=19zvn","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.155Z","timestamp":1787923620155,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /whitepaper?_rsc=19zvn HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: text/x-component\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\ncache-control: s-maxage=300, stale-while-revalidate\r\netag: \"oh8iwxc3mx1oh7\"\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78502,"size_decoded":12236,"mime_type":"text/x-component","magic":"CSV Unicode text, UTF-8 text","md5":"b1ec2579f142f540a08dbd65ebe64304","sha1":"9a6f87dadc7bd0782e82d45969d4cbc84c6cbbc3","sha256":"c7c1471f16c321fb7a6dfcd2bae0ef80e175f843a0caf35e0d1becf7605d8a50","sha512":"e864019b3a8b28c74744ab9c2eaada626a9c1df9b86d3c2b4053e0ca0e93eaed1fd5973924ad948bbaada8bb0616930b9b933d7a9f92fc14fb0b4f5c4947c5dc","ssdeep":"1536:m616OanWp5emZla8QGZlMao8P5bbjk2AYYNfn95O20sgP4bJvSR5uTMasKWwH5UJ:m3OUWpj88Qil13PdI2ZYBn4InBW0HsYI","tlshash":"0f730d3b4306ee3c6dbb8995595fe32aa5ad423b86615ef2c3fd6e2403520313b17385","first_seen":"2026-08-28T13:23:48.623043Z","last_seen":"2026-08-28T13:28:47.526177Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/6324-886ea6dff2361c62.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.668Z","timestamp":1787923619668,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/6324-886ea6dff2361c62.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"1d8d-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7565,"size_decoded":3816,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7559), with no line terminators","md5":"6b8e1da2158be0aeeef5fa78ec6830af","sha1":"5427b69c1d774ece4b0649daf47cd9b1e4bfe0a2","sha256":"b86812b960b525d175326df2ec48d555b621df720ef9e6087d1df1f19f5b6194","sha512":"6ae2e12b3886d7a7ff7c71f59b9e3553e49d95e06a9f206a13f19fc521ddf233f92c8f9bfd3d598cac652d37d6e2fc85e06d29419d3615bcf3268f19748412b7","ssdeep":"96:9PGxuAGzTc9pOA2w4ADElvdtMWVmvQzuZfTOIVuMsZEIs/UqIEl9yO5FlgR9QYi/:Ccc9pR2w4fGW0QzeOIVs+iqByHq/","tlshash":"17f1eb607286badc940b4c88d56fa01cf26f4758d75a9838f6f8ac2025a70f57657fcc","first_seen":"2026-08-28T13:23:48.673493Z","last_seen":"2026-08-28T13:28:47.527118Z","times_seen":2,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/2367.6b0d1ae9e9a3e732.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.048Z","timestamp":1787923620048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/2367.6b0d1ae9e9a3e732.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"2f58-19fd95fb6dc\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12120,"size_decoded":4025,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12120), with no line terminators","md5":"dd19c6be0ff3a028fe363b25e1a205ba","sha1":"9ac795258eaa16c779a16b1af06c13998a054490","sha256":"737ba8951e4a4684b558a8ece4e304e420f4e0b738a3dd8a7b2219867063c712","sha512":"91d8ee9a11126b38dd9d6f4f1e360d9c2327ffc66d04b4b974e8474f41dd6d58802b0353042ac7fe307ae9f0291def171e8b9d538aed6609c0c7099609101f56","ssdeep":"192:G+nQSYk2qSl2qlEW1QSDdvWwMAuLT+JjisSE44ovGSqyPedtqPq2qrN4qrNdO4:G+34pjZWQufLsSEBovGSjedtqPq2qSq/","tlshash":"dd42ecbca5711b5ebc73d417cb55b61990313fefad6488a8dfaab208cb9691cf5e0010","first_seen":"2025-07-06T03:12:52.67279Z","last_seen":"2026-08-29T06:07:23.568795Z","times_seen":54,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/appkit/v1/config?projectId=a59d7d7699cee77887711d3ac255b863\u0026st=appkit\u0026sv=html-core-1.7.8","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.957Z","timestamp":1787923620957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 22:00:49 GMT","end":"Sun, 08 Nov 2026 22:59:47 GMT"},"fingerprint":{"sha1":"15:97:6F:D0:CA:06:44:96:61:32:37:0E:6F:F8:18:D9:4A:2B:26:7A","sha256":"46:81:16:FB:36:75:BF:3B:5A:92:EC:9A:72:40:8D:20:8E:D2:3B:25:2B:CA:42:6E:AC:75:29:DE:7E:74:F9:57"}}},"request":{"raw":"GET /appkit/v1/config?projectId=a59d7d7699cee77887711d3ac255b863\u0026st=appkit\u0026sv=html-core-1.7.8 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nOrigin: https://kaching.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 13:27:01 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=30\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a323a6a71ece56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":595,"size_decoded":527,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1c3a4908ed2367c1c7aa4becb3405028","sha1":"38ae3e154b0c6327abe105b076013b1bbdfd6cc6","sha256":"b8dbbceec8a5443a9a13f936934d90172636d6481952765b2b803dbb876c208b","sha512":"2a169854233efc51af48e78395a576108b5b1dcd5a2cf741800bce6f2d55ac8f5acc922b1d3c6db9b188930bf103eebbcaa85e62f4d71071edc822275202b832","ssdeep":"","tlshash":"71f05427598c39dac546cd73d64397430fae4bb7ea05ed2cd81c9a0913deab11120d3b","first_seen":"2026-05-23T13:27:26.606318Z","last_seen":"2026-08-29T14:34:58.710229Z","times_seen":2270,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":4,"connect":9,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/7803-8dfab773e9561f81.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.660Z","timestamp":1787923619660,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/7803-8dfab773e9561f81.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"1f58-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8024,"size_decoded":4130,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8016), with no line terminators","md5":"fc717e3ebbcb2f8e3da7ec0b3a39fc5f","sha1":"ede74d36c38d8f352a22bf5837762816b18e5b83","sha256":"1a22805f83120d7e67eec5338d1c8e82f948cf76442428b85b21e8dbadfdeb81","sha512":"e2cf25a2001e871d35fbc30bad8cc379ad8b265d8c3f969a7880226e83fe6341318fecaa78c44c85865c5b815c94d7cd616aca48bb859566445453f9d99670bc","ssdeep":"96:2kGJA2adIAMx92OREgbG18wEaxuHRmdMmIIRYQtimy5fy4bnNG59x1CjNJKGbdIt:/GJAxdjG1C18wnVHEfyinNA1C3KGbdu","tlshash":"cef11980358534b1eb9f548a587f452cf2be27247c4b8810f6776e4c3636290f2a3f94","first_seen":"2026-08-28T13:23:48.688062Z","last_seen":"2026-08-28T13:28:47.529809Z","times_seen":2,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/7879-0c0ce6e31271da03.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.663Z","timestamp":1787923619663,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/7879-0c0ce6e31271da03.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"557e-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21886,"size_decoded":8561,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21838), with no line terminators","md5":"4a555f8a3bd8895dbcf24193b1ec0244","sha1":"eb24f27756ff133675c1125acef57ef18595227a","sha256":"6959db085eedcddcf89f005d90b52a8c968796251ee7ad806ef48167936ab799","sha512":"6a2a5493ade729308229297bb28ba5e2ced71a2d7610023a25c0bc2caf06712c86a50b0a2bf20fc487a6bbb15ea0d014d0c6baed4da9a38c43cd81bcfa447972","ssdeep":"384:GVkqix+33qEwLnxSzxb3WQWKWTdF/3FleUUFzEw/nEv7X:Geqixuzh3YF/3FUUUFAw/nQ","tlshash":"d0a2da91d382bf6cb97b0dd9686f510cb22f2f24cb5b4864b5bda84016044e4bb27bdd","first_seen":"2026-08-28T13:23:48.620864Z","last_seen":"2026-08-28T13:28:47.530917Z","times_seen":2,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/8890.f6829c2508866de4.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.045Z","timestamp":1787923620045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/8890.f6829c2508866de4.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"7d2-19fd95fb6dd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2002,"size_decoded":1745,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2002), with no line terminators","md5":"710956c4f0bb36757a5ada8391177afb","sha1":"4144cd04bcadf5d00c160e7dafa970e7ac3bcc62","sha256":"46a2eb4d7bbb222f5cbe01b185fec89e4b112a04e4b0241ff7df36b0777e5c9e","sha512":"ac7a9e9d63927f1f1e3375d59eec2beb11628f6058a65231aad964e8640905253b3774165f38e7b0243db4d76eeb5904f0e162d570b0d5cd1701c0c9a0f5959f","ssdeep":"","tlshash":"df419eee30b03c89d43bc563942a301e61b22d3bfe2d9a569aa762647e35c5410d4633","first_seen":"2025-09-04T11:45:19.057696Z","last_seen":"2026-08-29T06:07:23.568224Z","times_seen":32,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/coin/0xbe5625708B8cCB49ed404D410a95B5FF6c8dB955?_rsc=19zvn","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.885Z","timestamp":1787923620885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /coin/0xbe5625708B8cCB49ed404D410a95B5FF6c8dB955?_rsc=19zvn HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: text/x-component\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":174,"size_decoded":1063,"mime_type":"text/x-component","magic":"ASCII text","md5":"d29c7239734ed5bc7b919d20dbb45d49","sha1":"1143d51dfcfb97398b76a17f0b59ea683b3983c0","sha256":"81adb813ba6c1d1bf026ac0e3811c3367dbefec632b8b8c720a9cf53f19694ec","sha512":"8023269f703dc89f935d57f6a9c9f529ac68ff507746c8fd326efec49a2455cfff1df15d673cd7dd456dd883a1ff1bf5d4b712420fb37b7f8839a33be1ec05d4","ssdeep":"","tlshash":"ecc0127211f0aab6287a31d0012dd16ff54e564a104d04a141b1492237a9577046b5e4","first_seen":"2026-08-28T13:23:48.590306Z","last_seen":"2026-08-28T13:28:47.532424Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/3256-0b271682ff44aaf0.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.658Z","timestamp":1787923619658,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/3256-0b271682ff44aaf0.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"412-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1042,"size_decoded":1570,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1042), with no line terminators","md5":"16ca9ac311ea153bf3ebc65f47bfda0c","sha1":"8fd31bab7c5f6c126783a1a650703aea746a946e","sha256":"053378b8e15812cd59b0d71f9829650d5fdbd1a045446d3f96ad4853edb29f00","sha512":"cf1cd4055f8a2f93065764f59031c3a832ae65a79acb71eb52504ccdd11a5c2dcd0b6d29b8546853ecbd23ab006e5559ccb586541fad02a5dc56d9ba4bb0dabb","ssdeep":"","tlshash":"bd111f9cb2d271d46b2735a5443f16eb63be84c2581844d7d6d55083fd3050ce571e8d","first_seen":"2026-08-28T13:23:48.704931Z","last_seen":"2026-08-28T13:28:47.533243Z","times_seen":2,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/2156-dc3cf9285130c22b.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.665Z","timestamp":1787923619665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/2156-dc3cf9285130c22b.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"344b-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13387,"size_decoded":5371,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13387), with no line terminators","md5":"3f3d7fac9f717d1b27a08955aad066fd","sha1":"582c850ef0e87e92354351a98669269967e54221","sha256":"d899341ec27318d61f1c32de382d7318c03460d3d55d5685ff797f991c9d15b0","sha512":"c5850a7e0d7aa9f2b2c8c06ddb3c4860574392d783ea5a8c64ebfaebaaf9d96e7ed85fbe2d821a16616e11c7c5af3339cc11af568e34b90e67253e628f14b48b","ssdeep":"192:1L9EHR+iYZ7wGElJsiXGHgFvXGBexR6UZs8BN9ZAVv+vS/1I9zAUYPl59Pm0XnC7:1L9EHR7YZ5EbGHrTsEv+vwSyW","tlshash":"b352e89632d2f1262b57c099c83f8206f3765d2a580e204d77a11cf2b466dcab1f6f72","first_seen":"2026-08-28T13:23:48.706869Z","last_seen":"2026-08-28T13:28:47.53416Z","times_seen":2,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/3816.a3807bae512b23a8.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.039Z","timestamp":1787923620039,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/3816.a3807bae512b23a8.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"799-19fd95fb6dd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1945,"size_decoded":1752,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1945), with no line terminators","md5":"283e1575cb95ed8ad5a9bda817ff6be2","sha1":"39d3613dc1e52c63eb2a14b3f3ff07000778c788","sha256":"524baa6e0405b93839934d3763fcdf6adf9d1e89fb30e2a3c9c9bfe710d44fe3","sha512":"3ddd075208a9b59c460a7c11bd9c4ba82194fa34097faf61039a0272d49fb7e5da706c0e0e91b37133a56ceba184b4f4693c32a7cdd41145501c207ee7881640","ssdeep":"","tlshash":"d341d17d34f17d84993ac3b38402322e51653e7bfc3998d5ee56603ae92950431d8e77","first_seen":"2025-09-04T11:45:19.088825Z","last_seen":"2026-08-29T06:07:23.528062Z","times_seen":32,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/global-error-c5c7d116001f0173.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.672Z","timestamp":1787923619672,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/app/global-error-c5c7d116001f0173.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"643-19fd95fb6d9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1603,"size_decoded":1798,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1603), with no line terminators","md5":"7af1ab8b1fbcc416c5030297d6b59003","sha1":"b7d38ac09e7058c0d15a626c1bc81494ab076cc3","sha256":"7186961250871e18625465939026b3a6dc6486f73fda13b6cfcc1aec6ca60864","sha512":"48010682b5b7ef653e693d67343dca60177bef5efbe610b185dc3e5ef0cb284a0e679bca1e505d80d0e4316d98b3c9ce80b3d298cae0f60eefd5e4fd638e20b3","ssdeep":"","tlshash":"043195192e807a04f8a3888d74ff981c30af152c75a9aa7553b7ad3150e37a53a33fd4","first_seen":"2026-08-28T13:23:48.650057Z","last_seen":"2026-08-28T13:28:47.535568Z","times_seen":2,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/kaching?_rsc=19zvn","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.151Z","timestamp":1787923620151,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /kaching?_rsc=19zvn HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: text/x-component\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\ncache-control: s-maxage=31536000, stale-while-revalidate\r\netag: \"83chn730l1ejq\"\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18873,"size_decoded":3890,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (3340)","md5":"dd4ab726025654470ccb7f1e8987677e","sha1":"cbbf797811f50638d170de3220cecffe499c2171","sha256":"e10f9d3acdccdf42dd53196a7fa1208f5a451eef24656c5c07544b3196245286","sha512":"2caa49f55a28f0efe19a27bb372a79beff99b2f4ca597caed15a50abdad9a60917f7a8bbcdf1a06ff09ad60111686d22781a5222156c8901e53609a1b6406d94","ssdeep":"192:DXEaBDiB3RBtBkBkBvSBKBcBzBJ8BfBlfXqXYXzxClLZLvRF19cfTsn8pYbKs++B:DXz8fnWWQ0uF3851lCFFx","tlshash":"1f82992b8619fd254efacd894d4fa77bd9c9c933523006d6c7cd0e3d01c2263ab5926a","first_seen":"2026-08-28T13:23:48.690985Z","last_seen":"2026-08-28T13:28:47.536418Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/app/season/page-e48d467950540593.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.733Z","timestamp":1787923620733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/app/season/page-e48d467950540593.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"9891-19fd95fb6d9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39057,"size_decoded":11907,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38959), with no line terminators","md5":"b143636fc776973c0b3a46c981c12a66","sha1":"5d5db5371d4c8ce04f95fadbbfb4a5d7581be467","sha256":"cb8bbcf307c8f092838f5c96850278f8fb5ea053a4743a1585c99db031e957e6","sha512":"a81e12b2291e89a2b423df71ac6e3e86e338ec5055a03668b8d48b2db6bcb88b11485cb8d17e857bfd5fc4c0d7a8f2027d05507924e0558719b0611874929323","ssdeep":"768:CwqiP9sm4lZlGVmHw+CeJAdr028IKTK18ADMYuCLR96Ptjavdb4clwITOAbgch:PgrHw+CeJAdr02FKTKmdjau+","tlshash":"66036290e355fbecb96b08e9656f900cb22f1e19cb6a4875f4f9b80519440e87b53bcc","first_seen":"2026-08-28T13:23:48.663583Z","last_seen":"2026-08-28T13:28:47.53795Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/referrals?_rsc=19zvn","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.758Z","timestamp":1787923620758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /referrals?_rsc=19zvn HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: text/x-component\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108,"size_decoded":1010,"mime_type":"text/x-component","magic":"ASCII text","md5":"ffae6a8c9a1a12c7edbf79263ed6278d","sha1":"b27b69d0905fbceccadbcec5b6993b82653282c2","sha256":"ec94ec17afeccba2aa43f9643d2c21a2c7a8db74b9190a698f97fda5b2dcfe1e","sha512":"9285fd0170086e71577c97faf09882dcfc6c77beac51af840a8acea26a763ca5601bc6e78036b897dd1f68b379310953d9eb14a7aecc1a139ceea98ac016ab30","ssdeep":"","tlshash":"f8b0926382a8aeb66da436a6807ed74f750f011b007404a491a20c19362266a200b2ec","first_seen":"2026-08-28T13:23:48.658457Z","last_seen":"2026-08-28T13:28:47.538873Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/8004-4bfc782e0d8cbe74.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.656Z","timestamp":1787923619656,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/8004-4bfc782e0d8cbe74.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"ac8-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2760,"size_decoded":2201,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2756), with no line terminators","md5":"daa8987d110ad0469fdbf5ef1ed2dcca","sha1":"30b24bd8ee72f75d44fd2cb210dd38d27c812ff9","sha256":"612726fe51dd8c3c99d21dd709257c4e5dc12549b8bfe79cfde314e222180438","sha512":"0dcb9fcb2d3a984816df241ad6bfb30062d2f92ba1ab85dcc1de91816e602335fc6480df34d5c1392813630b75d5a2f79f75054863a16e1039200661ea91a2d6","ssdeep":"","tlshash":"e451751b74e37420a79f126520bb2502f33aacc1249d4c95c15bb6d69d30f04c27bfa9","first_seen":"2026-08-28T13:23:48.679085Z","last_seen":"2026-08-28T13:28:47.541266Z","times_seen":2,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/6360-dffa8439eda071ae.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.736Z","timestamp":1787923620736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/6360-dffa8439eda071ae.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"d890-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55440,"size_decoded":16658,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55346), with no line terminators","md5":"332c05f699b41471d3f04ab09adab262","sha1":"225ae5a09e4a7f38281a51069cc5571aa1baf67f","sha256":"810b9e194e523a48115abc5b82c510b0e905ba077ca789d0c5fb81c68ab4c762","sha512":"69708d9e92f289807c6ce1526aa9d1fb73e638ce4bf9c038d349044fcdd85c37f9a5c2d7b9b124aeb3d914d1905fb6bc2aabd412a680ad07b3607cda7803753a","ssdeep":"1536:CmVecLhYi2gA6V3MYq9PG5NHfEipw8x/Febk8KY01lBrqX:CmV2uV8rB+NH8T8tFebklYyBrqX","tlshash":"9043a791e341bbacb96b09d9655f900cb22f1f18cb2a4874f8f978052a590d87b53fdc","first_seen":"2026-08-28T13:23:48.60552Z","last_seen":"2026-08-28T13:28:47.542702Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/coin/0x2bC0D350eDfA83bE6E8f71F534315c6ca2aA95e5?_rsc=19zvn","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kaching.fun/","date":"2026-08-28T13:27:00.763Z","timestamp":1787923620763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /coin/0x2bC0D350eDfA83bE6E8f71F534315c6ca2aA95e5?_rsc=19zvn HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:27:00 GMT\r\ncontent-type: text/x-component\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":174,"size_decoded":1065,"mime_type":"text/x-component","magic":"ASCII text","md5":"28deb983cf8597306b5888890aced172","sha1":"e2de44cc9c85a1d96f0715ef091b8510fbf7f7fd","sha256":"31c4e4c4727361cb35db64b7ab855c395c4ec55bd9be3761304fee5d361873ab","sha512":"e1ddc92986a18b42e09fa5102def64e79e393431756091d7f66d01738e1eececd4d9b48c56078116797fe0ab68915a9d8ef57a5ec1dc6a3ff9fa8c8745fb9660","ssdeep":"","tlshash":"28c012371324ae66387e36d1006dc11ab50f558b115854b180c74a33676227305171f0","first_seen":"2026-08-28T13:23:48.653161Z","last_seen":"2026-08-28T13:28:47.544245Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/_next/static/chunks/7833-54c59218d02dbc08.js","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.652Z","timestamp":1787923619652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /_next/static/chunks/7833-54c59218d02dbc08.js HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"2ea4-19fd95fb6db\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11940,"size_decoded":5744,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11940), with no line terminators","md5":"4f11a3ca762ce37e2db5cc18e5b7ad0f","sha1":"67e1e0b104f8aca2a32d8ba88e6a3def89790d22","sha256":"86b6a2d5f35f758e0ea4458487557a820aa4ad399a4bc8d2c67a5eb933e15102","sha512":"ef454d82e2d1bc2339ad0dcc089ae1115e0b8d35e1712e0f37091c0492e077c6b4050c885c2621dd75f4c78f49c0d676bf7c17d90c7c2ed359833f20c202f804","ssdeep":"192:qOSAr9u4+QkEJBuWYb5Ezg965Jyk9OV4FfnBlH8Jy8HRx8BwHfQ5bW/MlwHh0p6K:zreQlBuZxitp8WE9KFpJ7","tlshash":"88321b95b2e074e1d3de50aac06b0719b2787a4c220f042cf6bd6caf57a84ed91d3f58","first_seen":"2026-08-28T13:23:48.593006Z","last_seen":"2026-08-28T13:28:47.545403Z","times_seen":2,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaching.fun/icon-512.png","fqdn":"kaching.fun","domain":"kaching.fun","tld":"fun"},"ip":{"addr":"64.130.47.150","port":443,"asn":20473,"as":"AS-VULTR","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kaching.fun/","date":"2026-08-28T13:26:59.820Z","timestamp":1787923619820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaching.fun","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 14:49:16 GMT","end":"Tue, 13 Oct 2026 14:49:15 GMT"},"fingerprint":{"sha1":"58:5C:83:97:12:75:43:54:A3:91:FB:4C:07:C1:C8:97:92:77:0A:8A","sha256":"8B:53:A6:6E:4B:4C:14:8A:6B:4F:F6:3C:C6:E4:DF:37:59:6D:DE:5B:EC:38:2E:0D:D0:7E:D9:7A:C7:2E:1D:10"}}},"request":{"raw":"GET /icon-512.png HTTP/1.1\r\nHost: kaching.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kaching.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 13:26:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 15690\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Thu, 06 Aug 2026 23:19:16 GMT\r\netag: W/\"3d4a-19fd95fb6e1\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint\r\nreporting-endpoints: csp-endpoint=\"https://kaching.fun/api/csp-report\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15690,"size_decoded":16570,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"e9f1a8a6b6f3bb91603d8f605a65ed5f","sha1":"9f05a07451b61efa25cc163de04ea159ab4538d5","sha256":"3dd3b2a6349301d7744f412c44d3b58a80e38f6ece099238edd656de47599522","sha512":"87c3f011b86244daed4b2072120f5aa3079f869b26551870c1d227076cb88acf2eb280d935744c56aea938408398a74989836be8eb811ad86598412a29eb1d88","ssdeep":"384:FhjnTii11pWFEwZANmgyXG2MupLMxR72BWkwY5:FtuWmV7XG2DpLSRA/","tlshash":"8e629e97cae0759e849b4540a353b9d5e1f72aeb25114fcd1bae003e8e0355abf31863","first_seen":"2026-08-28T13:23:48.586974Z","last_seen":"2026-08-28T13:28:47.546747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"kaching.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}