{"report_id":"45049cd7-57e5-48e6-ad35-c7851e24adbe","version":0,"status":"done","tags":[],"date":"2026-09-30T14:49:02Z","url":{"schema":"http","addr":"vkloe.com/","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":0,"asn":8075,"as":"Microsoft Corporation","country":"Japan","country_code":"JP"},"final":{"url":{"schema":"http","addr":"vkloe.com/#/welcome1","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"title":"IG Group pro","dom":{"size":11101,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7355)","md5":"fa0a547a210380eb723cf998054b47cc","sha1":"77496b72d1edd498c21b885a70d722fd1a0e1e5d","sha256":"3841f6cc0024e88ba6c1a8e9df7e43441dad87dd9a38d5b38e988029d211c392","sha512":"77d9e8e847578671a733026df1667e4662c3e62a800c54b9c6e81c69c8cbfb399271a9ea9077000374faf367c1da1ad4f66cb0789b74268f6961ce026b32ad37","ssdeep":"192:K70Fr/AytsNaE3KaJwQWo9LX7egJT4PQwPtQPICzV7FgbP08QrGsQfl2QuPLKIwV:FpoCCzVZmP3Js8l27PLMEtmSJITJ","tlshash":"b232f9a490230899f6174ad996e0291824f13887ff06a8c8f65e4396cfcbdc42a3745f","dom_hash":"domhash8ab246126cd967331f80da3feaae4e52","first_seen":"2026-09-30T14:49:09.191875Z","last_seen":"2026-09-30T14:49:09.191875Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"vkloe.com/","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":0,"asn":8075,"as":"Microsoft Corporation","country":"Japan","country_code":"JP"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-04T14:49:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"vkloe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"vkloe.com","ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"domain_registered":"2026-09-24","domain_rank":0,"first_seen":"2026-09-30T14:31:15.326791Z","last_seen":"2026-09-30T14:31:15.326791Z","alert_count":16,"request_count":17,"received_data":3800619,"sent_data":6978,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"vkloe.com/app/index.456c4e9b.js","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bf55290e4aa51b254cb189fc1b00717","sha1":"8937d9d31ee5e650a86a69716fb3995dee2d0171","sha256":"3a875ffe1ebcb972e432c8b19decc819c6de6957b45144294c8afd73f37fe49d","sha512":"a8916fa2b501680be64a0d26e005e326a91e067f46a1d3244ef1076844a86b0c79cc1c6101d9229a4c834889be04d9aae849af71a94932f50afdae8f7827eb98","ssdeep":"3072:wzQmBJk1CIr/O3f+KBfsiP0WPvB+2C8KKuymJDbMBzzxpRKSmvg07BTuUe6mv:w8PXr/O3f+KBfsiMWnWDwxjY7BTuUe3","tlshash":"827439597254243942c54069807f0a4bf736292e246ac45cb36cf4ffa8bdd8d32beb79","size":351748,"data":"","first_seen":"2026-09-30T14:49:09.194255Z","last_seen":"2026-09-30T14:49:09.194255Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"vkloe.com/","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"838437387051e5be0c6ee6f12c68e1ff","sha1":"332d5191ad114fab8bfef240d4ca9456193f99e7","sha256":"e13780879ab47b515f213d6c92bc19156fc8b0b1fd88332b6a6138fda2f8e059","sha512":"810ab8898bd8e0306a169b5a2b1fe2daa9489ba2e37ffe59e3c50dc479efb19c79788dc0ea2ec2c110faa569dd36e0a65c5fcbba5be8e2e9cabd5ad80959fcc8","ssdeep":"","tlshash":"3b01495a748790979f9e2169cf4e3195a0745023870ccc04fc4fdb12cf20da824abadb","size":723,"data":"","first_seen":"2026-09-08T18:27:38.753815Z","last_seen":"2026-09-30T14:49:09.207348Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"vkloe.com/app/main.b5cb8fdc.js","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"7da5aa310978886ddd6ab9f33eb21aa7","sha1":"f4040e6b6c75a91435cef33cae3d67ee9ee14449","sha256":"1c3b21fe20618f11e5af4e58eed2c4555d90623b159cf9515466a046d7ec8dd0","sha512":"842826f74ca8096dc2bdd216b5619ab64d0d0aee11782c249a7c992f568520d28902978b9b88f488ebfad62c5c1a4fa32bb2c39eee519eef9a8515115a15ad5e","ssdeep":"49152:gmI3lpcShXRKy26O2trMBrli6qmxWiAg4WCYpq7+TLwdwglZapzIE9:gp4jzRTLw1lZapsG","tlshash":"fab55dd9b652b46583b321a4106f0007b23a6d49e48dd4a4f6ecc9e56efe848527ff3c","size":2269692,"data":"","first_seen":"2026-09-30T14:49:09.209719Z","last_seen":"2026-09-30T14:49:09.209719Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"vkloe.com/#/","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"826b7936a849bf91e556cf64f091ba50","sha1":"9bb975e577a776b303a8fd0862af15c4445ed0cf","sha256":"b04b68e46455e35d84d79c1a98acae453457f8d757a42e4c25de45725f01287e","sha512":"66e3c6d2a545b9a6d22b9aeb0c15fa13f77d99b885073a700b8d24e92373995f678234aeb564a5e4d2e91f9e736d0459de1c7d3d3a1ef12ac5251486015fe853","ssdeep":"","tlshash":"5fe0c258a0bd0572006ab06c0c37148f382a880b021a1c82bdfc4bc45f79b7660706e1","size":299,"data":"","first_seen":"2023-11-18T08:17:35Z","last_seen":"2026-09-30T22:44:06.935315Z","times_seen":590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"vkloe.com/app/Welcome1.f81d934e.js","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"1993261846a63f42bb898e08f7957498","sha1":"6bb7d1628e2f6c6ba1571ed5620c5a354160923a","sha256":"afa11d13f6b5dd9c1e39ec091e4d20227717c4eb1d1bdae46d58a8307fe5d446","sha512":"74f1c17411d779f5ef5e180de3b33f8efa16664fec6c7f49f5e4ca495b8069dbd33a0c1ab498f8b7314964a996342446e472adbb8bd3e2f81e92d8a5b45d1954","ssdeep":"","tlshash":"fb51561aec23097cc2b704415d94044c904d7fb5d2aabec4eaec0e527ac7ca17796bbc","size":2973,"data":"","first_seen":"2026-09-30T14:49:09.204912Z","last_seen":"2026-09-30T14:49:09.204912Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"vkloe.com/#/welcome1","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"2373b50c5dd522d62b65b2a726ca796d","sha1":"e978f674e3db9f5b4d0803b394ebc2ab4f14543d","sha256":"89c958533903ddb281f541021e5dbbb342a86ea5fd77e6e3556c71f2e6239f5d","sha512":"695d0916a53bb423a3021157b1e49430962e1c1f94ca0cb9742bd0cacd764790d0e56ffb13e700b5c5c07c553528e641e22364b7afef4816380252735aeec705","ssdeep":"","tlshash":"22d0a7e4d0a32c101245a670b05f2ae4b026003a658419195d99f8982a67070c37ff58","size":216,"data":"","first_seen":"2025-06-18T03:23:21.187663Z","last_seen":"2026-09-30T14:49:09.211323Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"🚀 ~ file: api.js ~ line 5 ~ MODEproduction","filename":"http://vkloe.com/app/main.b5cb8fdc.js","line_number":33,"column_number":34812},{"level":"log","text":"store.tokenmap[type:null]","filename":"http://vkloe.com/app/main.b5cb8fdc.js","line_number":63,"column_number":3050},{"level":"log","text":"connectmap[actor:server1.conn0.watcher16.process7//obj23 class:WebSocket extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0 safeGetterValues:map[binaryType:map[enumerable:true getterPrototypeLevel:1 getterValue:blob writable:true] bufferedAmount:map[enumerable:true getterPrototypeLevel:1 getterValue:0 writable:true] extensions:map[enumerable:true getterPrototypeLevel:1 getterValue: writable:true] onclose:map[enumerable:true getterPrototypeLevel:1 getterValue:map[type:null] writable:true] onerror:map[enumerable:true getterPrototypeLevel:1 getterValue:map[type:null] writable:true] onmessage:map[enumerable:true getterPrototypeLevel:1 getterValue:map[type:null] writable:true] onopen:map[enumerable:true getterPrototypeLevel:1 getterValue:map[type:null] writable:true] protocol:map[enumerable:true getterPrototypeLevel:1 getterValue: writable:true] readyState:map[enumerable:true getterPrototypeLevel:1 getterValue:0 writable:true] url:map[enumerable:true getterPrototypeLevel:1 getterValue:ws://vkloe.com/ws writable:true]]] sealed:false type:object]","filename":"http://vkloe.com/app/main.b5cb8fdc.js","line_number":63,"column_number":1276},{"level":"log","text":"i18nObj.locale.value222222222en-US","filename":"http://vkloe.com/app/index.456c4e9b.js","line_number":9,"column_number":283525},{"level":"log","text":"paramsen","filename":"http://vkloe.com/app/index.456c4e9b.js","line_number":9,"column_number":283585},{"level":"log","text":"true","filename":"http://vkloe.com/app/index.456c4e9b.js","line_number":9,"column_number":283783},{"level":"log","text":"111 map[actor:server1.conn0.watcher16.process7//obj27 class:Object extensible:true frozen:false isError:false ownPropertyLength:85 preview:map[kind:Object ownProperties:map[addbankcard:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj28 class:Object extensible:true frozen:false isError:false ownPropertyLength:40 sealed:false type:object] writable:true] bankcardlist:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj29 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 sealed:false type:object] writable:true] bindPhonesPop:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj32 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] writable:true] bindemail:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj30 class:Object extensible:true frozen:false isError:false ownPropertyLength:11 sealed:false type:object] writable:true] bindmobile:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj31 class:Object extensible:true frozen:false isError:false ownPropertyLength:10 sealed:false type:object] writable:true] bussinessPwdPop:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj33 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 sealed:false type:object] writable:true] cashoutDetailPop:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj36 class:Object extensible:true frozen:false isError:false ownPropertyLength:25 sealed:false type:object] writable:true] cashoutbank:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj34 class:Object extensible:true frozen:false isError:false ownPropertyLength:30 sealed:false type:object] writable:true] cashoutbi:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj35 class:Object extensible:true frozen:false isError:false ownPropertyLength:32 sealed:false type:object] writable:true] cashouthistory:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj37 class:Object extensible:true frozen:false isError:false ownPropertyLength:18 sealed:false type:object] writable:true]] ownPropertiesLength:85] sealed:false type:object]","filename":"http://vkloe.com/app/index.456c4e9b.js","line_number":9,"column_number":283846},{"level":"log","text":"i18nObj.locale.valueen","filename":"http://vkloe.com/app/index.456c4e9b.js","line_number":9,"column_number":284031},{"level":"log","text":"store.langen","filename":"http://vkloe.com/app/index.456c4e9b.js","line_number":9,"column_number":284082},{"level":"log","text":"store.langen","filename":"http://vkloe.com/app/Welcome1.f81d934e.js","line_number":1,"column_number":782},{"level":"log","text":"targetmap[actor:server1.conn0.watcher16.process7//obj38 class:Proxy preview:map[kind:Object ownProperties:map[\u003chandler\u003e:map[value:map[actor:server1.conn0.watcher16.process7//obj40 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 sealed:false type:object]] \u003ctarget\u003e:map[value:map[actor:server1.conn0.watcher16.process7//obj39 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 sealed:false type:object]]] ownPropertiesLength:2] type:object]","filename":"http://vkloe.com/app/Welcome1.f81d934e.js","line_number":1,"column_number":891}]},"http":[{"url":{"schema":"http","addr":"vkloe.com/app/loginTop.c24871fa.png","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://vkloe.com/","date":"2026-09-30T14:48:34.142Z","timestamp":1790779714142,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /app/loginTop.c24871fa.png HTTP/1.1\r\nHost: vkloe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://vkloe.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 30 Sep 2026 14:48:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 589832\r\nLast-Modified: Thu, 11 Dec 2025 02:56:27 GMT\r\nConnection: keep-alive\r\nETag: \"693a32db-90008\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":589832,"size_decoded":590068,"mime_type":"image/png","magic":"PNG image data, 750 x 454, 8-bit/color RGBA, non-interlaced","md5":"39402317ee6969af63576c2752a3b942","sha1":"0c2162d8fa0b14996771e2ff44d46bf1b835c547","sha256":"c24871fa33533c17ad374a6e54c0656f4d7c930df7b8e335573952b852f28d0c","sha512":"601505bdbc8582c2fd1667da892b73a91fc2391503d3752866322963080a724d190b2fe0a14d543fb18dfecb43d8d450f08dcb461697bb832a55f5ab531ee8a2","ssdeep":"12288:EJd1GnypsDwukOcyw7Q45XKBUBj1Gx9BiJqrLsdgo3YKVTbA:uUfDSx7vXKeBs97aYKV3A","tlshash":"a7c42369cb74fc06a407b4e8f16716a6c66eb99914f81ce5e33cacce791af112c88941","first_seen":"2026-01-24T11:11:33.034406Z","last_seen":"2026-09-30T14:49:09.193298Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":1251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"vkloe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"vkloe.com/app/index.456c4e9b.js","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://vkloe.com/","date":"2026-09-30T14:48:31.094Z","timestamp":1790779711094,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /app/index.456c4e9b.js HTTP/1.1\r\nHost: vkloe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://vkloe.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 30 Sep 2026 14:48:31 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 09 Jun 2026 16:01:10 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a2838c6-55e04\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":351748,"size_decoded":106264,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44447)","md5":"9bf55290e4aa51b254cb189fc1b00717","sha1":"8937d9d31ee5e650a86a69716fb3995dee2d0171","sha256":"3a875ffe1ebcb972e432c8b19decc819c6de6957b45144294c8afd73f37fe49d","sha512":"a8916fa2b501680be64a0d26e005e326a91e067f46a1d3244ef1076844a86b0c79cc1c6101d9229a4c834889be04d9aae849af71a94932f50afdae8f7827eb98","ssdeep":"3072:wzQmBJk1CIr/O3f+KBfsiP0WPvB+2C8KKuymJDbMBzzxpRKSmvg07BTuUe6mv:w8PXr/O3f+KBfsiMWnWDwxjY7BTuUe3","tlshash":"827439597254243942c54069807f0a4bf736292e246ac45cb36cf4ffa8bdd8d32beb79","first_seen":"2026-09-30T14:49:09.194255Z","last_seen":"2026-09-30T14:49:09.194255Z","times_seen":1,"resource_available":true,"data":null}},"time_used":984,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":737,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"vkloe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"vkloe.com/app/index.17b9cab0.css","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://vkloe.com/","date":"2026-09-30T14:48:31.099Z","timestamp":1790779711099,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /app/index.17b9cab0.css HTTP/1.1\r\nHost: vkloe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://vkloe.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 30 Sep 2026 14:48:31 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 11 Dec 2025 02:56:27 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"693a32db-3275c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":206684,"size_decoded":61964,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5e4470b38cd64d554e5eb446946bdcf9","sha1":"627b70ea19a19d4b717bbdb9c0b3c9c3acd70a47","sha256":"17b9cab002eed5f2d19f307a6a75b9638bb762912629df41f59f308aed53c98a","sha512":"be80bcfa459bc4c6a4c884bef00a273cbfde9ec6b31293e38c435d78be10d10930ea9d29e64081f22837b74cb2101a255c5b7b61afa1c60ac0b57acc9a59e2e5","ssdeep":"1536:v3N5J+jOkiHcinubsfTwLCgV8jFNle3YU4lz1iCHa+Zb+VGViBgCD:vdnumTwLCjoe9CBgCD","tlshash":"d21483a5ea9491bc7f2bf2359787a6dcf23cf960dd01caa4f10552180ec3bf5162361a","first_seen":"2026-04-09T12:36:13.181641Z","last_seen":"2026-09-30T14:49:09.195201Z","times_seen":11,"resource_available":true,"data":null}},"time_used":1001,"timings":{"blocked":-1,"dns":0,"connect":250,"send":0,"wait":252,"receive":499,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"vkloe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"ws","addr":"ws://vkloe.com/ws","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"http://vkloe.com/","date":"2026-09-30T14:48:33.496Z","timestamp":1790779713496,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /ws HTTP/1.1\r\nHost: vkloe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-WebSocket-Version: 13\r\nOrigin: http://vkloe.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: kHbaCROC5Jemba3EcE/hTg==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Wed, 30 Sep 2026 14:48:33 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: SU/2KwYdOYWZ+ws9lHRXmCnxvgI=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":208,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-02T08:01:47.430463Z","times_seen":18767181,"resource_available":true,"data":null}},"time_used":497,"timings":{"blocked":0,"dns":0,"connect":249,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"vkloe.com/main/lang/getData","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://vkloe.com/","date":"2026-09-30T14:48:33.863Z","timestamp":1790779713863,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /main/lang/getData HTTP/1.1\r\nHost: vkloe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nlang: \r\nauth: 1790779713-32764-94576\r\nContent-Length: 20\r\nOrigin: http://vkloe.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://vkloe.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":20,"data":"{\"lang\":\"en\",\"id\":2}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 30 Sep 2026 14:48:33 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50304,"size_decoded":38319,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (50304), with no line terminators","md5":"56038c166dc12db718e7eb4f68ad3666","sha1":"60b12891c577886a86df7e69144a2ee43597546e","sha256":"075327a1fdabc1ca5b3a10749bf48e4141506126db0cd208448f35b22e4985df","sha512":"ce5b37f73890141754ebb8c99e9313ae184eeaae752d15afe3fa11b678078cdbac94f70fa38e9af0377da6de9b375f0c4de1ba58f78e431181cca988099f7968","ssdeep":"1536:qODRzzmcO90hple0oVsHQJLPQHicCqYVpvBA:TBClCcBrQqdpvBA","tlshash":"f33301be35be039a091610f7c3b97ef44b6128cb814584e4cefa856fa473854b165f91","first_seen":"2026-01-24T11:11:33.016977Z","last_seen":"2026-09-30T14:49:09.19675Z","times_seen":5,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"vkloe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"vkloe.com/","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-30T14:48:30.486Z","timestamp":1790779710486,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: vkloe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 30 Sep 2026 14:48:30 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3138,"size_decoded":1353,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"58cd718eb03355a1f66c1aa9ce571b82","sha1":"4ad7917aa61c2d322efdc732d7ed6be4e4abba71","sha256":"17699a72fe27e316d1b63d6ece12db86e3caf64119914ce51454679cd3fa739e","sha512":"c11ca668f5fdf263a9edbdd8c6e0d43aaba4d5c3d4b3a272cf54f78a39ea308110626df7de48ffdc61f0d07dd26bd49da4050ecd52d6e34daadd0833daf6a465","ssdeep":"","tlshash":"3a51319a68e3444fa61a9229afd9344957a18443870fcc60bede1725cf40f8c5cebadd","first_seen":"2026-09-30T14:49:09.198313Z","last_seen":"2026-09-30T14:49:09.198313Z","times_seen":1,"resource_available":true,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":5,"connect":246,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"vkloe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"vkloe.com/app/main.4031a4cb.css","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://vkloe.com/","date":"2026-09-30T14:48:31.097Z","timestamp":1790779711097,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /app/main.4031a4cb.css HTTP/1.1\r\nHost: vkloe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://vkloe.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 30 Sep 2026 14:48:31 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 05 Feb 2026 16:22:58 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6984c3e2-40f39\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":266041,"size_decoded":33466,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"37c54a21efa7413d9c77840e634e8427","sha1":"5ce718faf31d0adad3a7edffcba5b7811e759cdf","sha256":"4031a4cbd5b5efe79218cb3640b2081a81f1831f15429d5b8bce6e1039359d34","sha512":"8658bfd88f24698605d991edc5daadf957c29fd138ba3e3c79f5a8a14cc9c4026eefc558ec3275c852c3996f74e5501cb4a1101b102cf1bcc120f33e9391ee8a","ssdeep":"1536:ARKcbAHQ+eXTlEwD5IXdT62+FYJgRVQgBexFo:A1TDiT2PQg4Fo","tlshash":"37448491b948803d71b9fbde70923999fe01f443da520ae6f660fb5091c3af26634e4d","first_seen":"2026-09-30T14:49:09.199355Z","last_seen":"2026-09-30T14:49:09.199355Z","times_seen":1,"resource_available":true,"data":null}},"time_used":750,"timings":{"blocked":-1,"dns":0,"connect":249,"send":0,"wait":251,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"vkloe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"vkloe.com/main/config/init","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://vkloe.com/","date":"2026-09-30T14:48:33.597Z","timestamp":1790779713597,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /main/config/init HTTP/1.1\r\nHost: vkloe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nlang: \r\nauth: 1790779713-90797-155327\r\nContent-Length: 2\r\nOrigin: http://vkloe.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://vkloe.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 30 Sep 2026 14:48:33 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2712,"size_decoded":2299,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (2712), with no line terminators","md5":"ef94efc4a49f7278a69d144ba64658e2","sha1":"e5ae68f54a428188f96bc5058d4d3b1cc85618d4","sha256":"6bdc308894f7c92f15712978ae184546b7f5102f8bac4c77191bfbce22517c51","sha512":"79318e1f82059ccf0a77e88aafe1a0515d1831650a5771f1063b02c1911323269e02d044bcc4a98b0db314ea85551a1a6734e6f2c6bd12b67b2ee1692bc6cfa9","ssdeep":"","tlshash":"2f51294967c8d647b5f32d6079aa0dba0aa4872f1050e64cf3589dd39042668f4b6fca","first_seen":"2026-09-30T14:49:09.20047Z","last_seen":"2026-09-30T14:49:09.20047Z","times_seen":1,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"vkloe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"vkloe.com/app/Welcome1.2b07fc77.css","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://vkloe.com/","date":"2026-09-30T14:48:33.867Z","timestamp":1790779713867,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /app/Welcome1.2b07fc77.css HTTP/1.1\r\nHost: vkloe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://vkloe.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 30 Sep 2026 14:48:33 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 11 Dec 2025 02:56:27 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"693a32db-878\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2168,"size_decoded":865,"mime_type":"text/css","magic":"ASCII text, with very long lines (2167)","md5":"b520f02f45850c47883c964339aa0fc4","sha1":"b0ac7713ce3e704709fd75a9c2df59c25837be1d","sha256":"2b07fc77139af09947d04367eaafbb7fc5ce687f44847bad6e21282f4150582d","sha512":"e9406dc384e07e81c630dd9e23988c96a2f1a098a9c6b9c03bc208cec85ade9b7ec4f21a7fc2ab6979605baf068372d295c27e8509e9698d653b726e7497aebb","ssdeep":"","tlshash":"5d412551f430e83c972b25112a84c95c6c05f70bdcd2bad48e269398f1a61f73227dbe","first_seen":"2026-04-09T12:36:13.17952Z","last_seen":"2026-09-30T14:49:09.201382Z","times_seen":12,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"vkloe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"vkloe.com/img/logo.png?t=1765653204","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://vkloe.com/","date":"2026-09-30T14:48:34.130Z","timestamp":1790779714130,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/logo.png?t=1765653204 HTTP/1.1\r\nHost: vkloe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://vkloe.com/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 30 Sep 2026 14:48:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 17209\r\nLast-Modified: Sat, 13 Dec 2025 19:13:24 GMT\r\nConnection: keep-alive\r\nETag: \"693dbad4-4339\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17209,"size_decoded":17443,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 390x407, components 3","md5":"f40cd2e39d06a3baedcea1364c5adb4b","sha1":"0c1439aca59445423812932383dc33fab589aaf5","sha256":"497b386472c28b0c4d1824f4328c39a958b6e038d60e150823957d153e47814d","sha512":"69eb2d376f027d5728ac362f9cf705eff918a584f50aba133ad94e8edbf8acc77407e616c251defb1eb8f6535415631f0dc67708e916ee2a6f1ad1df76a63964","ssdeep":"384:Lpmb1gRXUbJnapQbbbbbbbbXeycWWM3j9mC0w5ynpwwghRUp:L4Jg6bJapsEWWM3hvYp","tlshash":"1b729f0a4713d0cad6d6c43925e30b23852879d12660171fb86747cbb4eefbc4b37656","first_seen":"2026-09-30T14:49:09.202141Z","last_seen":"2026-09-30T14:49:09.202141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"vkloe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vkloe.com/","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-30T14:48:27.566Z","timestamp":1790779707566,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: vkloe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-02T08:01:47.430463Z","times_seen":18767181,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"vkloe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"vkloe.com/app/main.b5cb8fdc.js","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://vkloe.com/","date":"2026-09-30T14:48:31.096Z","timestamp":1790779711096,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /app/main.b5cb8fdc.js HTTP/1.1\r\nHost: vkloe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://vkloe.com/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 30 Sep 2026 14:48:31 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 09 Jun 2026 16:01:10 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a2838c6-22a1fc\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2269692,"size_decoded":819330,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50642)","md5":"dcaf0dd0408c729c39a97f4d682c1f1d","sha1":"618bf716f6a5c4ec168f3596a182719ea7373897","sha256":"bcbfc669b6ff54a2d51755804fe1666efe1a22ba515bb677c4f151c0ccf6d4dc","sha512":"3352052284b22cbca7a899ac62e0b9da8b0911260bfd0db45d179b84f4eacf4220de80307ae08b00de20493b6795961a4a1d2e750a33960ba59d94eaff748593","ssdeep":"24576:gmI3lpcShbXRKy26O2tZlMe+yF16li6qmxQ2:gmI3lpcShXRKy26O2trMBrli6qmxd","tlshash":"f7255cd8b191b42583b765e4407f040bf23a1e59b40dc4a8f26dd8da3eb9849627bf7c","first_seen":"2026-09-30T14:49:09.203714Z","last_seen":"2026-09-30T14:49:09.203714Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2013,"timings":{"blocked":-1,"dns":0,"connect":251,"send":0,"wait":253,"receive":1509,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"vkloe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"vkloe.com/img/logo.png","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://vkloe.com/","date":"2026-09-30T14:48:33.702Z","timestamp":1790779713702,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: vkloe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://vkloe.com/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 30 Sep 2026 14:48:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 17209\r\nLast-Modified: Sat, 13 Dec 2025 19:13:24 GMT\r\nConnection: keep-alive\r\nETag: \"693dbad4-4339\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-02T08:01:47.430463Z","times_seen":18767181,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"vkloe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"vkloe.com/app/Welcome1.f81d934e.js","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://vkloe.com/","date":"2026-09-30T14:48:33.865Z","timestamp":1790779713865,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /app/Welcome1.f81d934e.js HTTP/1.1\r\nHost: vkloe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://vkloe.com/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 30 Sep 2026 14:48:33 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 09 Jun 2026 16:01:10 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a2838c6-b9d\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2973,"size_decoded":1595,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2972)","md5":"1993261846a63f42bb898e08f7957498","sha1":"6bb7d1628e2f6c6ba1571ed5620c5a354160923a","sha256":"afa11d13f6b5dd9c1e39ec091e4d20227717c4eb1d1bdae46d58a8307fe5d446","sha512":"74f1c17411d779f5ef5e180de3b33f8efa16664fec6c7f49f5e4ca495b8069dbd33a0c1ab498f8b7314964a996342446e472adbb8bd3e2f81e92d8a5b45d1954","ssdeep":"","tlshash":"fb51561aec23097cc2b704415d94044c904d7fb5d2aabec4eaec0e527ac7ca17796bbc","first_seen":"2026-09-30T14:49:09.204912Z","last_seen":"2026-09-30T14:49:09.204912Z","times_seen":1,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"vkloe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"vkloe.com/img/kefu3.svg","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://vkloe.com/","date":"2026-09-30T14:48:34.144Z","timestamp":1790779714144,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/kefu3.svg HTTP/1.1\r\nHost: vkloe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://vkloe.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 30 Sep 2026 14:48:34 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 785\r\nLast-Modified: Thu, 11 Dec 2025 02:56:28 GMT\r\nConnection: keep-alive\r\nETag: \"693a32dc-311\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":785,"size_decoded":1020,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c12f9f23b305dda312dc98899370f36b","sha1":"a138b1393095534b944dd7e334eed2f2896f3717","sha256":"8e98b0b75dfcd21a13299346d0f45dc63fe22dfb68142473b51a40c518a8fbaa","sha512":"8d569afac75e7198692375fcebb8e6dcac1eb837121cb3010586e829cb8eea5357f44339c46e089707d7f6ea67c1cef9fec4f52f692b4b8e39dff08dd9618334","ssdeep":"","tlshash":"750189e62244df3cb72203f4efa2b13d88a324227c68730449661e73970168e5cbfac5","first_seen":"2026-01-24T11:11:33.020404Z","last_seen":"2026-09-30T14:49:09.206271Z","times_seen":21,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"vkloe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"vkloe.com/img/lang/en.png","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://vkloe.com/","date":"2026-09-30T14:48:34.145Z","timestamp":1790779714145,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/lang/en.png HTTP/1.1\r\nHost: vkloe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://vkloe.com/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 30 Sep 2026 14:48:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 16244\r\nLast-Modified: Thu, 11 Dec 2025 02:56:28 GMT\r\nConnection: keep-alive\r\nETag: \"693a32dc-3f74\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16244,"size_decoded":16478,"mime_type":"image/png","magic":"PNG image data, 536 x 268, 8-bit/color RGB, non-interlaced","md5":"17357c7b432b75e40bc4a10559a75196","sha1":"b8eddf4acc668a393134b214b3d80a3ae97167fe","sha256":"ecd240deef610b1dd800b3a9202ac58c4a18fa5af7a66ab3b56668ee2d37325c","sha512":"4fe44267dfca775e09b7865cbcdcfe1024f1218d31572f370645be8cfb166061d1c262da5b9e56738ae9313869854179c36b97591a07a7fb55f1579835da32cc","ssdeep":"384:jUJtDHp0hooPbsO8x0WYgMR1yUdMa2txLDp:kJ0hjP0PUyGM/xLDp","tlshash":"4072c0fbada337f7f8f04dae5b0b02019352694363886303c392ad2946e77a30e54457","first_seen":"2025-02-01T04:29:39.408576Z","last_seen":"2026-09-30T14:49:09.206826Z","times_seen":38,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":255,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"vkloe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"vkloe.com/img/logo.png?t=1765653204","fqdn":"vkloe.com","domain":"vkloe.com","tld":"com"},"ip":{"addr":"4.190.162.64","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://vkloe.com/","date":"2026-09-30T14:48:34.146Z","timestamp":1790779714146,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/logo.png?t=1765653204 HTTP/1.1\r\nHost: vkloe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://vkloe.com/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 30 Sep 2026 14:48:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 17209\r\nLast-Modified: Sat, 13 Dec 2025 19:13:24 GMT\r\nConnection: keep-alive\r\nETag: \"693dbad4-4339\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17209,"size_decoded":17443,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 390x407, components 3","md5":"f40cd2e39d06a3baedcea1364c5adb4b","sha1":"0c1439aca59445423812932383dc33fab589aaf5","sha256":"497b386472c28b0c4d1824f4328c39a958b6e038d60e150823957d153e47814d","sha512":"69eb2d376f027d5728ac362f9cf705eff918a584f50aba133ad94e8edbf8acc77407e616c251defb1eb8f6535415631f0dc67708e916ee2a6f1ad1df76a63964","ssdeep":"384:Lpmb1gRXUbJnapQbbbbbbbbXeycWWM3j9mC0w5ynpwwghRUp:L4Jg6bJapsEWWM3hvYp","tlshash":"1b729f0a4713d0cad6d6c43925e30b23852879d12660171fb86747cbb4eefbc4b37656","first_seen":"2026-09-30T14:49:09.202141Z","last_seen":"2026-09-30T14:49:09.202141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":0,"dns":0,"connect":251,"send":0,"wait":249,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"vkloe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}