{"report_id":"4ac44455-eb68-4a84-a25f-621259360145","version":6,"status":"done","tags":[],"date":"2026-02-01T15:58:00Z","url":{"schema":"https","addr":"gemini-kk.com/","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gemini-kk.com/#/","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"title":"COIN-SPEED","dom":{"size":83762,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35021), with CRLF, LF line terminators","md5":"2c05996fca6e7a91486133d62aa8a0fd","sha1":"31491b3fcd2a4a437e4e8a9809fb10ac71f11cab","sha256":"f2e00fb4c1d0c6b87c784fbf78931728d336f5299224e2dee8deef58b4275718","sha512":"403313788171cd68b514ee36499f48236cf10081599e44df28697f0ed14cb480ce8186d21666b16981384ff3e1f5a55874336524562774f5153e6ca921b62816","ssdeep":"1536:mZGKjmoYChGmpigzUMrKrGDcOD8DSqmfV/8DSqmfjSJBQSJql4b9oYrArA5f6d0e:mZGKjmoYChGmpigzUMrK2VD8S87xop","tlshash":"f0835238b6433463057ba4e0b0d55e09b2a39b3bc2248654e7f8236ab7cbcf16d557e4","dom_hash":"domhash3536839e6ad1eaee58369482a21b1fce","first_seen":"2026-02-01T15:58:04.738285Z","last_seen":"2026-02-01T15:58:04.738285Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"gemini-kk.com/","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T15:58:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"huobicfg.s3.amazonaws.com","ip":{"addr":"52.219.150.97","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2005-08-18","domain_rank":5277579,"first_seen":"2021-11-22T07:40:25Z","last_seen":"2026-01-25T06:58:46.504606Z","alert_count":0,"request_count":13,"received_data":304525,"sent_data":5904,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"106.54.228.253","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-01-28T12:24:09.896795Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s3-symbol-logo.tradingview.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2010-03-20","domain_rank":110931,"first_seen":"2020-11-23T08:22:37Z","last_seen":"2026-01-29T16:42:55.678649Z","alert_count":0,"request_count":6,"received_data":8917,"sent_data":2715,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"gemini-kk.com","ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-30","domain_rank":0,"first_seen":"2026-02-01T01:34:53.467915Z","last_seen":"2026-02-01T01:34:53.467915Z","alert_count":159,"request_count":53,"received_data":5348799,"sent_data":23844,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":5,"received_data":16053,"sent_data":2334,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-tag.385d6a04.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3dce96c58665ed5f4f590bf26f82fbc9","sha1":"0f4655959138188ac02d2b195a52f36fa731195f","sha256":"aed726fd5621d5c294e2aa01efcaf6d7853d10bbb5bb6ce8e9f6020bce0f1a66","sha512":"9c85e6a4086e4efac5c617325e71ab6be0caec914bda5b97fc6ba4ec25f091740c69557a1f6296cd4512d560e06acb6b2dbe6a28d4d0268c90b79db0e5e05c8a","ssdeep":"","tlshash":"9c8143b43d6808f686ff4ac8a132aa0c492a255eed357ff2f5a161245cf1925704e73c","size":3999,"data":"","first_seen":"2026-02-01T01:34:59.511043Z","last_seen":"2026-02-01T15:58:04.751618Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-message.931b8f19.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a2ad3ef9ae026f9495e50350660d5e2e","sha1":"bdc6573e6faedacdfa0ab63de08584b72b6387ba","sha256":"e40abb4086e5f2a5e9fe1ac795e29c0e0b5956072d931bdc915175f5b50d52b5","sha512":"9bbdb702f2ed878143b3adc3a325182b99f72720bab115c2e5b3472759f6cb0c93803ccebdfdb7ce3719ba0ed3eadfc56126caea60286441b6049d397286a125","ssdeep":"","tlshash":"6d518716b408f47b1333086d4099c50662394bbd6bf5fbe0b1e6463940b6d0576cbf2c","size":3092,"data":"","first_seen":"2026-02-01T01:34:59.53033Z","last_seen":"2026-02-01T15:58:04.766123Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/index.ad69f4a6.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5b05ef54dba80a38f0119801ab58b7bd","sha1":"c7fcc4a7d582e56c2de7aaed58f0eba6360feb6d","sha256":"07004e8f2686b76dc070ba8cc92b14cb0fe907c1e19d7af02df027575e0f357f","sha512":"aad22f2a5b7f350f0d6ee0fcf1e7d7c75c4a5d814e707b2e5a6449b0ff0b23bce8126a6d08859351af5d5b6c24fae136c81a60cb24b93f7640ab69c0b01b1bff","ssdeep":"12288:wUTtlRbum8AA4OjpUumAYsWssJNBamsXANFneh9hYsWsspvGamsUPp0u:NbT8AA4OVUumAYsWssJvv2YsWsspu3d","tlshash":"a765f8c472917491c26269a0443f900be37efd68688c5469f75becf32db8a84552bf3e","size":1490969,"data":"","first_seen":"2026-02-01T01:34:59.560859Z","last_seen":"2026-02-01T15:58:04.83058Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/index.59abc7ea.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e94c9c88550c22ea158bbc97749d855","sha1":"039b27063748056d797b7d1de434adecaac2a7cb","sha256":"a4a179b13a6467d7333fc3cf3020f66cd40ce731ebf9764828fc2020a3ef3723","sha512":"bb82934de1dbdd24dab83625d7bc80fe3859fff54a3b1ff27cffa331659ba1dbf583895957921dea0480d4f1fd4d2dc7540edc7ca43f8382a19e8a1cfee3cfec","ssdeep":"49152:aF0Gndlfov3RNHkKMGOPov9xFC9OJTNIq7eLEQ2x0rxG4hAh6u5Urbm+42lZpb8H:aA","tlshash":"3f75b6c6d6fa580e8be4f055f9783d8e1c4059c0e818c3baac7d59f7e7ca244969236c","size":1591302,"data":"","first_seen":"2026-02-01T01:34:59.566256Z","last_seen":"2026-02-01T15:58:04.832542Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/#/","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7e98f35f23795ecb1a944bbefa9e40a7","sha1":"9f6826623e1d677abe50f4755523c8986d229bc3","sha256":"2f34fa8f7eea8ee00070214da3db09639f6d9b89111c8ca090fcf04954be6ed3","sha512":"7cf3f08fbd52f6a4f645721a24b3d1cabfe28d13473087fb0a98eb47438edcfe9fec95d4b4ee73b2f4199e8f896e8f161d1a10175c400ee88e1d2d030dfd17da","ssdeep":"","tlshash":"8ec08cc4b0c26e002602691415af28e4a024402671481b038ce4d8582e220b08233e9c","size":138,"data":"","first_seen":"2023-05-05T08:00:34Z","last_seen":"2026-08-08T04:33:16.400091Z","times_seen":501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/#/","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6db6ac15339e58de97d8d22aec944a2b","sha1":"3b0ba47693be14f9a46402a4beb1c28940c20156","sha256":"53168f253d02b1350bf6325f97d206ed8a5ba3f13eb4deec32d0055bbbaaf629","sha512":"bdbd0f0317bafa782eaf1e3debc4ebc60248d3784840c1c12cda5b3ce7b9cec50be3a487fb81e1486e1dba36243e9a33a44d0f5a9ed10bb267e7f61349c0e5a2","ssdeep":"","tlshash":"16c08cc4a0c26d002606691010af34e49024402670485b028cd4e8592e330b08233ea8","size":138,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-28T19:31:07.708818Z","times_seen":301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/#/","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1d0663d39d873f0eb6f219b0801c983c","sha1":"2da20244f55d5a15a7a0695b8fd3dcedad9f3cd3","sha256":"67602cc36eb6e60ad520d10b21efd241ce5e573e9935a6901302dcca11f36ac5","sha512":"77e9b49e9a35d6d792ce3cb1b552b1c44ab4ae81a5ad37b9149421dfee57450e0346d0cfed0b1c131f2d050e3f69153fe1bc1da2848fd0351dfba6f15fd1e8c2","ssdeep":"","tlshash":"02c08cc8a0cb6e001a02665015bf25e4a034402a70489b038c94d8482e230b0a233ea8","size":143,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-29T22:52:22.756318Z","times_seen":339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/pages-index-index.78c947f5.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ba1a0977782f1d279bde680bdbda64a","sha1":"41b1fbf39b12f6c66ca1865cacc0a6e1716b8a36","sha256":"f0c76539aeffc1668248134b3cc418099b7eae77e1e5360e5cbda1ec077c753a","sha512":"94bc0b7debb0f887b422b1ca33418b63937ba384ed2987c7392f94f973f689d363b18633a6c9068e4b5f18f3327db99a576c5d08e756904295815fc339316f3e","ssdeep":"1536:842bQssab6L828DSqmfsSJKzCxQwzU/9wOsKIx7zddDFp9t6MrzGrFWsIR3N2Nh3:h2bQssab6w28UXQwzU/9wOsKI1zddD1A","tlshash":"b2534a21f52cde3ef727a58d90268008269e9dafd218b5d0b1f45c7532e3d94b6ac738","size":65659,"data":"","first_seen":"2026-02-01T01:34:59.534224Z","last_seen":"2026-02-01T15:58:04.769581Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-input.abd354e6.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3893c96a4e83c34c54eeb148dd340e35","sha1":"5300138c3188f49a24597648a122c0e7571b0314","sha256":"cee4de1eadad1185486fdbd349e4552c8454e91ab8ff1af8b55a53718ea9bc19","sha512":"089e24da26f0cb7c581ea13b9d0b02d65f7f8a753aaca4a94313afb92816899f362dab44770f04e7393e57a66be7c7acbcbb5a9980ff20e6863eb7acfa57b4e4","ssdeep":"384:kBYK1ZS6vPu2ZYjPErOO3tx54dW4MZ4ZG41v5:kb1ZXPu2ZYjPN2tL4k4k4w41v5","tlshash":"0752d469340c9ea38d7b5e983084080b1519dfdec527b6d8f5f4b870839ad80aa54feb","size":13381,"data":"","first_seen":"2026-02-01T01:34:59.529306Z","last_seen":"2026-02-01T15:58:04.771921Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"437794e6e5838d19ff9019b684a23912","sha1":"015679bcf286fccdfdcc59157de255c052e75a69","sha256":"f7e92672b8004e2f40d7a0fb2d6ff907deeffacd4bf8bca53190d570a5ab35a5","sha512":"e6fa5cfdfd535613371d955b9b03b9a14c37e33a4b171c3d17f90adf917d0664961fb6ea9344bc27777eb9500083acab12a130551aa4277f55f219bdb17f0d8d","ssdeep":"","tlshash":"6be061c250a7295c0520816a355ec5131f6505739e818d513c8c6765cff9e4bc06d858","size":421,"data":"","first_seen":"2025-03-11T08:52:08.619783Z","last_seen":"2026-06-02T07:26:04.061512Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/pages-index-init.7f8e3dfa.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a00453e5b5798b317ee48db8fb42f4ac","sha1":"c54b4ad879e5c82912724ba20997e152c5e24ff5","sha256":"40c1fe8e465a2d6499fe806e2b93cc4e9907f0009f1870dd697451893bdb6f48","sha512":"169deb390082a033ccd6b2f9c1283fc82e1fa4d5f1a9b08f9ee8cd359e78aa78c255f0d9b03695151a7bc8b8d1a656f134df443c25673b329619c232aea437a0","ssdeep":"","tlshash":"a331770a27af95366fb30406b5fc1c8807b51b841c72f9cc7e6a5c0959f1d85184d330","size":1495,"data":"","first_seen":"2026-02-01T01:34:59.512074Z","last_seen":"2026-02-01T15:58:04.811575Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-drawer.3021b33b.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"05af2223237fac3e8ade6f2dab3f829e","sha1":"b18e87f89fe004330814adff920348799f4466ee","sha256":"cd07061168259e943dab6f277e88a78aa94eac72643ece147ddb8fa1c2a70eb2","sha512":"37de158acdedad5fb0dcab866f548a65ef1bb6f445d716b4584f00dc2132060322ce45262d522c5fbe5fb7b566770a71034aa68e58845c57c73c3a2b9c5f7a3e","ssdeep":"96:/or7rd/K5RUtxr6SDKAfSSLw2D5eW8T6gQllDuNPCmuW6vKHXBuSs+8jg:2dMmdDLw7zPCQ6vK3KTjg","tlshash":"d9c1c79c746e2373a6b719a5c072480d533d1f4d9978b6c1f2d2293a36f6d1848d8bbc","size":5670,"data":"","first_seen":"2026-02-01T01:34:59.501519Z","last_seen":"2026-02-01T15:58:04.792406Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-button.a2f75480.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c6c89e4d1a257bb092dc95b3c3cd59d2","sha1":"ab5785aaf50e1677d625360c63e43972b3c1f3dd","sha256":"a5a95106dc853641c116ad9e0d51add8db7c259db571fee2d0bf982414a4ae04","sha512":"cf3cf08c6b475debda5e965ec14c2519c2f9f790bf21b1537fe45da9ce2e499e09922147446745087ae8d746eace2287e6cba6652c712e6a9465f44e32b3e7a5","ssdeep":"96:B3LEHUD//UusxzD9831y6MX6eA6d5+Vhc8/YFs2GXUx8TCZ8NAwNGgwkBZ1jM:B7Em74Iq6CdEApYUSTCUAwNG8BZ1jM","tlshash":"45a108203078cdbb2ecbefdc306429162125db6ed53475e1fea86076138b8e590ccb28","size":4762,"data":"","first_seen":"2026-02-01T01:34:59.557611Z","last_seen":"2026-02-01T15:58:04.783616Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/index.a73ddf1a.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e08da938cc74189a064c5aa0f9918e22","sha1":"44d2a97cf4bac2943e8d3026d6e5c0432e7625d7","sha256":"f5d859f2f417a7d16999a12d6b86694f216d0b236ef53e78646c5977a45dc8b3","sha512":"e85ba4a6cab38db1997f0da0537e390f936a5e6bcedb696bce0c0f857b89b41b98f031d0600b5acd54c89bc4bfc80736b1b2316115639f8bf5daf7e7c9da2012","ssdeep":"96:ugfASdun69B7Y3GvJJPi/awkVuaVdaOgW9hX+8kOevD:R4Cw69B83GyawHaVdaITQD","tlshash":"6cb1b54d7b18063dba4b0698a099710131981dff27615db4e3f71c3aa2f2fc49ad87d5","size":5401,"data":"","first_seen":"2026-02-01T01:34:59.550817Z","last_seen":"2026-02-01T15:58:04.81535Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/#/","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-08T18:37:59.82624Z","times_seen":740275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/#/","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-08T14:49:17.811923Z","times_seen":7189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/#/","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1ca49f0e439cf34669924908e59b2897","sha1":"efea6ef6bd12f3ded99d07b429c6af21c23ed826","sha256":"9f9ee6011e8f88513c2761906180f430478c9d9835d4e74a211cafd3c79b955e","sha512":"f5dfd73abfc4c47819a1c10e68b974d2253a67fd9fb113e510809ee5ea650d5dd1f003dedcd6f88235e4e5b696f28c5e2f18526e794579f3b9f5a1d7db17bb21","ssdeep":"","tlshash":"fec08cc4b0c22d102602a91010af24e49024406770481b168c94dc882e224b09237e98","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-08T04:33:16.329825Z","times_seen":597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-app.b89b333c.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e50d0ccc3cf934b3422b4deca7adbe25","sha1":"2a3b9c7ba0c5f84052ca75e7885f1bb56bb25d9e","sha256":"8ffe9ba46d3ef9aaf0ba0f7a86d80c6ffa26ac7f6e5d1978914b8ed551739141","sha512":"a5ddf1fe53f81b9c84428e7c93b06075a10a69c6456c7540850d9f4088301d660791c90a3673d9b14c41360d5254109cbff4e2fb10db1b2a87b5cf1fba2701f5","ssdeep":"","tlshash":"b551943c32eab27d623749de60665b4c144bb75d4a326bf6d13d78703080c28629fb68","size":2644,"data":"","first_seen":"2026-02-01T01:34:59.548863Z","last_seen":"2026-02-01T15:58:04.743897Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-cell.48e797eb.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a288dbcc9c8781f57fa55718a2405e01","sha1":"8e15ae3badd138a79bab1cde3b1fa59509de9641","sha256":"d8243d115a17129e17c99480ca49fd1a64b8406d07fdaf6c3b2737f433aca464","sha512":"c077f780ae6eb523ea93151e8176ad37ac985624f95f681010c4c082cfee91796ab15c3b884fc864bfc54b801748d5e7c6be7cd6eea27efd9d74bf0939d32584","ssdeep":"192:LRlXjmAWbm/z6nN1A6A+ySUu/Q1ntrzbWhVx:LR16tbmbQyWY1trnSD","tlshash":"30f1a638343dd93faddb49d9e0616a0960089e2eeb347a94f2f3543651aac84615cf7c","size":7953,"data":"","first_seen":"2026-02-01T01:34:59.513352Z","last_seen":"2026-02-01T15:58:04.800802Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/activity.dc54e5cf.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ad4e0c1e54d832b3fe6557ef4458c536","sha1":"3701eb7610b0a39c1fba691b3f4ec4c96bc9121d","sha256":"60abe83da09f22bdd811fab918416cc034ba0b6b4d361adbc95cb61256d7102a","sha512":"a9515b495c6a1d77484ff1a00b756aaffff68ccc545bc10ebb152e1fd4b0014cc8701d78436c923a11b0e46bcf8b8e5f855c58a6cddec0882a3c1ab5234176dd","ssdeep":"","tlshash":"cce0206e3110b7b385064197805d5943931becd00e1a46a05f0d134c75b11a986bd46b","size":319,"data":"","first_seen":"2026-02-01T01:34:59.535221Z","last_seen":"2026-02-01T15:58:04.808786Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-divider.19a3b98c.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"60eac59d05f9e5dd1c4a791e42027f77","sha1":"f28b412ec9b797ea5899888431584308eaff10b8","sha256":"e99d12c6c196ae0d1275cc3fde41dd891a13e091c3c9a46c5f4ff19ca5e8d69e","sha512":"999fbec073338fc53b7a042f0758a37fa5d376c8539b537b8ccf6f781f74e147e34c0e36b1a599239104653a3f7618ca6b35c5d1fe332619c2ba3142c6f5f7a6","ssdeep":"","tlshash":"db41572834249e37e6ef498d70000849618bef7dd67472e9f5f29d739043848f658b5c","size":2097,"data":"","first_seen":"2026-02-01T01:34:59.503142Z","last_seen":"2026-02-01T15:58:04.762619Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-col.a8ce9d45.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b4efd62a7ad2fc9bd2f90ff0661fd2e6","sha1":"263f7f280b13ccfde7bd85c84f9200447c19caf5","sha256":"6e63e6612fe21cdfba5db5e8efe3723a262bad87a34fcb285de1b15ebbcd4459","sha512":"4e13fe3e2580026105fd3c141585efcf4451b30ff8ba15cf4cc45d529ef686fc52af1cc1b5167d0355ee1bfde20291ea84e5b5ecbf6920c02ebd046443323123","ssdeep":"","tlshash":"305174797518a1f6e69708cc04a0250884455b0cebb1f6ffb3e71e32226704876efb9e","size":2752,"data":"","first_seen":"2026-02-01T01:34:59.519665Z","last_seen":"2026-02-01T15:58:04.760347Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/#/","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7c2bd803183c9eb6ccac9978d49fa819","sha1":"224d7d7beedd5b01f1cb107495ab1f2e5bf078d2","sha256":"7117536f358653602a49d94190c1371644f9cbfe936b0ad9dcedf867aec56daf","sha512":"718f3f630dd7beed360640387b56117d94ab54b03104530983d343c4ab6b02f51a4e1b399cd9532870bd4923c3f3247da65edb90185a7ee926e4b38e89f090f8","ssdeep":"","tlshash":"cec02bc5b0c33d002602a81021bf39e490344027704c1b43ccd4ec483e230f08233edc","size":135,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-08-08T04:33:16.409473Z","times_seen":397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/#/","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a15c447f08875de3100ed8997d5994ea","sha1":"b77d1c8bbbbcc5d0ac532e1362d796508029192f","sha256":"edd33609ab9f781e02fcf2c8e5ecd9f1e9b7bfdcbb576f01e9b2e78747b47e47","sha512":"55050de7b026795f86b16a8f6a67428555e9d05c394d87abf47b1bde43968be03e16569d97d1f38f6d37a1cc8b9bb5349cabe354e3def7dcbd5187640e3ac7ce","ssdeep":"","tlshash":"b8c02bc8b0c33d002602645010bf39e490344027718c1b43ccd4ec883e230f09233edc","size":139,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-29T22:52:22.757317Z","times_seen":919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/#/","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a75ab93c4db9073c13fb419ef7c2c46a","sha1":"856072c405dfaa708e23622cad35d78372e23f07","sha256":"da656c2f3889dfb9eaeecb26f30c2b5ff695b991d6c5fbdd8f8978fc0ed2907e","sha512":"0dd74743f8822d86d634c325d0f3f6148960d7c9ba0cc668fde3cfe6475b7a0ffa5ab23cc7f229fd0313dcf0d1d427c60df140423c158354408f96f86faba2bb","ssdeep":"","tlshash":"cec08cc4a0e62e601a02692418af28e8a0248026b45cab02add4d8482ee34f48233e98","size":149,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-08T14:49:17.800866Z","times_seen":1133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-segtab.e21db500.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"44ecc28a6b21ba82cfb9edd5bc846d88","sha1":"e46082f804c9e3b2c136b86ec92e8831c271203a","sha256":"85e818c7ebac8b2e8e172aeb9e257d60126b83f59061fef79d2404fe59e3c6ec","sha512":"aa2b12df8ebce0c771f9ee9b7cba4eefbbbb57ccb6f9323ce86d23d3ce128358cdd5933b3d1841592474c5a0d2502b0a2adc62750e4a72f3b30a170187a51558","ssdeep":"96:iIoNZgoBReFcJdnGW00Lggb2iS4FCx/PLt+pixOwCCdcbILz63Zuq9:ONZVwFc3HzGs4/PL2OyI6Juq9","tlshash":"4ca1e97c722ca83d36bb49a9b03251815219c79fd739e0d272e8047552d2dc45addf2d","size":4742,"data":"","first_seen":"2026-02-01T01:34:59.533119Z","last_seen":"2026-02-01T15:58:04.79015Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/metal/platinum.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:50.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /metal/platinum.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:57:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000, s-maxage=3600\r\ncontent-encoding: br\r\netag: \"92dd9ff794607df5b95201d5226f2b91\"\r\nlast-modified: Wed, 08 Sep 2021 09:03:06 GMT\r\ncdn-cachedat: 08/09/2025 14:34:07\r\nx-amz-id-2: uK+cfjHQGM0+lZhSayt9zKUWHoFSNffMKlCAgLBybXAx7/kKPI/TafXhjYt8FatAkoAy2FstFWo=\r\nx-amz-request-id: 3PC15TQ9XDMPV4F9\r\nx-amz-meta-hash: 92dd9ff794607df5b95201d5226f2b91\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: bc246d990f890a9aae1df5e70a6b1119\r\ncdn-cache: REVALIDATED\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":565,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (565), with no line terminators","md5":"92dd9ff794607df5b95201d5226f2b91","sha1":"1f67d07a5d1fa71a898607113ae33757208d2d1e","sha256":"eda2b4908ca3208213241ac9c7d268be0dd6080735ff7af571cce81a1f1de643","sha512":"702c8896b04f7731ae361e95c9f59915539192503fd85365c5a9ac98aca3ec3c166800c2e10f2cf7b0429481a94c07bb0c5cc5b60fe250648cd05509fa980c42","ssdeep":"","tlshash":"90f0a2662aea538eb01565d157605453290538f9b1dee0c4fe040f41850dde7f8945f5","first_seen":"2023-07-06T22:24:58Z","last_seen":"2026-07-28T06:18:25.099399Z","times_seen":46,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":39,"connect":6,"send":0,"wait":136,"receive":0,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-app.b89b333c.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:48.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-app.b89b333c.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/assets/pages-index-index.78c947f5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-a54\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ycna3%2FCJreJTORfce4yIu0DvhEFzM77ccfsjo%2F2sUeXpbye2v8yqHVKLgOUJklp7a8XQ4fpj%2Btl0KPnjzLf%2FBki8H5DLBRux69BUxdk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a58858834c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2644,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2000)","md5":"e50d0ccc3cf934b3422b4deca7adbe25","sha1":"2a3b9c7ba0c5f84052ca75e7885f1bb56bb25d9e","sha256":"8ffe9ba46d3ef9aaf0ba0f7a86d80c6ffa26ac7f6e5d1978914b8ed551739141","sha512":"a5ddf1fe53f81b9c84428e7c93b06075a10a69c6456c7540850d9f4088301d660791c90a3673d9b14c41360d5254109cbff4e2fb10db1b2a87b5cf1fba2701f5","ssdeep":"","tlshash":"b551943c32eab27d623749de60665b4c144bb75d4a326bf6d13d78703080c28629fb68","first_seen":"2026-02-01T01:34:59.548863Z","last_seen":"2026-02-01T15:58:04.743897Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/index.59abc7ea.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:42.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/index.59abc7ea.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-184806\"\r\nexpires: Mon, 02 Feb 2026 03:57:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qqk0kFmKgXZHaGc5cYeH2g%2FE5s7mB6OBjoJZySa5Vr%2FIHAPH1cHRl%2FY%2Bb1Hf890xJE%2BWRD3aBVGupmBRG8S5UIj7MntEepM8QmEWsK8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a564f8b44c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1591302,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60832)","md5":"734ace0229237cc986aaa8970066d95f","sha1":"c398d7297c388b37bddc4fdcdb0ebcaa98b89289","sha256":"cdb3966328ed7e2cd9c2a85c4f5a46682e0f5576ecaa7bc73e67aa24dbf63d77","sha512":"9c39e1e6ffce3a95046d5ee668694f6c707a92b4fafb6c20d20059ebce908770bb9539a0f02cf120959b9a6d650b3a9c99bf75c43fa46f4832d978f2f0772953","ssdeep":"24576:aF0Gndlfov3RNHkKMGOPov9xFC9OJTNIqkV4rdDI4EEQ2x0rxG4hAh6u5Urbm+4g:aF0Gndlfov3RNHkKMGOPov9xFC9OJTNi","tlshash":"80255fc5d9fa540e9be4f046e9783e9e2c4056c0ed18c37aac7c59f3d7ca1849aa136c","first_seen":"2026-02-01T01:34:59.554923Z","last_seen":"2026-02-01T15:58:04.746496Z","times_seen":2,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=SF+Pro+Text:wght@400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:42.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=SF+Pro+Text:wght@400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T18:43:01.051599Z","times_seen":17783985,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":115,"dns":1,"connect":20,"send":0,"wait":35,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:42.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 01 Feb 2026 15:57:43 GMT\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1189,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"70f6f56be7ff7ace3e1f9979aef5db75","sha1":"3247717a7c2321db34762076775f37f8adc1e6e1","sha256":"ce53fd6ea2c59a3106afb0cf49f27a403675291622352c323c04ab5cc642a321","sha512":"b2020165c0c7b5c32c97d6b62bac6666d9b7c895ab837dca8272334ac3cdf164030e1780f80461b602690075ada4f3e836a4bea1505532b3bd6f281cc110392b","ssdeep":"","tlshash":"2d219791087bd114ab871cc523ce6d37ee0e9251b810e5786bfe0c98adabc654362b2d","first_seen":"2025-09-17T08:48:26.697017Z","last_seen":"2026-08-08T17:00:08.950331Z","times_seen":6573,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":117,"dns":1,"connect":20,"send":0,"wait":43,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-tag.385d6a04.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-tag.385d6a04.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemini-kk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-f9f\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LhcVclnS6gOmh%2ByD3IRoNwsRfXxfa%2FHVNuSnxTrBj9rVOln8ki2S8AEdxiunA6c7Yw07%2B6iX4%2B%2Fs2SdTi3osCzfcZSd071qqE50DrKI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a56a8a1c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3999,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3998)","md5":"3dce96c58665ed5f4f590bf26f82fbc9","sha1":"0f4655959138188ac02d2b195a52f36fa731195f","sha256":"aed726fd5621d5c294e2aa01efcaf6d7853d10bbb5bb6ce8e9f6020bce0f1a66","sha512":"9c85e6a4086e4efac5c617325e71ab6be0caec914bda5b97fc6ba4ec25f091740c69557a1f6296cd4512d560e06acb6b2dbe6a28d4d0268c90b79db0e5e05c8a","ssdeep":"","tlshash":"9c8143b43d6808f686ff4ac8a132aa0c492a255eed357ff2f5a161245cf1925704e73c","first_seen":"2026-02-01T01:34:59.511043Z","last_seen":"2026-02-01T15:58:04.751618Z","times_seen":2,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/eur.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.150.97","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:50.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/eur.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: RQ5ohW9mYzXp+yBv/40tO+O3QNYJrNfIT9/6DqXrWccPA51Tz7Jyfks8RqAe43SM+UO7DgffQ2U=\r\nx-amz-request-id: E5WQ7P1MT7FQ2DVS\r\nDate: Sun, 01 Feb 2026 15:57:51 GMT\r\nLast-Modified: Tue, 14 Sep 2021 04:24:15 GMT\r\nETag: \"405ec97168e1a38f80d10f4a751ea5ab\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1788\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1788,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"405ec97168e1a38f80d10f4a751ea5ab","sha1":"56b903e9b97871cb7635524fc0f88b19571b12c8","sha256":"63f1cec581881e32616fed46b2ef3d464b13630c7ac1ceadbf400e5c9c5b706d","sha512":"46b83ce697ae012b5eb9f8839694d26c8d006a4b5cbd55d66dff10015aa1791caef65398dcd82efe59867fda7d976bf62357454b6b9d41a93c255e444a501478","ssdeep":"","tlshash":"1d31316bbf699dd1ac0587c91d10277c19a4949ef810063c95477bd0e823fccbf4a9da","first_seen":"2025-05-30T22:52:19.457338Z","last_seen":"2026-07-28T06:18:25.096045Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1655,"timings":{"blocked":652,"dns":0,"connect":319,"send":0,"wait":357,"receive":0,"ssl":325},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/doge.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.150.97","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:50.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/doge.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: grPOzirtlD81r1bf1cD/XKJi14o7n9KKu+b8dcchevck20P0Ori05p19EDi1bUpNBrhf5K27wtU=\r\nx-amz-request-id: MMRF07VNVEF4JJHD\r\nDate: Sun, 01 Feb 2026 15:57:52 GMT\r\nLast-Modified: Thu, 14 Nov 2024 02:02:53 GMT\r\nETag: \"85a9905c5ded19678ea5c2a0e3eb5b92\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 95699\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":95699,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"85a9905c5ded19678ea5c2a0e3eb5b92","sha1":"758fd685e61ce28ddab9bcebfc60f62f1f2c150f","sha256":"83785fe3ab9c29b35a4884d93864038593ac03e6f605a5cb6bf9f7567e338abb","sha512":"a88cb74309d3fca02ce1fc32c81f0d78c387a4936c0f2924c603037201d14b26a5fa715723f40d01868d2a41361e26e2a2abb315e32332970ce15a186d8043dd","ssdeep":"1536:LEpYE8EXjfWGPQcIhSWQnGQBMDPla2zoW1:f","tlshash":"da9394d5b7e5e2e8f005e3fc872a98f53a632cfa3922c95893e52c15e95102d489dcd3","first_seen":"2024-12-15T14:02:10.456974Z","last_seen":"2026-07-28T06:18:25.096885Z","times_seen":334,"resource_available":false,"data":null}},"time_used":1784,"timings":{"blocked":933,"dns":0,"connect":0,"send":0,"wait":292,"receive":559,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/static/images/tabBar/home-on.png","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /static/images/tabBar/home-on.png HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 605\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\netag: \"67155ce4-25d\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tynCxu5YJhQVj02D8fNCPy6lzuzX26VaZ9UXJWuG9GteFRsuF9Yx3SsK2XJ%2F0zqfMM4M6qogiKUyhWPWOJSQPp5WAmPu5OxOOItLwQQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c72a56a09ef4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":605,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"def19a0db24fe00a493b990c113b892e","sha1":"d61ec86b8f6d09170f76746cd9412b432d40fed5","sha256":"d279492339d20af5561086bafb7acf11427bf1b4a3a755a599bbb71192085056","sha512":"c7a7db8906c507fce94504fdfb2b14d4a470d62de1106e2ee0c4cdf1a78705d02177dd068e59ae354e92c1cc3a7779b9de3201a3107e8652cdb4547b5dac73aa","ssdeep":"","tlshash":"a1f047e668c1ff5eeff478a366a171f348b42537f3014f6750058111525c734697954b","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-28T06:18:25.086114Z","times_seen":296,"resource_available":false,"data":null}},"time_used":1960,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1960,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/static/images/tabBar/my.png","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /static/images/tabBar/my.png HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 664\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\netag: \"67155ce4-298\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eqqur2hg3mtBh430ovOx1UmOO9KDrD9Sidw69Sb4VCtT3S0vv%2F6fec5OZkUx4FTgQkzDAHC04gHiuKjWua0hILKjsvCmF8ST8QWs9CI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c72a56a19f84c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":664,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"5fa0e8c8be776e0ad69b41eb29387ab1","sha1":"6a7dee6c2139d15e5fbe2f7a6ebabee07354710d","sha256":"eebdc7fce5c2de4f58a49db1cd4bce63341b14bcae199d396eb1ab5a2bea3807","sha512":"3e5432b58d865b134fe84a068a9ba7e01ba3dd19240f60e45d46bf5f3d727ece1a6e05350e467b63efebf0236304366bc4980d3dff4287354f03828c86fb18d9","ssdeep":"","tlshash":"3e0183e7bb204566c20c9a881801a8a9863790154ecbad49c564c1b82c2240656ff7d2","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-28T06:18:25.08379Z","times_seen":295,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":365,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ksm.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.150.97","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:50.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ksm.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: nz2I30S0aqmjztGv2VdhCSugnkMuI7eY2NoDOhGZKeH4uH5Y/W75C96PxDqkCb78e3rhi9Lw31o=\r\nx-amz-request-id: MMR3FTQHKQYDA8C0\r\nDate: Sun, 01 Feb 2026 15:57:52 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:56:32 GMT\r\nETag: \"87de3ee0fdebb621dabd4796598f6888\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 4490\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4490,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"87de3ee0fdebb621dabd4796598f6888","sha1":"f8dd822f8f7b75fdb2b18ff10266deab9c397dcd","sha256":"64613bc4f18ed4f69a72222af826cb68733ad5ffd5990a2223ab689da62f1f56","sha512":"601584512d6d26a0488c0430ce4461fd9516fbffd408b04beaed4cdbfa123fdddb741f28b2a32694a1bc65d99013208e71b6b0a3e364a7f671f8a6b0b0b23bbf","ssdeep":"96:QRazcf7/YySPnq0HGo0GJc5pr/LEDwjc0RfEtcy/lB4X+:QYzI/Yfnqi8zEkjciMcy0X+","tlshash":"ee918818a32ecb7cf509f6dd4717c874e68bbe917812c48e5bab0847d2a142d48b78c3","first_seen":"2023-05-25T08:09:47Z","last_seen":"2026-07-28T06:18:25.074069Z","times_seen":227,"resource_available":false,"data":null}},"time_used":1341,"timings":{"blocked":988,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-col.a8ce9d45.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-col.a8ce9d45.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemini-kk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-ac0\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIe1zG49i4aLBAN9O06HvutbgFtwd3A58ldWjK2kwYw2esNSBZI2DLwjYLsjp1PK3iq5Rmc0Zp%2BEO%2BtZMQV5XXHWG8dYu56PRZU4FyY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a56a9a214c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2752,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2751)","md5":"b4efd62a7ad2fc9bd2f90ff0661fd2e6","sha1":"263f7f280b13ccfde7bd85c84f9200447c19caf5","sha256":"6e63e6612fe21cdfba5db5e8efe3723a262bad87a34fcb285de1b15ebbcd4459","sha512":"4e13fe3e2580026105fd3c141585efcf4451b30ff8ba15cf4cc45d529ef686fc52af1cc1b5167d0355ee1bfde20291ea84e5b5ecbf6920c02ebd046443323123","ssdeep":"","tlshash":"305174797518a1f6e69708cc04a0250884455b0cebb1f6ffb3e71e32226704876efb9e","first_seen":"2026-02-01T01:34:59.519665Z","last_seen":"2026-02-01T15:58:04.760347Z","times_seen":2,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-divider.19a3b98c.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:48.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-divider.19a3b98c.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/assets/pages-index-index.78c947f5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-831\"\r\nexpires: Mon, 02 Feb 2026 03:57:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 2\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=snjvwOFDrClu%2F9fV5xvxR2XNE7L%2FSuBWi%2B4c3MW%2BA%2B%2B%2Ff7D%2BgtzgnBmxoo0VVH8A1P2cw%2BMFOrXd%2FLXxu%2FcBQL5j6ePrwbR1SO0JmYU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a58878934c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2097,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2096)","md5":"60eac59d05f9e5dd1c4a791e42027f77","sha1":"f28b412ec9b797ea5899888431584308eaff10b8","sha256":"e99d12c6c196ae0d1275cc3fde41dd891a13e091c3c9a46c5f4ff19ca5e8d69e","sha512":"999fbec073338fc53b7a042f0758a37fa5d376c8539b537b8ccf6f781f74e147e34c0e36b1a599239104653a3f7618ca6b35c5d1fe332619c2ba3142c6f5f7a6","ssdeep":"","tlshash":"db41572834249e37e6ef498d70000849618bef7dd67472e9f5f29d739043848f658b5c","first_seen":"2026-02-01T01:34:59.503142Z","last_seen":"2026-02-01T15:58:04.762619Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ltc.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.150.97","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:50.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ltc.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: d9CIw76HyO5iE1Zk14AazNJlUL6LNw6DGu4wZrwS3RD0FV9VooRryt5f3x1jpZTe2YRc4PvjP1A=\r\nx-amz-request-id: MMR3MNMTYY92HV63\r\nDate: Sun, 01 Feb 2026 15:57:52 GMT\r\nLast-Modified: Tue, 27 Jul 2021 09:04:10 GMT\r\nETag: \"b772bf1738628de70f1b9304c3d669ff\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 479\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":479,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b772bf1738628de70f1b9304c3d669ff","sha1":"db4b8dbd617a80bc2b7efcafc1b93064eb9a08bf","sha256":"9afa8bc92c0b1ed443e1b75a05bbac5399cc3a6c95863765b0d68959faf089ed","sha512":"2c54b078c370b434455c91a7a61454bc4cbc3ab611793db68dc733087aa507a280108d53977a1a47983a7161b52cea75d097c6f6bee8c529774fde42ad2c7516","ssdeep":"","tlshash":"f8f02e7df6441b35980ed634663e2cb430352fa2f245805a21dd1a547a574ea5945363","first_seen":"2023-05-25T08:09:47Z","last_seen":"2026-07-28T06:18:25.077711Z","times_seen":524,"resource_available":false,"data":null}},"time_used":1291,"timings":{"blocked":988,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-divider.19a3b98c.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-divider.19a3b98c.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemini-kk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-831\"\r\nexpires: Mon, 02 Feb 2026 03:57:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lbseBhNudzB4Q2KanlrYNtxG%2Fzcg9L0Yp7vgx5XudBZa%2FopFz1qs3QBQefHN9ziO1YizsxGBMiWidFId0wOz1Jr5xchZHN11o79Rr1Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a56a8a1b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2097,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2096)","md5":"60eac59d05f9e5dd1c4a791e42027f77","sha1":"f28b412ec9b797ea5899888431584308eaff10b8","sha256":"e99d12c6c196ae0d1275cc3fde41dd891a13e091c3c9a46c5f4ff19ca5e8d69e","sha512":"999fbec073338fc53b7a042f0758a37fa5d376c8539b537b8ccf6f781f74e147e34c0e36b1a599239104653a3f7618ca6b35c5d1fe332619c2ba3142c6f5f7a6","ssdeep":"","tlshash":"db41572834249e37e6ef498d70000849618bef7dd67472e9f5f29d739043848f658b5c","first_seen":"2026-02-01T01:34:59.503142Z","last_seen":"2026-02-01T15:58:04.762619Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1795,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-message.931b8f19.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:48.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-message.931b8f19.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/assets/pages-index-index.78c947f5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-c14\"\r\nexpires: Mon, 02 Feb 2026 03:57:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2BwrsEGO9mL2zobVqNc5zdhsdv2A7dUq90Ne15HdTnBNLdhd1Utcge6vcNnvzfuoYCA2EcDBd582%2Fj11QmixmlGXyqlB%2FLcbkbr%2Bg8w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a58868904c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3092,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3091)","md5":"a2ad3ef9ae026f9495e50350660d5e2e","sha1":"bdc6573e6faedacdfa0ab63de08584b72b6387ba","sha256":"e40abb4086e5f2a5e9fe1ac795e29c0e0b5956072d931bdc915175f5b50d52b5","sha512":"9bbdb702f2ed878143b3adc3a325182b99f72720bab115c2e5b3472759f6cb0c93803ccebdfdb7ce3719ba0ed3eadfc56126caea60286441b6049d397286a125","ssdeep":"","tlshash":"6d518716b408f47b1333086d4099c50662394bbd6bf5fbe0b1e6463940b6d0576cbf2c","first_seen":"2026-02-01T01:34:59.53033Z","last_seen":"2026-02-01T15:58:04.766123Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/gbp.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.150.97","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:50.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/gbp.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Z4HR+T+XaZuYY2o8j50+Z9ocHbkEXDLblr31glSQv1UyExMLce3/EFxk34yr+vjtOdGeJF7D8Mc=\r\nx-amz-request-id: E5WJXYJEBPEZJ8TJ\r\nDate: Sun, 01 Feb 2026 15:57:51 GMT\r\nLast-Modified: Tue, 14 Sep 2021 04:24:41 GMT\r\nETag: \"6ba5026843bc853df894d043f311b6e1\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1498\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1498,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ba5026843bc853df894d043f311b6e1","sha1":"2e230f465b81b8f361b9ed66d9d497d19318c11d","sha256":"efbf4e47ec53a5944bb2e2d7838deae25829bf18ad5a395c76f2d2f6fddfccb4","sha512":"929140ad4bd536ce9cbf64ee5c3dd2ef36a9e89d63f66fb2536aec697741b6e281568d04fb80c1e37ecfe74b37ea46d3fbd670f335a4174a780a226c0ea06218","ssdeep":"","tlshash":"3e311e3eff294cea881a0a8358107f781e9990f5f830022d65073b84e143ddd3b8c6a8","first_seen":"2025-05-30T22:52:19.458343Z","last_seen":"2026-07-28T06:18:25.080982Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1657,"timings":{"blocked":662,"dns":15,"connect":286,"send":0,"wait":335,"receive":1,"ssl":355},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/pages-index-index.78c947f5.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/pages-index-index.78c947f5.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemini-kk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-1007b\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R7mnjLh8QNLG0ZMk6TU6Z0PHwiJ%2BB84g7a%2FxXPCJFWAPyjHOA1PQZ3PhY4%2BS1LIImwDCz7OHqju1FNJvL937IJhVo%2FMCSebRi3GT5OM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a56a8a144c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65659,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (51551)","md5":"5ba1a0977782f1d279bde680bdbda64a","sha1":"41b1fbf39b12f6c66ca1865cacc0a6e1716b8a36","sha256":"f0c76539aeffc1668248134b3cc418099b7eae77e1e5360e5cbda1ec077c753a","sha512":"94bc0b7debb0f887b422b1ca33418b63937ba384ed2987c7392f94f973f689d363b18633a6c9068e4b5f18f3327db99a576c5d08e756904295815fc339316f3e","ssdeep":"1536:842bQssab6L828DSqmfsSJKzCxQwzU/9wOsKIx7zddDFp9t6MrzGrFWsIR3N2Nh3:h2bQssab6w28UXQwzU/9wOsKI1zddD1A","tlshash":"b2534a21f52cde3ef727a58d90268008269e9dafd218b5d0b1f45c7532e3d94b6ac738","first_seen":"2026-02-01T01:34:59.534224Z","last_seen":"2026-02-01T15:58:04.769581Z","times_seen":2,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-message.931b8f19.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-message.931b8f19.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemini-kk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-c14\"\r\nexpires: Mon, 02 Feb 2026 03:57:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kl4IXxU90%2F1Pxu7HTmMYqTRs9DPWlWFW9cDLKwc7Okd8%2FSqTMm8q97dB%2F6%2FMz0gbFXzgzXq0s1t8B6q28TR764PDzd1TGpCI0rrSKIY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a56a9a1f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3092,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3091)","md5":"a2ad3ef9ae026f9495e50350660d5e2e","sha1":"bdc6573e6faedacdfa0ab63de08584b72b6387ba","sha256":"e40abb4086e5f2a5e9fe1ac795e29c0e0b5956072d931bdc915175f5b50d52b5","sha512":"9bbdb702f2ed878143b3adc3a325182b99f72720bab115c2e5b3472759f6cb0c93803ccebdfdb7ce3719ba0ed3eadfc56126caea60286441b6049d397286a125","ssdeep":"","tlshash":"6d518716b408f47b1333086d4099c50662394bbd6bf5fbe0b1e6463940b6d0576cbf2c","first_seen":"2026-02-01T01:34:59.53033Z","last_seen":"2026-02-01T15:58:04.766123Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-input.abd354e6.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:48.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-input.abd354e6.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/assets/pages-index-index.78c947f5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-3445\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5qyCu7jJtpDTX%2FzXoeVBV9boDRu0mph7g0zyy0PSSt3FCLJ77%2BRTQImPhxriDOAHP35RMYFN2cHjBQAM52kBzEJkL7gMIe%2FB8HakGM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a58878924c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13381,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13228)","md5":"3893c96a4e83c34c54eeb148dd340e35","sha1":"5300138c3188f49a24597648a122c0e7571b0314","sha256":"cee4de1eadad1185486fdbd349e4552c8454e91ab8ff1af8b55a53718ea9bc19","sha512":"089e24da26f0cb7c581ea13b9d0b02d65f7f8a753aaca4a94313afb92816899f362dab44770f04e7393e57a66be7c7acbcbb5a9980ff20e6863eb7acfa57b4e4","ssdeep":"384:kBYK1ZS6vPu2ZYjPErOO3tx54dW4MZ4ZG41v5:kb1ZXPu2ZYjPN2tL4k4k4w41v5","tlshash":"0752d469340c9ea38d7b5e983084080b1519dfdec527b6d8f5f4b870839ad80aa54feb","first_seen":"2026-02-01T01:34:59.529306Z","last_seen":"2026-02-01T15:58:04.771921Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/link.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.150.97","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:50.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/link.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: utsR8aPr0yMUom/2i7Iir697Po9DiiGWdVT/pUrt/ZljZuvK+ryE017dfLPBR49A7bAdfadRGgA=\r\nx-amz-request-id: MMR44YXQWG6BYY1D\r\nDate: Sun, 01 Feb 2026 15:57:52 GMT\r\nLast-Modified: Tue, 27 Jul 2021 09:01:11 GMT\r\nETag: \"3cfdbc8f3e987bcf7862cba68cb369cc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 681\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":681,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3cfdbc8f3e987bcf7862cba68cb369cc","sha1":"56d54bea22c25a2d43176ca784f3b0e8561e9be0","sha256":"d1abda5be2eca6511387d52e50be65c444b1e39cd5451d9fb601ad28424e3761","sha512":"23e769c4ea1911a0f0d77a0932d769c2a9e3ddfc4f71451b904338962b3310be4f3a36964fa4c31ffc98aa19f06e3e8a82226a640a1f4f222cecd5080ab0e4c7","ssdeep":"","tlshash":"fe01f47b75886af1fc0ee335621808773eb13f9af567c00109d12e40720b811871d29a","first_seen":"2023-06-07T09:48:40Z","last_seen":"2026-07-28T06:18:25.071602Z","times_seen":420,"resource_available":false,"data":null}},"time_used":1598,"timings":{"blocked":1290,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/index.3f4f1a61.css","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:42.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/index.3f4f1a61.css HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-5c9e7\"\r\nexpires: Mon, 02 Feb 2026 03:57:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dYruMQkyhBDtHsLMMPsD33Rgpc4LbxKzGHre%2FD8lxgiJWehGV%2FNps%2FspjlN7cafpMzFUjK3UF9qMMoL8wHrEfztACVKk1RaMNeHjLUk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a56508b54c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":379367,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bddf258f97b33b8b1ef1b9dde33d5140","sha1":"0889713fac40b5d90b6bae176b82a07073972288","sha256":"672205cfffeee945d0d0579e49312142a2e7b1be088bcb83530df0d8e950005e","sha512":"9f13389fcd0b4e02195910b786b0f779cb71e21aaf5bd115f8f723341f22db0cd18c7ae9d26f88ca37913267efa4e26bed55f996f3e632d479f020a0bd190a94","ssdeep":"3072:PDnvQTikh+GyK1ZDTasX+5w9szMZ9JVFr26L:7n3lGDd+WxZ9JP","tlshash":"db84b49e6e8411bcbf37d222d7a6a7ecb13cf560ee41c59af14325288ec37f60512598","first_seen":"2024-12-26T21:19:03.904115Z","last_seen":"2026-07-24T05:21:13.353202Z","times_seen":212,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/static/images/tabBar/asset.png","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /static/images/tabBar/asset.png HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 694\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\netag: \"67155ce4-2b6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=66Lmels4N%2FYFS4RPwI8BvKWtkxqH0DyNMr57UCAl5NZqG28mXd1%2F1DUOvlIz5JPMSrPeErvu%2BRTo0u%2B2VoQcS%2F5N1Pe0KhyqlOA7n68%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c72a56a19f64c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":694,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"c060f809b640e3037ff4b3acb5a80907","sha1":"f568594ca7b19224a846bd594f1c5e9e1002ba44","sha256":"9da1253a1c8a7153cb6568e7d3082dbb432e5a7662de8ee47507b0d7be9e32c6","sha512":"5ef880d1a924ce1474e6c1f68e7723ef4472fae08dbb4ed25561568f0af03cf89753648664315ecda8da9a173dcfe5dacf027f6f77b1ce810eae2b390f9bfa31","ssdeep":"","tlshash":"a90144dabcc2a0708aba3ca9595f7875ca92805811229f854b4998263a40b9cdd461c9","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-28T06:18:25.075284Z","times_seen":267,"resource_available":false,"data":null}},"time_used":3007,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3003,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"106.54.228.253","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:46.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 15:57:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Sun, 01 Feb 2026 16:27:47 GMT\r\ncache-control: max-age=1800\r\nset-cookie: __uni__uid=rBEQg2l/d/tpubhCA9ULAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-08T08:44:49.359785Z","times_seen":20168,"resource_available":false,"data":null}},"time_used":2431,"timings":{"blocked":754,"dns":1,"connect":308,"send":0,"wait":923,"receive":0,"ssl":443},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-col.a8ce9d45.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:48.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-col.a8ce9d45.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/assets/pages-index-index.78c947f5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-ac0\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2Bxr6pcPwSdd%2BGoQnf1qdt270SpZKBf82oXh367J2%2Bkf6XadmZYGaTtaK9b0JknrT%2BEjT7RGyyZlWNv30Ef%2FivzGzrB1sj1q2nuF8Lg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a58878944c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2752,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2751)","md5":"b4efd62a7ad2fc9bd2f90ff0661fd2e6","sha1":"263f7f280b13ccfde7bd85c84f9200447c19caf5","sha256":"6e63e6612fe21cdfba5db5e8efe3723a262bad87a34fcb285de1b15ebbcd4459","sha512":"4e13fe3e2580026105fd3c141585efcf4451b30ff8ba15cf4cc45d529ef686fc52af1cc1b5167d0355ee1bfde20291ea84e5b5ecbf6920c02ebd046443323123","ssdeep":"","tlshash":"305174797518a1f6e69708cc04a0250884455b0cebb1f6ffb3e71e32226704876efb9e","first_seen":"2026-02-01T01:34:59.519665Z","last_seen":"2026-02-01T15:58:04.760347Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/v1/api/exchange/getSymbolConfig","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:48.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /v1/api/exchange/getSymbolConfig HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8;\r\nlanguage: en\r\nauthorize: \r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:49 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3d%2B7INRO8YQ40hR2EbIXK7xZe27ztMsjd89dIV7GYUITCmCn6ld%2FhEd3LWD4WDjVJLWw%2BrAdDs1SuNu93d23YKTvKFNSUvpjeypD%2Bas%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9c72a58bc9274c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9644,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5cb8dc3912ecd15fb0031e8c90f59b70","sha1":"86959684b071ebde33efa94e8944ae9ac1b40480","sha256":"141efc4343e705635b1c712cb0b9b36bfb4e36c342a12e835a1bd56fc78c95eb","sha512":"d27237e2973deeb569913dac23662e83914e1982fa04447a1f3b7823a093446d1740e06e0d1874b59f480b779961950231e0bc56e6f030cf3b3eae826c278500","ssdeep":"192:85O5Rclu92G1KU6x6736qYdcKMJgIdJrjuIMbcrc7xZySpaBSrg6HUdulQ4QZ:ZRcg92UKUG67qJcKigIdhju3ac7rZBrC","tlshash":"5b12b96a62350bafd131a1c21ce37fd8486e75a31cc90a51b5fe9e4d8710deb6027327","first_seen":"2026-02-01T15:58:04.77873Z","last_seen":"2026-02-01T15:58:04.77873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":974,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":974,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/country/AU.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:50.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /country/AU.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:57:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000, s-maxage=3600\r\ncontent-encoding: br\r\netag: \"ffaa89557725b51eb58753956db0a148\"\r\nlast-modified: Wed, 08 Sep 2021 09:02:00 GMT\r\ncdn-cachedat: 08/14/2025 09:10:09\r\nx-amz-id-2: VnGsoUE0W8UruLhgidUerBNu5i656x6ZzropXFeXd1nxndDxNhubg8o4G3QdoGgggClShX1UmvA=\r\nx-amz-request-id: MZCB34BASKSX7D2K\r\nx-amz-meta-hash: ffaa89557725b51eb58753956db0a148\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 5b69fe0fb38503e3cc2f5d98dc0fe8ee\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":937,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (937), with no line terminators","md5":"ffaa89557725b51eb58753956db0a148","sha1":"af4c43200c5a85ad2d525412bf83e55e90138bd3","sha256":"27c815d48181359be416f858593d35e363b546bf3f237e0458cccf01fefbdf30","sha512":"012df6822dab500101b05a391d897c6523bcc4e1f7f65ffce67f4ff4a87b520380c8c4b2cd0b5f2f6ce718fdc7422facea451a03893b5f611af0b68a10275c10","ssdeep":"","tlshash":"95115b85b154d25bcd42ca2dd2381230a25e61cab1ed66c8ace3b35d291fad9fdd40bc","first_seen":"2023-05-01T20:32:00Z","last_seen":"2026-08-08T04:33:54.991805Z","times_seen":2738,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":44,"connect":7,"send":0,"wait":2,"receive":0,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-button.a2f75480.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:48.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-button.a2f75480.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/assets/pages-index-index.78c947f5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-129a\"\r\nexpires: Mon, 02 Feb 2026 03:57:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z2znBHFfRGkkAtro%2BWxo5tnM4X6ZnCjdMR0qmJ%2BLApA8NWCibInhI%2BrT%2F0rL1ZmrbBl3SLxjrJOOz7Gv7HYXnWoW%2FKajS60VCG%2BN5v4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a58858824c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4761)","md5":"c6c89e4d1a257bb092dc95b3c3cd59d2","sha1":"ab5785aaf50e1677d625360c63e43972b3c1f3dd","sha256":"a5a95106dc853641c116ad9e0d51add8db7c259db571fee2d0bf982414a4ae04","sha512":"cf3cf08c6b475debda5e965ec14c2519c2f9f790bf21b1537fe45da9ce2e499e09922147446745087ae8d746eace2287e6cba6652c712e6a9465f44e32b3e7a5","ssdeep":"96:B3LEHUD//UusxzD9831y6MX6eA6d5+Vhc8/YFs2GXUx8TCZ8NAwNGgwkBZ1jM:B7Em74Iq6CdEApYUSTCUAwNG8BZ1jM","tlshash":"45a108203078cdbb2ecbefdc306429162125db6ed53475e1fea86076138b8e590ccb28","first_seen":"2026-02-01T01:34:59.557611Z","last_seen":"2026-02-01T15:58:04.783616Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Readex+Pro:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:42.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Readex+Pro:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 01 Feb 2026 15:57:43 GMT\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6714,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"b58a2b65d23adae432d6aede5f3a6bab","sha1":"194dfc8b1d63db1339585ff5c3a14cc6d8aa7d6d","sha256":"f47b4165cc9585373f8c546eefedc2df4e0ad1541865992c8dab1c2f7af09eff","sha512":"ff040a0aa6695698ce24e62c97f3905df671c9438646d083504cd94441c2e705e3ca213ddcb10cba401d79e7422c3a53b5bdcc869b1d26218bd05df5809e3cb6","ssdeep":"96:HOEawZA0Zl8DCK9cH0fOEa6dOEa0KJc+uDOEayMNsOXawZA0Zl8DCK9cH0fOXa6M:AfCl0obbdGfCl0v0beDfCl0S9b7i","tlshash":"86d1add5481f55487b471dc262cd7e23ad4da1642080d4689ffe278bacdfd22376839c","first_seen":"2025-09-19T20:01:38.034194Z","last_seen":"2026-07-12T23:28:19.785073Z","times_seen":139,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":93,"dns":0,"connect":7,"send":0,"wait":30,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-button.ddf396b1.css","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-button.ddf396b1.css HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"67155ce4-12d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AkaQNsFkiI104ZOZBK6RUmoh2mtNAtp%2B%2FARrrfZISz1bvKlPvCpkkjhUheuDxjjDdFs5m%2FZic7YWTP0TQq4GXHloHMPaYfIiplJ0rY8%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9c72a56a4a044c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":301,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0e9f614f6c6215d066c9fdcfa7645776","sha1":"2728ef74e26aa186fa6e3f87bf11cedaa46b42de","sha256":"0c7a24f6669840fcb16ab71c6c1b55d1c1f72dbc269ed86d96e21c5fabd21b55","sha512":"c0e93448c7e9834b782b41a6bdc249c9c5eb342c2111bdea2a1833fb39f3c93653442f0eed89f45a058633b1ecf2509e5bf1226ee4c21d771375eea8c8af080d","ssdeep":"","tlshash":"33e0c2f1398e408cb537e3c2e058c015aed02513b9542b291ee402c10e0209bb424f49","first_seen":"2023-04-30T07:16:13Z","last_seen":"2026-07-24T05:21:13.344602Z","times_seen":249,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/v1/api/config/platformConfig","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /v1/api/config/platformConfig HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8;\r\nlanguage: en-US\r\nauthorize: \r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:44 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cCqVxIu8inEeEiY%2FR69RKiyqJk0b0%2FnWES3WSAUhYpQLOwRFA8asFQJGuU6gTapbu86WFS4ut%2F5XAoIM9Ei2vouBySlgNIShkjEO02c%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9c72a56d4a8b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3236,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2a2df37e984a59a211e8f79629d6a95d","sha1":"e83efd305fc1d75fc4e6553fed3a04ec690c45d6","sha256":"ac940e1503cecd622d7157bd309e3f054c4c8b4824d14dea29593d6a10e03348","sha512":"36d279ade297189b587c2e75617acb193a15b71b661a32f2ed2b25dd2874369518a8d5366f89d83622b9afaa6dc59fe8480b62485faf9ef6781f42a7108f3027","ssdeep":"","tlshash":"d961fe8d2336a9b4c5f011c798e628281f78a9d76949f50fc2abec603ef74917628207","first_seen":"2026-02-01T15:58:04.788141Z","last_seen":"2026-02-01T15:58:04.788141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-segtab.e21db500.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:48.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-segtab.e21db500.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/assets/pages-index-index.78c947f5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-1286\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sWAHVOayxZEHImnbT1ql%2FM%2B4gYT%2BMwyRb0a2lpIv3vjy3%2FDhsddpke6iMg9IilC2DGrg3s3trs0ga1D%2FfaNHuwqdsjmAAE8yujkbmuo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a588487a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4742,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"44ecc28a6b21ba82cfb9edd5bc846d88","sha1":"e46082f804c9e3b2c136b86ec92e8831c271203a","sha256":"85e818c7ebac8b2e8e172aeb9e257d60126b83f59061fef79d2404fe59e3c6ec","sha512":"aa2b12df8ebce0c771f9ee9b7cba4eefbbbb57ccb6f9323ce86d23d3ce128358cdd5933b3d1841592474c5a0d2502b0a2adc62750e4a72f3b30a170187a51558","ssdeep":"96:iIoNZgoBReFcJdnGW00Lggb2iS4FCx/PLt+pixOwCCdcbILz63Zuq9:ONZVwFc3HzGs4/PL2OyI6Juq9","tlshash":"4ca1e97c722ca83d36bb49a9b03251815219c79fd739e0d272e8047552d2dc45addf2d","first_seen":"2026-02-01T01:34:59.533119Z","last_seen":"2026-02-01T15:58:04.79015Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-drawer.3021b33b.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:48.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-drawer.3021b33b.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/assets/pages-index-index.78c947f5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-1626\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cM4Yr42TNA20luACTCvPDys06K8163%2FUVupV%2FrVR%2BIPjxPScBtiCalN5I4eFiI%2Fv2lJikUYaBKh4Oa1NJKNgXDpFSRGqzoZF8xi5LaE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a588487c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5670,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5669)","md5":"05af2223237fac3e8ade6f2dab3f829e","sha1":"b18e87f89fe004330814adff920348799f4466ee","sha256":"cd07061168259e943dab6f277e88a78aa94eac72643ece147ddb8fa1c2a70eb2","sha512":"37de158acdedad5fb0dcab866f548a65ef1bb6f445d716b4584f00dc2132060322ce45262d522c5fbe5fb7b566770a71034aa68e58845c57c73c3a2b9c5f7a3e","ssdeep":"96:/or7rd/K5RUtxr6SDKAfSSLw2D5eW8T6gQllDuNPCmuW6vKHXBuSs+8jg:2dMmdDLw7zPCQ6vK3KTjg","tlshash":"d9c1c79c746e2373a6b719a5c072480d533d1f4d9978b6c1f2d2293a36f6d1848d8bbc","first_seen":"2026-02-01T01:34:59.501519Z","last_seen":"2026-02-01T15:58:04.792406Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/atm.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.150.97","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:50.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/atm.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: zIcBUx/W8h1sMsyvOTfGHldhXtYJfmz1WjO2y2z/eoZ80eDTzy6q3W9QN21SLVPovesgeuEvrhA=\r\nx-amz-request-id: MMRFX10Y7YEEK9FA\r\nDate: Sun, 01 Feb 2026 15:57:52 GMT\r\nLast-Modified: Tue, 11 Mar 2025 07:26:30 GMT\r\nETag: \"0b936890c4705172570095a38a532012\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 57878\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":57878,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0b936890c4705172570095a38a532012","sha1":"f4daecdba818f6d7187901b7accd73d188057f15","sha256":"95038af84cf03b7daf573dbb74b594844a428d986aafaa2293b271cf4ffc7363","sha512":"03922b324bcd0a7a2a59b62cd834a9c4cee456065dcc0e1852243ea1574935e6bb31ada1b6611ccb97a562b8e3814f2d512f28ccea8a89117abf869f1960e45c","ssdeep":"1536:kAYRg7ma+y/kpJZ55TNGApnIPhb3t0TJqg+zYa9Li9NdKvg:BSa+y/IT5TNGAA2TggCY39Nr","tlshash":"5843f1f74dac9c5e083595c08aeceaa5ca80ec06135dd920adca9f5c0d50dcaf43a5bf","first_seen":"2025-03-11T08:52:08.557956Z","last_seen":"2026-07-28T06:18:25.069958Z","times_seen":183,"resource_available":false,"data":null}},"time_used":1555,"timings":{"blocked":975,"dns":0,"connect":0,"send":0,"wait":299,"receive":281,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T15:57:37.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:57:42 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nbEB3tJUPkPPbDJpDNHwGAJxZk%2B%2FzXl53kdCezhoBl2%2FjKl4QU7D4uBxz3ZoyMIbRV8hNn2r4icDpO0seRs5b6XLOem8hJnjdur89aY%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c72a547bad323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":879,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"b125f41f3778c48054f33d356acc261a","sha1":"4e5605f4dd84cf922ae0bbb9ad5aa55901180c2c","sha256":"ede40d00ca3d7e96ea8ad842957717abb36c755e66fdd9bd69e9c7309eed7cb4","sha512":"4e518aa8d4bc5b3eb96f0aadd2fa5043163b419df4859256a318e4a45427b9d2c7038dc65b8a7ae04269979531dc27eb1f965bf1b2bf0d8b7dd4a91b191b4969","ssdeep":"","tlshash":"3711468140f249481310415969e9f82b3fa28a638d4acd64389d1274cfdcbcec85fc78","first_seen":"2026-02-01T01:34:59.510069Z","last_seen":"2026-02-01T15:58:04.795098Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4565,"timings":{"blocked":26,"dns":10,"connect":1,"send":0,"wait":4509,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-divider.ae80818d.css","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-divider.ae80818d.css HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"67155ce4-126\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HxDk9UKXe8SDAgrqHZKw1CMJcJk5l6FPSRM0ktKBXkTh0%2BOuVK%2BXagKzZ%2FGnQbfqg4G6eVIVmchXQVjrmRPxPQylUWdK1eTwDejz%2Bus%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9c72a56a5a094c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":294,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8d5218fa0d0b598c901298d49d0bb7b6","sha1":"dc9abb6cd595ef14c1dd00407edde93f6f7a8722","sha256":"f2042ed3d049cc8d35a41c12645db66124983fe52c89dca298ebb2ccb97456e9","sha512":"8d87f2a5635ec3ace430cc1071ce68922b45c22e76ea87cc47272d5cf224a19058760a8a701bbbebeeccc80c29a6426777e4678c81c2cd7914f87740227c9cd8","ssdeep":"","tlshash":"3be0e6490ed545510da38d07e6cc0de44c288bb35d62098b23a23986c1d15bc626d667","first_seen":"2023-04-30T07:16:13Z","last_seen":"2026-07-05T02:08:10.000173Z","times_seen":138,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/index.f9b62eb6.css","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/index.f9b62eb6.css HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-a88\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v4Ex6objjHqjL%2F4bV12dwxM9r6oj%2Bxy39GVXgVC2CvtsSvfbQyxdrdyFGpR3fd8EvevH1g%2BhXlDyOmJ93D71Jd5dnW5iOq9YqAIPj4w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a56a5a0a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2696,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2695)","md5":"c7246e1b780eeba19f1f0fd37f669f54","sha1":"02078d713e9452804e09768e6330d95e634df6b3","sha256":"252dd917bd655bdc6deffca0b05f7f7d11ba69988b25125d9f955630f7374afb","sha512":"8250069ff9d99f4238ceeff03c7b9dc41e2841e698830a02eea92f3a3940cdcbfa0795894a899f7d54d5f5ed1c18e257e369a040ab25f4a3f7acfee19c2efa5e","ssdeep":"","tlshash":"e751fd34711c29d8f933dc2164b5d7ba202373e363c2c63baf55292b9d774852c21e8a","first_seen":"2023-07-07T17:46:46Z","last_seen":"2026-06-14T23:26:35.161585Z","times_seen":13,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/init.46f70d82.css","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/init.46f70d82.css HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"67155ce4-9c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ljKo0%2BWDL%2F75U9BEdoO8JnQXPdkDuVAr1kth2fSzGLLA7Z57Jv%2FRYgSlQy%2FMBW%2BtRONZe7Ps1TUh7rmNCfxcBmiEH0bOWCCyhpz%2Fnfw%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9c72a56aba264c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f5bc673696be89f7cec571c977e64018","sha1":"d58e256201b6638c9c3d565c1f44350343cd8f66","sha256":"794ffb7f52558d182033ae2459239a72747e4d5c197557f80dc53d965873bcf2","sha512":"99fd2ef30705972bfae8f10808707afc008b58fe0d43c0dd5700e0e3724bb0c9e5692c2c3fa5b32d431ff6ed46f00ca2a1f282fbbd6d1f17e273b9aa7d87a9f7","ssdeep":"","tlshash":"a8c08c70291fa2508832e243f4cccd95b3fde506cb72650f1a88e88a81899dab8c8243","first_seen":"2023-10-21T14:22:53Z","last_seen":"2026-07-12T23:28:19.765067Z","times_seen":186,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/crude-oil.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:50.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /crude-oil.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:57:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000, s-maxage=3600\r\ncontent-encoding: br\r\netag: \"5e4e832aa47ec693a3c1de44c8b222b5\"\r\nlast-modified: Wed, 08 Sep 2021 08:59:22 GMT\r\ncdn-cachedat: 08/09/2025 14:31:14\r\nx-amz-id-2: iX1TtAdjdHMPRE5uMozkM2icf7rQDi9bugBsGnw2tnMCphWxBkxQj5hYdDrITe5t9Ik2zkVhsgs=\r\nx-amz-request-id: ZGYDJZ5XX9T4J8TS\r\nx-amz-meta-hash: 5e4e832aa47ec693a3c1de44c8b222b5\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 9d0a57d3516126cfd63b499b2234588e\r\ncdn-cache: REVALIDATED\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":443,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (443), with no line terminators","md5":"5e4e832aa47ec693a3c1de44c8b222b5","sha1":"2d5947bfa54cf87422a3d02c46de823d55613400","sha256":"106132134d99b813f417630a48b4ad75f75423f05cf1ecca333928d67e2e9aaa","sha512":"ac3ecc177a30dd64602442e8c973f42fb7e0727e1cdf5154427c11d1e0202a866504bf753d84f12ba21814706a2580a088aaca0fa5d9f6ba948a84881fc21062","ssdeep":"","tlshash":"0af05c79d61dac2ef52bc2ecbe54a4a6908e908ac68942d4e194ef1e74142c7280c514","first_seen":"2023-05-18T21:44:29Z","last_seen":"2026-08-05T19:14:11.029123Z","times_seen":263,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":206,"dns":50,"connect":1,"send":0,"wait":138,"receive":0,"ssl":159},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-cell.48e797eb.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-cell.48e797eb.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemini-kk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-1f11\"\r\nexpires: Mon, 02 Feb 2026 03:57:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UgGz%2BeoWJLc4DPTMFmKb9Qx%2BuEuzyNUeR5AyOi0KNj60C6rGVoYpwW23GJSIHUCdflHY14vHSDvD3LcjKnGop4X1gKIJR4YfiFmrjKo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a56a8a1a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7953,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (7952)","md5":"a288dbcc9c8781f57fa55718a2405e01","sha1":"8e15ae3badd138a79bab1cde3b1fa59509de9641","sha256":"d8243d115a17129e17c99480ca49fd1a64b8406d07fdaf6c3b2737f433aca464","sha512":"c077f780ae6eb523ea93151e8176ad37ac985624f95f681010c4c082cfee91796ab15c3b884fc864bfc54b801748d5e7c6be7cd6eea27efd9d74bf0939d32584","ssdeep":"192:LRlXjmAWbm/z6nN1A6A+ySUu/Q1ntrzbWhVx:LR16tbmbQyWY1trnSD","tlshash":"30f1a638343dd93faddb49d9e0616a0960089e2eeb347a94f2f3543651aac84615cf7c","first_seen":"2026-02-01T01:34:59.513352Z","last_seen":"2026-02-01T15:58:04.800802Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-cell.92de9804.css","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-cell.92de9804.css HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:48 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 02 Feb 2026 03:57:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"67155ce4-26\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oUbzUmf8u1ZE%2BNWfvGEH%2FYUihpLNddnZWx4ep%2BFMU51zpwfrlzXpjHCFiVK16nuDSQVv4iMtirpGaZ1jCot3BuivBD355UjQNPIyD30%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9c72a56a5a084c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1300ac9132ab780c5681482082864b53","sha1":"054a89a2cffa11b3d47b59a9114ec25739d9992d","sha256":"67fab2f15a80a13659f870cad7e47cd86bc8f00941f146b4b47b5712d45490cf","sha512":"9fd41b161bf23c4ced5148ed4055a105dfd4c63f7b0ad471130da08688d05f63e3745dcfe230f0859656f2a396f8e64d780a2bf9a2f81f3ef31c8683446e09f5","ssdeep":"","tlshash":"8d800400744f5cc11031c4051df03147011353331170dc51004054101777510543c111","first_seen":"2024-10-22T02:53:17.705571Z","last_seen":"2026-06-14T23:26:35.167165Z","times_seen":8,"resource_available":false,"data":null}},"time_used":4764,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4763,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/v1/api/config/getLanguage","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:45.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /v1/api/config/getLanguage HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8;\r\nlanguage: en\r\nauthorize: \r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:46 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CwUlP6JrgWo%2Fhq9Cw0iZiOTusZeRYHU3PXdixks6HYDk8KxPN3rY9beBWaBFOaHZxkyUzOQrM2JYQp%2FLXanQiNlfBZ0se6fJO2DGbIU%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9c72a5744c2d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20750,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ccceabf744c9af4a7e5b8eb385b1ac32","sha1":"d69e44b2f6957175d9e6a5857b910eb74272d6fb","sha256":"611f80e7f41d5b3e8ee38140e7002b25bd2c0154b892bcb7477c2687adf87c13","sha512":"2d0bc0bb8ff8f990218221fec5ba0ad643678d2292b4d3e431865c9e4278e0f0bf5c208b9c5cd88b0075c624c63ab0c4dfaed463caf27eff1dad6f0d656d0427","ssdeep":"384:AqSDfg2mQybt5IdiPaCycf+ViM4QyS6GDg5b/r3OHtKRt:AnD4rQGt5ILiMC9GDur3H","tlshash":"c992a54e620a1cb64bc717c939af1e0536fc21c25295885d8cde981c43eeaacf2ab55d","first_seen":"2026-02-01T15:58:04.803356Z","last_seen":"2026-02-01T15:58:04.803356Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1774,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1774,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/uni.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.150.97","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:50.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/uni.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: W6mn+2lUh0YyIbaewEa2cpAGocitc7S+3HATGdO43aNW8AumPS2g7HSbfiuVzHHmRoUwgpDL+9w=\r\nx-amz-request-id: MMR3XVQX5MRP60SR\r\nDate: Sun, 01 Feb 2026 15:57:52 GMT\r\nLast-Modified: Tue, 14 Dec 2021 01:19:26 GMT\r\nETag: \"ca0493ee4bcd7c0c7801ec1f0f915f3c\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 7922\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":7922,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ca0493ee4bcd7c0c7801ec1f0f915f3c","sha1":"f210cabb3d69c47b8702fe98edd167077536ed4d","sha256":"36e52e07f68877eceeee2b2ac16ac4100269e3664309d0d660df7d83f817ab6c","sha512":"8938631143e6af6175436ea9c88217978fc4d5455313dc73cb60569fb3526bdca9c91d18c24a0b17bfec511c2c2b04c27a4e4e346af1e941ff19914c8daf6724","ssdeep":"192:LeMeH9bKXWe3oJJP85GbEEyrp2EG0kkpsFUHinY2kTm7:Lkx85iyrpxG0vpOvka7","tlshash":"0bf1b4c4b3ad62f8f501ebfc475a34b66e122cfa3922c19a87e21d45dd4485d4ca8cdb","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-28T06:18:25.097937Z","times_seen":99,"resource_available":false,"data":null}},"time_used":1695,"timings":{"blocked":1340,"dns":0,"connect":0,"send":0,"wait":354,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/eth.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.150.97","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:50.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/eth.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Ilb6YaJAayvQ835UIkFh0guJgtmUrKpr8YBtTPViwzn1JzCEjEDritYfNJbf4vVtRb0w70rzFjs=\r\nx-amz-request-id: E5WV1D3Y4BTJXGCE\r\nDate: Sun, 01 Feb 2026 15:57:51 GMT\r\nLast-Modified: Wed, 23 Nov 2022 07:24:47 GMT\r\nETag: \"d8a57c2396575a058eb68a6c0e32caef\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 616\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8a57c2396575a058eb68a6c0e32caef","sha1":"6495d31828866f3dbabc4aad7c77e02ff457cfb8","sha256":"b05bb6169930a076c463a15280a165560bd30972e2599f71ca62f44c023d666c","sha512":"7bf60d4e2903aa9f5be3e9268a3379da63feb8a312534d17c48686419a4fb52993c0c75b3686ca004145502266f58d9fa39cf59f19b7ab9dee6b503b877c3f58","ssdeep":"","tlshash":"f1f0a498354a14204804c77b1adead3a625329ecb7a6c0c5bfd91b0b79c48eb3cb55cd","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-28T06:18:25.090037Z","times_seen":545,"resource_available":false,"data":null}},"time_used":1738,"timings":{"blocked":707,"dns":28,"connect":281,"send":0,"wait":304,"receive":14,"ssl":399},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-input.abd354e6.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-input.abd354e6.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemini-kk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-3445\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dmNjjXHzKeCtfT3%2BHZpmMYEJLJoS6KLOPdrFPKn%2B5IWs3a0Yb2As%2FVwGVKm7yoIvVUjAw1zUYX9n31T0AK1BjTkOiM4c4nUgcbj4Bi8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a56a9a224c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13381,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13228)","md5":"3893c96a4e83c34c54eeb148dd340e35","sha1":"5300138c3188f49a24597648a122c0e7571b0314","sha256":"cee4de1eadad1185486fdbd349e4552c8454e91ab8ff1af8b55a53718ea9bc19","sha512":"089e24da26f0cb7c581ea13b9d0b02d65f7f8a753aaca4a94313afb92816899f362dab44770f04e7393e57a66be7c7acbcbb5a9980ff20e6863eb7acfa57b4e4","ssdeep":"384:kBYK1ZS6vPu2ZYjPErOO3tx54dW4MZ4ZG41v5:kb1ZXPu2ZYjPN2tL4k4k4w41v5","tlshash":"0752d469340c9ea38d7b5e983084080b1519dfdec527b6d8f5f4b870839ad80aa54feb","first_seen":"2026-02-01T01:34:59.529306Z","last_seen":"2026-02-01T15:58:04.771921Z","times_seen":2,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/country/CH.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:50.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /country/CH.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:57:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000, s-maxage=3600\r\ncontent-encoding: br\r\netag: \"d490c6879d1a4b832c5fd71de4b4bd38\"\r\nlast-modified: Wed, 20 Dec 2023 06:30:39 GMT\r\ncdn-cachedat: 08/14/2025 09:10:09\r\nx-amz-id-2: EpGwJe4LgZpAAvxhy06PiKtw43HuYop4ac8Zds0ut43NRvvbHb0oE9r7+aicfmYvMgAoKJkRPvo=\r\nx-amz-request-id: AB1C842FYAN546RG\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-hash: d490c6879d1a4b832c5fd71de4b4bd38\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: be2baed8942c199c9af789ead230ee0e\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":323,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (323), with no line terminators","md5":"d490c6879d1a4b832c5fd71de4b4bd38","sha1":"2faf3c6bb3f17594b06fc3a8c7b0a9b4b52d59c0","sha256":"3e5657d1033fd76d680853cb65e85338623961ca92b1e768cb902aa995a81a99","sha512":"a03bc306dddec855aae306318edf5429cbcb8142faf7420677a459a7b1df5002ec22996602071373c3b721e1c25b3f0baf83f45b6530fa89f4ccb9b09cdedce8","ssdeep":"","tlshash":"cae0d87951385008a411c3b5a8bc945b208e60cbf29c12d9b5403106181a1f79f14a98","first_seen":"2023-12-23T23:42:09Z","last_seen":"2026-08-08T04:33:54.977051Z","times_seen":2653,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":42,"connect":7,"send":0,"wait":3,"receive":0,"ssl":152},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-button.a2f75480.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-button.a2f75480.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemini-kk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-129a\"\r\nexpires: Mon, 02 Feb 2026 03:57:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LXXzsjcxkPfc%2Bou1yG1CAD%2Ftgbm3ksbn2FeiZGK7fLI59J32Zamu9U0zRWUwYa7oR3L37ZPZGNUv6SPgLFkgqdy2VflTLzlxtdVTvsc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a56a8a184c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4761)","md5":"c6c89e4d1a257bb092dc95b3c3cd59d2","sha1":"ab5785aaf50e1677d625360c63e43972b3c1f3dd","sha256":"a5a95106dc853641c116ad9e0d51add8db7c259db571fee2d0bf982414a4ae04","sha512":"cf3cf08c6b475debda5e965ec14c2519c2f9f790bf21b1537fe45da9ce2e499e09922147446745087ae8d746eace2287e6cba6652c712e6a9465f44e32b3e7a5","ssdeep":"96:B3LEHUD//UusxzD9831y6MX6eA6d5+Vhc8/YFs2GXUx8TCZ8NAwNGgwkBZ1jM:B7Em74Iq6CdEApYUSTCUAwNG8BZ1jM","tlshash":"45a108203078cdbb2ecbefdc306429162125db6ed53475e1fea86076138b8e590ccb28","first_seen":"2026-02-01T01:34:59.557611Z","last_seen":"2026-02-01T15:58:04.783616Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2845,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2845,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-drawer.83de1656.css","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-drawer.83de1656.css HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"67155ce4-1f1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SoTZ8Qv3I5l4HLanJJebzmgowqTF5Un%2BPtdOqpoq6t1XPndyxgWXBMgxQH9tX86RuUW8lYk2ODAPXb0m0MRG90XXe%2BlwGcGTgL6c9yE%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9c72a56a4a024c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (496)","md5":"21760436a7a71a0a2257f1f0aeb3bcab","sha1":"88dc7eebea231f3ffeae69bee7dc7cc872ac69f2","sha256":"ed33f15247424f05f2338f5a2e9dd2199c8405afa9b3007b650ea9178c16dbc6","sha512":"631cfb7e0c813f298381f9c75372aa2a5fc4965294c54af7a36a97cf84a71c1cdb0d1038166e84c276e2134c5f08d7ad45ef4da11b0c5ed36b2a7c154b6ec941","ssdeep":"","tlshash":"f5f05445123e1f34dadbf9495c75270b8ca3e150cb1ba01c52a70a2e58efa855e609ec","first_seen":"2023-04-30T07:16:13Z","last_seen":"2026-07-24T05:21:13.389899Z","times_seen":242,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/activity.dc54e5cf.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/activity.dc54e5cf.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemini-kk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:46 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 02 Feb 2026 03:57:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"67155ce4-13f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vmVcT1N1rqghWdLqu4sbqJzr1mZFUvdFZetEKeE80KPo1RgzXS1P%2BmyBPiCOnIdnTnbgK%2FxxTnDraP57z8PUnoZtyyNEPQijtLSeh1A%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c72a56a9a1d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":319,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (318)","md5":"ad4e0c1e54d832b3fe6557ef4458c536","sha1":"3701eb7610b0a39c1fba691b3f4ec4c96bc9121d","sha256":"60abe83da09f22bdd811fab918416cc034ba0b6b4d361adbc95cb61256d7102a","sha512":"a9515b495c6a1d77484ff1a00b756aaffff68ccc545bc10ebb152e1fd4b0014cc8701d78436c923a11b0e46bcf8b8e5f855c58a6cddec0882a3c1ab5234176dd","ssdeep":"","tlshash":"cce0206e3110b7b385064197805d5943931becd00e1a46a05f0d134c75b11a986bd46b","first_seen":"2026-02-01T01:34:59.535221Z","last_seen":"2026-02-01T15:58:04.808786Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2819,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/index.ad69f4a6.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/index.ad69f4a6.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemini-kk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-16c019\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ODGlBgPyL5LHNGVaDFtK93cuZgv%2B93FNd3chFG8NX5mMS6ZyGUPpzfraIyl4MUR4f0I71JQfQ%2FAWCPHWA0SAKWFsqUA0Zl5TcMAP5EU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a56a9a204c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1490969,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (50869)","md5":"d69b4d224355a94cb108bda742e9ab66","sha1":"824cf39988ab3b3f5a87574f284f4bd903d2143f","sha256":"114b6b8dae6b4b2abee32108a07a07e2b86cfe7e404bdcb1c57edd04bb061e0b","sha512":"ce73f46c47bbc9795e2675819ccb2ed2b21dd599fb04fff0e40ea252d7af3cb97862470afdc665bdb28fe85759368c47de85a6d724e7f6cb022495da0ae95270","ssdeep":"12288:wUTtlRbum8AA4OjpUumAYsWssJNBamsXANFx:NbT8AA4OVUumAYsWssJvv3","tlshash":"922518987791b09183a264a0447f500ff27abd695c8c5468f358ecf62df8a88553bf3e","first_seen":"2026-02-01T01:34:59.518536Z","last_seen":"2026-02-01T15:58:04.810137Z","times_seen":2,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/pages-index-init.7f8e3dfa.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/pages-index-init.7f8e3dfa.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemini-kk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-5d7\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BaQvCn28Q42ty5D2ouZzEbsttR0msVzk%2Bgjiv4xWQtNrpy99fo9nSvQBYdkpo6b0l%2B7ZeuefqUdqf055zdWEwjMza3HeBp8Yc3YT9tg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a56aba274c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1495,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1494)","md5":"a00453e5b5798b317ee48db8fb42f4ac","sha1":"c54b4ad879e5c82912724ba20997e152c5e24ff5","sha256":"40c1fe8e465a2d6499fe806e2b93cc4e9907f0009f1870dd697451893bdb6f48","sha512":"169deb390082a033ccd6b2f9c1283fc82e1fa4d5f1a9b08f9ee8cd359e78aa78c255f0d9b03695151a7bc8b8d1a656f134df443c25673b329619c232aea437a0","ssdeep":"","tlshash":"a331770a27af95366fb30406b5fc1c8807b51b841c72f9cc7e6a5c0959f1d85184d330","first_seen":"2026-02-01T01:34:59.512074Z","last_seen":"2026-02-01T15:58:04.811575Z","times_seen":2,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/static/images/tabBar/order.png","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /static/images/tabBar/order.png HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 623\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\netag: \"67155ce4-26f\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yZV6UT2Z5uQDN52akz4BUZaM%2BujEiGJbf4ejCgDqptJQPalJNBr4Q1tLJfWRiJRKZtGqAuA%2FJTbQe3OqIoAE93dIvTsBdDHDsL8Cirs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c72a56a19f44c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"0897c7b0cb2bfbf9634a00807a6de57d","sha1":"29ba0909b568033163559a19b9d7f7325730622f","sha256":"3e8fee8f371d7d34ea9eb22d7597d2610ae85e333bd6231a625c2e72e7c9c349","sha512":"f1f720b73c149444d49e959cb95c650458a881f5670f52b59c8a34c2a069c0b706efe863b7ec1cce7f29364a234fc95766966b0545b373c7421cee186c0bb0a7","ssdeep":"","tlshash":"0bf0b7ea76a858a8ce3104fd15068c34890c15b03b8899ff2e793a144242a242c5011b","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-28T06:18:25.094983Z","times_seen":294,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/static/images/tabBar/jy.png","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /static/images/tabBar/jy.png HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1057\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\netag: \"67155ce4-421\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pKggAT9qRXdkKAvP9aSFihGNzUzRnEkBLJi5Ga57Owo2%2BqkNnWV2WR8F%2BCmWD%2BSUw8gHzPcRQI2%2B%2BXIn%2BEFN0CG3VTWKojfBDJtT%2FdE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c72a56a19f54c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1057,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"0eccebc7bf864ab6f6432b3940225365","sha1":"e5a941399606443f76e8ed05f26dca79c8888d52","sha256":"0dfc4fb9eaa75a6985df6fae71271d38bd8b267c5eff4db97238b5323dcd94bd","sha512":"b8398d20cb25a47d5790dde5eefb4dcf0f634d15bb6e6a4fe6655e8032d81e55a17b981e6b0ce74173a9c1f3a6e75d9844c76d04e376e10835a7dfc2c7b5646d","ssdeep":"","tlshash":"4b11bc911f6742e4cd1f551a28241760cca21df83c259f89d5b87e46b36f5f50f115f1","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-28T06:18:25.09342Z","times_seen":295,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-segtab.e21db500.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-segtab.e21db500.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemini-kk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-1286\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DBjUq%2BwKyALx1Kv6W1gvubCr1WOadHtyWRLGn3c8ti03apr%2BdkLcvk8TQEmEyzp3TWY4mkRTOe2sImr6Huj5nxScpqtRCWe6pBNJVOQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a56a8a154c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4742,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"44ecc28a6b21ba82cfb9edd5bc846d88","sha1":"e46082f804c9e3b2c136b86ec92e8831c271203a","sha256":"85e818c7ebac8b2e8e172aeb9e257d60126b83f59061fef79d2404fe59e3c6ec","sha512":"aa2b12df8ebce0c771f9ee9b7cba4eefbbbb57ccb6f9323ce86d23d3ce128358cdd5933b3d1841592474c5a0d2502b0a2adc62750e4a72f3b30a170187a51558","ssdeep":"96:iIoNZgoBReFcJdnGW00Lggb2iS4FCx/PLt+pixOwCCdcbILz63Zuq9:ONZVwFc3HzGs4/PL2OyI6Juq9","tlshash":"4ca1e97c722ca83d36bb49a9b03251815219c79fd739e0d272e8047552d2dc45addf2d","first_seen":"2026-02-01T01:34:59.533119Z","last_seen":"2026-02-01T15:58:04.79015Z","times_seen":2,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/index.a73ddf1a.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/index.a73ddf1a.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemini-kk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-1519\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oesel9GxcOYWqF3Po7Kc%2F64BxgH5OK9ze4ZgxfdKMMB8Qgz8pRu4dIrOcLqyd4eazdVrfsZ9cZ1Sf%2B578DYgb%2Fr%2Fa6poaNai22zLbEo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a56a9a1e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5401,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5400)","md5":"e08da938cc74189a064c5aa0f9918e22","sha1":"44d2a97cf4bac2943e8d3026d6e5c0432e7625d7","sha256":"f5d859f2f417a7d16999a12d6b86694f216d0b236ef53e78646c5977a45dc8b3","sha512":"e85ba4a6cab38db1997f0da0537e390f936a5e6bcedb696bce0c0f857b89b41b98f031d0600b5acd54c89bc4bfc80736b1b2316115639f8bf5daf7e7c9da2012","ssdeep":"96:ugfASdun69B7Y3GvJJPi/awkVuaVdaOgW9hX+8kOevD:R4Cw69B83GyawHaVdaITQD","tlshash":"6cb1b54d7b18063dba4b0698a099710131981dff27615db4e3f71c3aa2f2fc49ad87d5","first_seen":"2026-02-01T01:34:59.550817Z","last_seen":"2026-02-01T15:58:04.81535Z","times_seen":2,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/pages-index-init.7f8e3dfa.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/pages-index-init.7f8e3dfa.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/assets/index.59abc7ea.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-5d7\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=53iYUWM%2BGwKQgrXFdV2mfH3%2BOZdL5%2Bq2vyqtZFw%2F4145UYOxvoF%2FtUX39fefD8SBYxcAB8%2FjiWjGitJQfNQAPg3TU0V%2FJnxic0Pt9KM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a56d0a864c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1495,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1494)","md5":"a00453e5b5798b317ee48db8fb42f4ac","sha1":"c54b4ad879e5c82912724ba20997e152c5e24ff5","sha256":"40c1fe8e465a2d6499fe806e2b93cc4e9907f0009f1870dd697451893bdb6f48","sha512":"169deb390082a033ccd6b2f9c1283fc82e1fa4d5f1a9b08f9ee8cd359e78aa78c255f0d9b03695151a7bc8b8d1a656f134df443c25673b329619c232aea437a0","ssdeep":"","tlshash":"a331770a27af95366fb30406b5fc1c8807b51b841c72f9cc7e6a5c0959f1d85184d330","first_seen":"2026-02-01T01:34:59.512074Z","last_seen":"2026-02-01T15:58:04.811575Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-tag.385d6a04.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:48.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-tag.385d6a04.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/assets/pages-index-index.78c947f5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-f9f\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zqMfdZWjoidXfYhEHGlm4jnxHP5QbjnLJ59S0N95b3fXdGSfL39EL0OFirAz499RuLMryNOvr2MvddgzbrLA1Ss7d2%2FRrKevVqpQ6UE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a58858894c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3999,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3998)","md5":"3dce96c58665ed5f4f590bf26f82fbc9","sha1":"0f4655959138188ac02d2b195a52f36fa731195f","sha256":"aed726fd5621d5c294e2aa01efcaf6d7853d10bbb5bb6ce8e9f6020bce0f1a66","sha512":"9c85e6a4086e4efac5c617325e71ab6be0caec914bda5b97fc6ba4ec25f091740c69557a1f6296cd4512d560e06acb6b2dbe6a28d4d0268c90b79db0e5e05c8a","ssdeep":"","tlshash":"9c8143b43d6808f686ff4ac8a132aa0c492a255eed357ff2f5a161245cf1925704e73c","first_seen":"2026-02-01T01:34:59.511043Z","last_seen":"2026-02-01T15:58:04.751618Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/activity.dc54e5cf.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:48.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/activity.dc54e5cf.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/assets/pages-index-index.78c947f5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:48 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 02 Feb 2026 03:57:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 1\r\ncf-cache-status: HIT\r\netag: W/\"67155ce4-13f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TM41Qh%2F7%2BDbisT7luW8YhveuEy%2BtJg0dJlghct3ZdwFZbPs5jVqSxlNdGKrhm3FG0dCEDYn6qSLwRYQCDd2CI5gH2q3Pg3j51TBZGB4%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c72a588688c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":319,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (318)","md5":"ad4e0c1e54d832b3fe6557ef4458c536","sha1":"3701eb7610b0a39c1fba691b3f4ec4c96bc9121d","sha256":"60abe83da09f22bdd811fab918416cc034ba0b6b4d361adbc95cb61256d7102a","sha512":"a9515b495c6a1d77484ff1a00b756aaffff68ccc545bc10ebb152e1fd4b0014cc8701d78436c923a11b0e46bcf8b8e5f855c58a6cddec0882a3c1ab5234176dd","ssdeep":"","tlshash":"cce0206e3110b7b385064197805d5943931becd00e1a46a05f0d134c75b11a986bd46b","first_seen":"2026-02-01T01:34:59.535221Z","last_seen":"2026-02-01T15:58:04.808786Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/juv.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.150.97","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:50.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/juv.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: yshTfVS6bxW9tZyoROXxpqev+zRmSIJJT2dsja7tE1vqnziQGR0WRz+BxLxjr1plqxUPMjVNjho=\r\nx-amz-request-id: MMR2TB3EAEP8S8E9\r\nDate: Sun, 01 Feb 2026 15:57:52 GMT\r\nLast-Modified: Tue, 11 Mar 2025 07:26:15 GMT\r\nETag: \"fe957680ef81f353455d3aad7dac0fd4\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 51231\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":51231,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fe957680ef81f353455d3aad7dac0fd4","sha1":"8d4feb503bc45a3bc2ed2f7dc8f0be3ede52ade8","sha256":"fc4cacb9287e561349c5ec9bd89d977c1eb5877ac251589164dd20a300aa9ef1","sha512":"6c3098256b8dcc6d9d374db969a0253ab782d6fbb465a98e7ba4644ccd64059ce072e04ecbd3172bc44df17dc99cba6f4f0f1931e301d7b7b1028b3385d9d01c","ssdeep":"768:rqSpyH2cUwSzH3C3xqNPNvvV2Y8tH4dce1gWNUgIUxG8Mva6sP1wP37YZmRaKliL:rpJPNl25Hje6hUeaTPOP37wkAV3Y/W","tlshash":"9533023c3e697c1f4b688328f839ae0c38c044fa9f4641297696ac65241eb45ff95b57","first_seen":"2025-03-11T08:52:08.587629Z","last_seen":"2026-07-28T06:18:25.104102Z","times_seen":172,"resource_available":false,"data":null}},"time_used":1585,"timings":{"blocked":967,"dns":0,"connect":0,"send":0,"wait":316,"receive":302,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/index.ca57569f.css","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/index.ca57569f.css HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-7a16\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QfhUEj5%2FhqnBZJjDy9N4DT7PUBLbkHX2NuIUxJpZzswLPLmhfdGwIJDsnlg5F%2Bm8FfGT8udUNh3jdReL%2FKuHhSbLreAic0v2J8UK%2Bgs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a56a4a004c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31254,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31253)","md5":"2cd94a97055e6ad3e77c3cdf3c09589b","sha1":"695abb021c24f587bbc9920520bd6bd352f6b747","sha256":"5ee2e237d1e96b54a19511184e773350d3dd79ab0fd1ff8a5e48290623b32a21","sha512":"184222f431f2926713762d87d3419067a7e3c6ebda28518ba487eed3144df0f76cabbf90b18783d38264bef68ae2fe847837bc6ed4d3bd149fce4795f6780d08","ssdeep":"384:4WuPdjgecvOZoCHj6AIy2ijK12uvtZjG7iBFkoOs8tVaobi75saqqONEZhFIwAsh:4bpgecvyaAs19/5H","tlshash":"9de29739710ca2597537e525a0d62bbc21307b77b2114b3da764aa3dee470ca3e336d8","first_seen":"2026-02-01T01:34:59.536822Z","last_seen":"2026-02-01T15:58:04.817376Z","times_seen":2,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-drawer.3021b33b.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-drawer.3021b33b.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemini-kk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-1626\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9cw7sxi9EfQGqWIhgreEpbIeMs4HheB3rsTqDiNjhi3cx3EZzNm1mGvq8aUC5xOV07dFY3VTxqGD3KxhAqTKBp%2Fp%2Bxp518VbCJCrzFY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a56a8a164c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5670,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5669)","md5":"05af2223237fac3e8ade6f2dab3f829e","sha1":"b18e87f89fe004330814adff920348799f4466ee","sha256":"cd07061168259e943dab6f277e88a78aa94eac72643ece147ddb8fa1c2a70eb2","sha512":"37de158acdedad5fb0dcab866f548a65ef1bb6f445d716b4584f00dc2132060322ce45262d522c5fbe5fb7b566770a71034aa68e58845c57c73c3a2b9c5f7a3e","ssdeep":"96:/or7rd/K5RUtxr6SDKAfSSLw2D5eW8T6gQllDuNPCmuW6vKHXBuSs+8jg:2dMmdDLw7zPCQ6vK3KTjg","tlshash":"d9c1c79c746e2373a6b719a5c072480d533d1f4d9978b6c1f2d2293a36f6d1848d8bbc","first_seen":"2026-02-01T01:34:59.501519Z","last_seen":"2026-02-01T15:58:04.792406Z","times_seen":2,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-cell.48e797eb.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:48.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-cell.48e797eb.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/assets/pages-index-index.78c947f5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-1f11\"\r\nexpires: Mon, 02 Feb 2026 03:57:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o6GEfkKRrLHR9GSYR2n7jF7Lz9dehSqd0F5IpnzKgPuJEeX2xOdGlWVcFUGTksO91hjUuKn8%2B3tRMvQB1WuncIcR%2B1tGcEogy98in1E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a58858844c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7953,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (7952)","md5":"a288dbcc9c8781f57fa55718a2405e01","sha1":"8e15ae3badd138a79bab1cde3b1fa59509de9641","sha256":"d8243d115a17129e17c99480ca49fd1a64b8406d07fdaf6c3b2737f433aca464","sha512":"c077f780ae6eb523ea93151e8176ad37ac985624f95f681010c4c082cfee91796ab15c3b884fc864bfc54b801748d5e7c6be7cd6eea27efd9d74bf0939d32584","ssdeep":"192:LRlXjmAWbm/z6nN1A6A+ySUu/Q1ntrzbWhVx:LR16tbmbQyWY1trnSD","tlshash":"30f1a638343dd93faddb49d9e0616a0960089e2eeb347a94f2f3543651aac84615cf7c","first_seen":"2026-02-01T01:34:59.513352Z","last_seen":"2026-02-01T15:58:04.800802Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/v1/api/exchange/getSymbolConfig","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:48.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /v1/api/exchange/getSymbolConfig HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=UTF-8;\r\nlanguage: en\r\nauthorize: \r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:49 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xERTAEiF487cSEntYmpceKolX2VVHYP0c3SaIFsxNstiq6nxbnYGeh5%2FCFfgVdFgv8TmaRWX0oPlggvWXTlK7GymO3651fDzxE9Vyh8%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9c72a58bc9264c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9644,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5cb8dc3912ecd15fb0031e8c90f59b70","sha1":"86959684b071ebde33efa94e8944ae9ac1b40480","sha256":"141efc4343e705635b1c712cb0b9b36bfb4e36c342a12e835a1bd56fc78c95eb","sha512":"d27237e2973deeb569913dac23662e83914e1982fa04447a1f3b7823a093446d1740e06e0d1874b59f480b779961950231e0bc56e6f030cf3b3eae826c278500","ssdeep":"192:85O5Rclu92G1KU6x6736qYdcKMJgIdJrjuIMbcrc7xZySpaBSrg6HUdulQ4QZ:ZRcg92UKUG67qJcKigIdhju3ac7rZBrC","tlshash":"5b12b96a62350bafd131a1c21ce37fd8486e75a31cc90a51b5fe9e4d8710deb6027327","first_seen":"2026-02-01T15:58:04.77873Z","last_seen":"2026-02-01T15:58:04.77873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":973,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":973,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/index.a73ddf1a.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:48.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/index.a73ddf1a.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/assets/pages-index-index.78c947f5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-1519\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ZMRQrruv5Qb1wkia2Dc2LtrqcZ4AyWdCpWHKHB5bJffvJirO6mGBZ6FleX7k3VfrI28B%2FMKpJNtaruDVdZJXgkSRMXzcxczwrjJYe8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a588688d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5401,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5400)","md5":"e08da938cc74189a064c5aa0f9918e22","sha1":"44d2a97cf4bac2943e8d3026d6e5c0432e7625d7","sha256":"f5d859f2f417a7d16999a12d6b86694f216d0b236ef53e78646c5977a45dc8b3","sha512":"e85ba4a6cab38db1997f0da0537e390f936a5e6bcedb696bce0c0f857b89b41b98f031d0600b5acd54c89bc4bfc80736b1b2316115639f8bf5daf7e7c9da2012","ssdeep":"96:ugfASdun69B7Y3GvJJPi/awkVuaVdaOgW9hX+8kOevD:R4Cw69B83GyawHaVdaITQD","tlshash":"6cb1b54d7b18063dba4b0698a099710131981dff27615db4e3f71c3aa2f2fc49ad87d5","first_seen":"2026-02-01T01:34:59.550817Z","last_seen":"2026-02-01T15:58:04.81535Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:42.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Inter:wght@600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 01 Feb 2026 15:57:43 GMT\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5054,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bfe3611cfd6eaa33321d7ef2e6040981","sha1":"ec890d6e69feaa28080a1fb0a205dc7b5a87714f","sha256":"f7a1adf3e107544e85325e212b9f2b7f9af3dc8f8077667fc4d0e5a4687e151b","sha512":"c3631473a78e91288b63c69703695ac8b6ffc17641e652fb18ba0d05da397888d9cf55e846aa5c90ba041c56dc89b492ae3900c9fb9b9a79bfd4869895f7ba72","ssdeep":"96:aOxMaNqOxMaXFZHOxMamOxMaO3vOxMaBOxMaBJc+uTOxMaNcNDOpaNqOpaXFZHOd:bNryfO3iExlONEhYO3RrxGx","tlshash":"eca18992002ba400ab971dc273cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-19T20:01:38.048041Z","last_seen":"2026-08-08T06:20:54.81271Z","times_seen":190,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":90,"dns":1,"connect":21,"send":0,"wait":30,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/favicon.ico","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:46.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:46 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZT67dNRxTkDCVe9GfgIgYY27s%2BZC6E3v1BuXTZz9d86EhaYzmEb7XeMVCZA%2B893pdyHQenG%2BeuFkrh9cU82vVPXhEPt46HcY12BdTG8%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c72a57abdae4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-08T18:35:35.56766Z","times_seen":547469,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/pages-index-index.78c947f5.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:48.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/pages-index-index.78c947f5.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/assets/index.59abc7ea.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-1007b\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NZt1lUgxqmG%2BGxjfZySMh0OqBssb1xLnyg6ZY06YCGmrJPQ%2FZTnma%2F3dZbB7QLeKYtpvBTBPjYEwxh2X%2BS4TgnvWx136kA%2Fp7C0WYLE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a58828754c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65659,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (51551)","md5":"5ba1a0977782f1d279bde680bdbda64a","sha1":"41b1fbf39b12f6c66ca1865cacc0a6e1716b8a36","sha256":"f0c76539aeffc1668248134b3cc418099b7eae77e1e5360e5cbda1ec077c753a","sha512":"94bc0b7debb0f887b422b1ca33418b63937ba384ed2987c7392f94f973f689d363b18633a6c9068e4b5f18f3327db99a576c5d08e756904295815fc339316f3e","ssdeep":"1536:842bQssab6L828DSqmfsSJKzCxQwzU/9wOsKIx7zddDFp9t6MrzGrFWsIR3N2Nh3:h2bQssab6w28UXQwzU/9wOsKI1zddD1A","tlshash":"b2534a21f52cde3ef727a58d90268008269e9dafd218b5d0b1f45c7532e3d94b6ac738","first_seen":"2026-02-01T01:34:59.534224Z","last_seen":"2026-02-01T15:58:04.769581Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/btc.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.150.97","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:50.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/btc.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ENTU9+NbJoYoO4MWBn1Z8I8PYdySRQi6mtV16vK2NJ7sT1EpVtpjr4fYPwHG/AF+/9Qqci+8bCg=\r\nx-amz-request-id: E5WM521SN4KYQF6P\r\nDate: Sun, 01 Feb 2026 15:57:51 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:37:53 GMT\r\nETag: \"03c74454bc971a3437d588396a5e610e\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1947\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03c74454bc971a3437d588396a5e610e","sha1":"1a359cf1c14e757eaee1c5c807cf6c7732646b15","sha256":"733d0c0a99a79f263e8b548b8b1988ccfe80e156d36120371495955b4e51e382","sha512":"dede5e3cd5e0f080f4662e4e2df58482d19df970a2cc3f505eda82fb180a736a4c82523fe35b7a613293f572197e44c3bf963bcbaa32174c00d80b0b1e08bb2a","ssdeep":"","tlshash":"24419620d7bec18cf00196fcda29c87479971cc53e28d089d6e9485ab66405d1d72cff","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-28T06:18:25.103616Z","times_seen":522,"resource_available":false,"data":null}},"time_used":1641,"timings":{"blocked":666,"dns":30,"connect":278,"send":0,"wait":306,"receive":1,"ssl":357},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/metal/gold.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:50.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /metal/gold.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:57:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000, s-maxage=3600\r\ncontent-encoding: br\r\netag: \"0e3001c0d28b4b59b37d7396e2282730\"\r\nlast-modified: Wed, 08 Sep 2021 09:03:06 GMT\r\ncdn-cachedat: 08/14/2025 09:09:40\r\nx-amz-id-2: R8LFPEdzQsayNAvZbp22VI+hXKIiL9b/XiYUEyQpL8irQIQuwOsxPB5VSqXamm3eN7eVgNUiJEQ=\r\nx-amz-request-id: 4S4V3Z81VQ7DK6R0\r\nx-amz-meta-hash: 0e3001c0d28b4b59b37d7396e2282730\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 20d7f5311f41965eb1f1662e01a832eb\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":556,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (556), with no line terminators","md5":"0e3001c0d28b4b59b37d7396e2282730","sha1":"40a727481e9bf9f016ef58e0aaebc786c3e6cb56","sha256":"9ef7e93476a9f5132f0c3b909c3d8b569cbb727188f5a07f2abe7d881d786006","sha512":"6edcc400d9627cad6ff52b0f2795015d2f734a60927ce94ca25ac9a9d2764416912ade73ee71d9a0dff05f992fc0aa71f79adebed4646d5f96ab1aaeabb1d191","ssdeep":"","tlshash":"2ef0ac7629eb928e744555c0026014439546b8bef3dae1c8ea001793d94dcd9e8e02e5","first_seen":"2023-05-18T16:17:48Z","last_seen":"2026-08-08T05:08:03.220873Z","times_seen":864,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":126,"dns":60,"connect":1,"send":0,"wait":3,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/chz.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.150.97","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:50.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/chz.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: NPTSn/PvacdWKwFd7194GqycKdczO63NGgwjeD2XAmIfndYYErZwlGQl0kjhzK2R6HrHH+3B8uw=\r\nx-amz-request-id: E5WT4S5VWENAFS0D\r\nDate: Sun, 01 Feb 2026 15:57:51 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:43:18 GMT\r\nETag: \"c07cc55bfc92d6bc8a1004e4dcf9185f\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 3619\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3619,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c07cc55bfc92d6bc8a1004e4dcf9185f","sha1":"3a4265522a63bd41a2f494ceb1e3ec917d902761","sha256":"eb1f403bd3476588a1226280f4265767e987e010dd1b57edb1953abe09bcaac3","sha512":"7d03d560f133425709aa2eefec5279cfe24d6cd6ba49a39449f0b1ed61ca4839aab47f2fc9a4990c235ec311d8f93d06b5a5aa1f99f8d920ab8e22bf432c5990","ssdeep":"","tlshash":"a87161aab37892e8a504fbfd960748f46a6b2ce57612c55997e41d82f28000d05b98d3","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-28T06:18:25.10205Z","times_seen":258,"resource_available":false,"data":null}},"time_used":1000,"timings":{"blocked":-1,"dns":12,"connect":281,"send":0,"wait":303,"receive":1,"ssl":403},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/country/NZ.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:50.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /country/NZ.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:57:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000, s-maxage=3600\r\ncontent-encoding: br\r\netag: \"5a0f74e16a6666e570491716f8789d90\"\r\nlast-modified: Wed, 20 Dec 2023 06:32:12 GMT\r\ncdn-cachedat: 08/14/2025 09:10:09\r\nx-amz-id-2: LDoRk8Azvx0O3H2Pv0C33WpDaVyiE+ndop60kelevRAgR7E/jZTu5VLprklAkAgQMnIOp66/jXQ=\r\nx-amz-request-id: Q5JQF3QPAV7RAWNJ\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-hash: 5a0f74e16a6666e570491716f8789d90\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 92ad217125ff91357fe4784e15376aa2\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":787,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (787), with no line terminators","md5":"5a0f74e16a6666e570491716f8789d90","sha1":"30ef3c67bbc2178d38d8c80f916604c7880135b6","sha256":"e99a9149573a35adb03587a50c3af9c0ef7287b7dda403619c23052b782f5311","sha512":"73d509f5e2f359d1c6dbe822a707209c049e0c439dee66ee051fbee68dc2604d1b8b0fecaef061ff987d6394356cfa5d7d419bccf0d7cfcc98c8d8fd130e3661","ssdeep":"","tlshash":"6e016bc1b124c307cd52c21de1781230a06d11d6b0ed55d968e3b75e251fad5fee417c","first_seen":"2023-12-22T15:34:58Z","last_seen":"2026-08-08T04:33:54.986965Z","times_seen":1828,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":45,"connect":7,"send":0,"wait":1,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/index.ad69f4a6.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:48.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/index.ad69f4a6.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/assets/pages-index-index.78c947f5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-16c019\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ocvHzs3knjFq9zpHvcfzaWBI2xFSXOaX140dnkNziHjAUSOQOkPpOI7BfFyFGBbjzIuemggxy9pWK111q0M6lLCI2izuREHq9tBCH14%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a58878914c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1490969,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (50869)","md5":"d69b4d224355a94cb108bda742e9ab66","sha1":"824cf39988ab3b3f5a87574f284f4bd903d2143f","sha256":"114b6b8dae6b4b2abee32108a07a07e2b86cfe7e404bdcb1c57edd04bb061e0b","sha512":"ce73f46c47bbc9795e2675819ccb2ed2b21dd599fb04fff0e40ea252d7af3cb97862470afdc665bdb28fe85759368c47de85a6d724e7f6cb022495da0ae95270","ssdeep":"12288:wUTtlRbum8AA4OjpUumAYsWssJNBamsXANFx:NbT8AA4OVUumAYsWssJvv3","tlshash":"922518987791b09183a264a0447f500ff27abd695c8c5468f358ecf62df8a88553bf3e","first_seen":"2026-02-01T01:34:59.518536Z","last_seen":"2026-02-01T15:58:04.810137Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-app.b89b333c.js","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-app.b89b333c.js HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemini-kk.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-a54\"\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iw%2Bbj8cVIqgyAbFq%2BipSdTwmjQx0SNimJOaFNfwMqIipiM6cgjCkADDrMuusVN7veLRl%2BN6A0fkEH7lxfxl8LNRbX8VNQAes0kL7po4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a56a8a194c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2644,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2000)","md5":"e50d0ccc3cf934b3422b4deca7adbe25","sha1":"2a3b9c7ba0c5f84052ca75e7885f1bb56bb25d9e","sha256":"8ffe9ba46d3ef9aaf0ba0f7a86d80c6ffa26ac7f6e5d1978914b8ed551739141","sha512":"a5ddf1fe53f81b9c84428e7c93b06075a10a69c6456c7540850d9f4088301d660791c90a3673d9b14c41360d5254109cbff4e2fb10db1b2a87b5cf1fba2701f5","ssdeep":"","tlshash":"b551943c32eab27d623749de60665b4c144bb75d4a326bf6d13d78703080c28629fb68","first_seen":"2026-02-01T01:34:59.548863Z","last_seen":"2026-02-01T15:58:04.743897Z","times_seen":2,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/uni.42dfc8e5.css","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:42.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/uni.42dfc8e5.css HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-546d\"\r\nexpires: Mon, 02 Feb 2026 03:57:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N2ItbYjWynmLFP7aLgH8BDHV4TpJR%2BEbomC2UDuO71uYyucLwzMaOsdvmsPYvg7SItEjmWJlJklHnO4GmZaGKTU1%2BrMmC0hBdkeuHEw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a564f8b34c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21613,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21612)","md5":"8018f8180c180434b2e2008a37ee9eef","sha1":"77fe48b8de2700bf8d965c105abb31d6d0548805","sha256":"42dfc8e5615b57a3aac286aa04fa497322c7b34279415c045790c3ec737b3ecf","sha512":"5792ba68fe05e9ce424fb26328cbc7e6e870b83c02448110ae55cb0a761320bb62a6663315d2b3feb1aa1c5dc64914490b186ff2a31a9cfc1f0670861129037f","ssdeep":"384:GRUXpmL+L08TxZ1Hgv1GVM70PfDcwp57fh+:bRxZ1HgTYnDcwpe","tlshash":"06a2a6316a012a3df867ca2969d1db8f2231c4b3d9a31f1deb7575248b9e4c9193e3c4","first_seen":"2026-02-01T01:34:59.523187Z","last_seen":"2026-02-01T15:58:04.825197Z","times_seen":2,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=SF+Pro+Display:wght@300\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:42.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=SF+Pro+Display:wght@300\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T18:43:01.051599Z","times_seen":17783985,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":91,"dns":1,"connect":22,"send":0,"wait":47,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/tm-segtab.206f8890.css","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/tm-segtab.206f8890.css HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:43 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 02 Feb 2026 03:57:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"67155ce4-92\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PtOBI%2Fd2o5y2nc%2FL7vvPOH0qsmYFNuEis%2FV6xXjW4SpEmO0BPf1ULvTDDP31GFgddXyJT0%2B2z%2BHMuLyJglP4hOhIhMA%2B9yycs%2FzSTDM%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9c72a56a4a014c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"75ccb9822a43118d8c5e0206ff76969d","sha1":"a5ef88a98bc655e6a5ece65730b095a43ee36990","sha256":"b394ba56d52aa7ceeb7ba3fb6e93456d813751a536c69622f8c143e16e0a1bc1","sha512":"73ca6de779b6324af6b6b5043b58671da8947bdc578883bef3b5fe7ab9319dfaf053311bb001a85b4ab844944d2689db6a9f2bc17dd18ecd684deac1e2c93697","ssdeep":"","tlshash":"0cc08c54e31821100263871390c25c24c338ebc2ffa2a82db3404107080312d2263f92","first_seen":"2023-09-10T20:06:10Z","last_seen":"2026-07-24T05:21:13.424086Z","times_seen":206,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemini-kk.com/assets/index.c9951196.css","fqdn":"gemini-kk.com","domain":"gemini-kk.com","tld":"com"},"ip":{"addr":"172.67.206.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:43.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemini-kk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 03:11:48 GMT","end":"Mon, 30 Mar 2026 04:10:38 GMT"},"fingerprint":{"sha1":"2A:BD:64:18:9C:A7:F4:90:6D:63:59:C4:F0:E9:96:3F:AD:B5:12:BE","sha256":"5C:6A:F4:C8:03:D1:F3:99:61:00:FD:14:49:E5:77:70:91:2E:54:CC:24:2E:F3:28:0C:B7:E5:44:09:84:92:00"}}},"request":{"raw":"GET /assets/index.c9951196.css HTTP/1.1\r\nHost: gemini-kk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 15:57:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 20 Oct 2024 19:41:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67155ce4-a78\"\r\nexpires: Mon, 02 Feb 2026 03:57:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w5z6PTSelkAYihEQLHhI3bLgZaOLDUjdNNmQOWrbgvLO%2FOJIICgf3pz1lWD1gpJqX%2FmfnuB1gKtLiqYjjO3vRo4lTIt2cZJJsr7jE08%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72a56a5a0b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2680,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2679)","md5":"189db477a4b3c671bfa966cdc5f8c0ba","sha1":"6a22c6c27e8b7bb03236d444f24801c286292e75","sha256":"4baadb15873c54a00ccc6195d893c26d6296ace2fc336c96767c989454e39725","sha512":"8b7198c234dbb9181b72cf9e1a7983cbdbe99bfb24dace3a9ae53771df19cc33b936eca21664025c92138684f6d486961ba143c711a25a48e469bc45bdf9771c","ssdeep":"","tlshash":"fe51ec21735c1728a137dc1161965b6fe1e07723b7ea0728af572b299fc74cd383a688","first_seen":"2023-06-27T12:45:43Z","last_seen":"2026-02-01T15:58:04.827898Z","times_seen":8,"resource_available":false,"data":null}},"time_used":3274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"gemini-kk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/psg.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.219.150.97","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemini-kk.com/","date":"2026-02-01T15:57:50.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/psg.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemini-kk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: vB/XYCbRbW6BfuDfbGM+zICPAmE9hUHl/BpnJ1UERI66NUui4HKBLCfZMFOMdXA4fgKkuFwmcT8=\r\nx-amz-request-id: E5WXHEWRZRKNGDSN\r\nDate: Sun, 01 Feb 2026 15:57:51 GMT\r\nLast-Modified: Tue, 11 Mar 2025 07:25:29 GMT\r\nETag: \"71d001dc16f522a80b0d27c28e947fc9\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 71831\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":71831,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71d001dc16f522a80b0d27c28e947fc9","sha1":"8cb23ccb55c480a1c15df8b696d40bdb45b777bd","sha256":"c203f6e5b6457611be12973824aa99cc88659ef455d8a04a6902a0b21b2a9e4c","sha512":"eeb0b27e2651b05b0418ffc64df6be22e8e405127b9dda87451d1eed40cde4a672f5eb52498068add547f57a82b7183f075246eff6fe61483e058f79265c5ef4","ssdeep":"1536:EO81xrez0YhxU0vdAhTgZlIw4iaP/MEyyejB/CI3Ly5BBYXn:hixC0Yhx7vWhTG05/MEF8h3LgE3","tlshash":"4363026d71807b584740498870bb274c4f9ba9e14f11f66ad44d9e9f8ba0caf2c236b3","first_seen":"2025-03-11T08:52:08.6073Z","last_seen":"2026-07-28T06:18:25.094456Z","times_seen":180,"resource_available":false,"data":null}},"time_used":1665,"timings":{"blocked":-1,"dns":0,"connect":316,"send":0,"wait":360,"receive":662,"ssl":327},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}