{"report_id":"5618dee9-9571-4bd9-932d-bbd73a4de79f","version":0,"status":"done","tags":[],"date":"2026-10-07T09:11:49Z","url":{"schema":"http","addr":"kavino.site/","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"kavino.site/","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"title":"Kavino","dom":{"size":62990,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62955), with no line terminators","md5":"f0d369a9522588e2509fa6a39c8a7e5f","sha1":"2dbb4b0dce8e561535f7450dc6ccc3842541fac4","sha256":"0b250c6378103b2727ec862acae27618d0738b7f5ac576e49886d49a4bbeff0a","sha512":"28d52de00cbda92885a37c59cba3bba1890a1c8f593d825ac1e94519ac06c1750967df7c27da1b7c6de46b14f68c9bb212c04887224d046919a9060baaddfbc8","ssdeep":"384:rM9RuZW33y/OG4Hrs6bZgNHFg2bZHKmaEtFtuorNnVr0oTKTpXBrhnJzkbZj1bZz:rM9RuZ63wOMDDaSD2DAW1U","tlshash":"4e53b851f109dd3de91b8f9cf27abf7650e9c298d526541cb2bc42220b87cb46ed3a84","dom_hash":"domhash695fb35b1128845fdd72cc1e3d6a961e","first_seen":"2026-10-07T09:11:53.338255Z","last_seen":"2026-10-07T09:11:53.338255Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kavino.site/","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T09:11:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":12}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"api.kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.kavino.site","ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-22","domain_rank":0,"first_seen":"2026-10-06T15:54:15.673846Z","last_seen":"2026-10-06T15:54:15.673846Z","alert_count":54,"request_count":10,"received_data":8224,"sent_data":5647,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"kavino.site","ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-09-22","domain_rank":0,"first_seen":"2026-10-06T15:54:15.675597Z","last_seen":"2026-10-06T15:54:15.675597Z","alert_count":216,"request_count":36,"received_data":1458983,"sent_data":17771,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/2corl6wyj4669.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4233f7577a6ac05df095b56d2a2d5f17","sha1":"0e765fa20082908caa2ba3fee4ff23826786c0aa","sha256":"34ed6abf4c6d0d1bb3dc56d3f133d2a5dbc3a3c89c791deab314e27143ac14ce","sha512":"1544f45a32c8316419fe954dc108776625d248e97d097d513e74f1e87fc8a62f098f9c2f578d3350fb5f323a0e7f51030b1a376f85616f0ac81e5108aa9c1dbb","ssdeep":"192:vqiLR3+XOR/ka7fRDRkGR4ksCEMzdcfpDe5cO28Ah5e6g01U6rED:vQOR/Z7fRDRkGbEMze05cO2uD","tlshash":"4b52437132d0f89122df89e5c4364019f26d1d7a219a70a4a7d6ccfe36d198de0a1fa9","size":14377,"data":"","first_seen":"2026-08-04T17:05:55.964083Z","last_seen":"2026-10-07T11:03:35.061819Z","times_seen":2577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/1cm8nczss7_lf.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"59524411cfd972f6162abf27bf524146","sha1":"1ae918eab4d47d1fd5f5bb94c1013ef9a853add2","sha256":"949cd0a40ba8d9be39ba9011072d771493b915635b9feb29fc209719271eb60d","sha512":"1d8991de87900e7efacf4c0895a6d3cbcec4bed38ef7193a985a75ee8bc0d1795d7198b66718f1f932fb92c3272e7493966119bca2c7a32116d9f11c6d419dcc","ssdeep":"384:BXjwFZIrHe3Mp/srbjiBPXp526qWnpFADvaw3W:ZKi/srviBvpQTjm","tlshash":"26b2b745b045aa9d7a570084d82f800ca13e6b58d80d883cf9fc7daa2d514ddbd9bff9","size":24566,"data":"","first_seen":"2026-10-06T15:54:25.026061Z","last_seen":"2026-10-07T09:11:53.345505Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/060h4wfe2obge.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6886d8c28cf517696b8bb2cb68ba546d","sha1":"212a9905ccfc06738834eed52294c1d91d33c0ba","sha256":"0db2fddc0ddaca26932b61b39f17c38a5d90468b41afe1aaaca85363a982280d","sha512":"ffdfa7d251674552cc08e86ff2b8b7324058fbbc56c76d77f060df3ae7d7c53339a4ae4d4926daaec8d35579668c2a6087dc3bfe72160a8687349767bba58335","ssdeep":"1536:XMj9xr21crE2vfX8JQXWHz4S7ejQ7R0gszFZT+YeC7Q0:gXX8JQXWHz4SijQ7kzFZT+O7Q0","tlshash":"d4632bc1b311a5a993974042d43e810af32e6a4c8809442cf67cbcfb7c699d5b6b3fb5","size":71074,"data":"","first_seen":"2026-10-06T15:54:25.017707Z","last_seen":"2026-10-07T09:11:53.375557Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/2whgxvw1v7cos.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9649abbf51087484876f7a6b2b4a0ace","sha1":"0d06395b1984843ca9b19ba10996488628774fc0","sha256":"545b539dd7fff0391a3d51719d32165e17a8b949a88e64111b87198f306a5a8c","sha512":"b62c0aeb4efe88a3202c9f1ce16ef50a4e7534c82a278b8c33e33b821cc57d8ee0a267c9d8e5c489b451de95c33b0f103f667dd942e86f4ca2541a396648dae4","ssdeep":"12288:BCcKTvjIBpV5DZkFgyPYySdaFq1O1jfjTp0GR23Buz:BhKTQVgpl","tlshash":"b4944cd47692f43587b352a2007f150bf23c7a1a185d9414f372dcdd78a988aa2bbf36","size":427274,"data":"","first_seen":"2026-10-06T15:54:25.05577Z","last_seen":"2026-10-07T09:11:53.388223Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/1mlftcslf095m.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f6f05f461f138af73e3a1801bbd59b3","sha1":"31a2d9ef7f888cfe739c035ac4e4b5e93507822e","sha256":"d9840d6de414f19d28fbe08cc2ddd0aeb95cf379864950a506592a54f4996f31","sha512":"b7806b3843f7a3c5c278a5f4d721b6ca30adca38cc9d1fc4dbbf05cc4c99507909a84669c52e7472afbdd758afdcd00b56c396525c88c5d6a570e17dfdf2a8bc","ssdeep":"192:5wMDhEBx0I+ofQZ91wco1HMyh3wZux/9QNwKDKw6PTIFIAw/w2:ZEb0IIRymC/mDKw6P1L","tlshash":"3742a422b2d5f8e1279b04950837600af2261c3a563db475b7e58df57a804debc27fe8","size":12653,"data":"","first_seen":"2026-08-08T15:14:37.522241Z","last_seen":"2026-10-07T09:11:53.411129Z","times_seen":407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/1d65cawsn6kc2.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9eac18470c21ddebeff0f767dd2aea9","sha1":"cf3de905111824941aaaeff3663edd087ea6d11b","sha256":"e95ff3ab1da019ba64f5c4165dc08ad68e29c9ffa1b6b762db341711ffd695d6","sha512":"622c8ff5d98fd18214dc47642d9e24b633ef0c136d75af5171ccf4189bbab7b590108f53b5910163128c4b104ba166f9b5309f767badd6a4fb893211e19ed952","ssdeep":"3072:nLtfw+z/K36NQ4BICvoTYhoSCks/OuzY7wpeDRJm2vz:nLtfw+z/K36NQ4do/2ieDRJm2vz","tlshash":"8b24fbe83955f6626ab302b710af1803b338252b280d4d60b351fdddb57845eb17bf9a","size":229617,"data":"","first_seen":"2026-10-06T15:54:25.03972Z","last_seen":"2026-10-07T09:11:53.414844Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f027efc6b351a5a4598a9e1e6ae93c5","sha1":"b611186ae50f64e4a0fce563890597a4d638308d","sha256":"c7e4814e186b708484173646794800e2669153f71b90f22510871ab4eb493294","sha512":"b9d9c0e7d85c4b9637618c1aa97ca7824191c255073173d613ee37bcddc6348290c7d03f9a78ce3372296b8a08f5d9b3ed2195ebab42082157dd38def66cc5bb","ssdeep":"","tlshash":"50d023bc731511070451097dd05e9de43d37341076114111f52e45248c06fdd0353d55","size":224,"data":"","first_seen":"2026-10-06T15:54:25.056755Z","last_seen":"2026-10-07T09:11:53.417066Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-10-07T11:41:11.403986Z","times_seen":282691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"33c6912d2a8b5c86eb61f62e3a0f6be4","sha1":"a67084b0f4419911bd35b09b7553def78b6f4155","sha256":"5300f335337cb3731efd820e94ae46213a6bda956622c1d6c5ed8d84e9c64699","sha512":"b06755eb44f645938f1a444eeb51789e061fbd36bdb95bc15d475472cc1a76425eaab06065bcf2e7d9b8d47cc9d677613eb6087657be75153b1370bc0d45ffb8","ssdeep":"96:LsjvOegGLZ7cg1xqzc/xmWaXPB9KLTrnZKQdf:QFCgnqzcpmgD","tlshash":"2802995fec09ed0aed6aec6e013f5f7684c8cd7782b18978a28cce880a1247617d5dc1","size":8902,"data":"","first_seen":"2026-10-06T15:54:25.058581Z","last_seen":"2026-10-07T09:11:53.419624Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/turbopack-3lzzub0dlel26.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aaad88b9a4bd1ad2f157a12d7aeeadf8","sha1":"e414d1fdac658e72acc33e50fc9c42e1a829e2b2","sha256":"73a90b4d9010ef5225a9f00976989e2ab59f0258f8d8b8bb57acd5e8dd31e99b","sha512":"3723c2f86ed8c405d17514137c5a1361e009cea06e3b3334f83dca857fc64a1b0c817d797f51b69b88f18fb5fa8ff3de07d5e029db73f0f4c23b0ea9689cf449","ssdeep":"192:/nqdj6pb8YWDl0IFre89uQBT4qd3bY/WTNlayTBtS:/nqdeO/0cvFztcOFm","tlshash":"8212c9da37e1f43353afa5ebd07b4400e2ba8569081e142cd39ca8f6387455a81e7f76","size":9721,"data":"","first_seen":"2026-10-06T15:54:25.016344Z","last_seen":"2026-10-07T09:11:53.34458Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/3dzbae53ebpvc.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6db33d29ba6c24f11c3197331aa2dc7","sha1":"0baebd84c2a795c04e8f27a19a32a9e52edf5f5e","sha256":"f08ee844b212914bee01d8b209048b01db60fe797fa226094035300bfde23d93","sha512":"58ea3e8229026358659b5258d3abab485294abec313a7fc20171763cd07e2c9db172d8ed52388489945b82fd6458ca2bf663cb152575ee09f762ecd558f9ab6d","ssdeep":"384:nhTzjrhTkAnxrf1LzXE4/7b/UO6Jw6xmMX59FK4fvASa70IMVBX/lPFLac:nhTzjVkq7/7LUO6ZxI4f/v5h","tlshash":"cba28445a449beec792b08cc996f801c652e1f68d60e8878f9fc7cb51a240d5ba47fcd","size":22414,"data":"","first_seen":"2026-10-06T15:54:25.051474Z","last_seen":"2026-10-07T09:11:53.394249Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/0b2w2__tx6nn_.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"abffeeea8203cb47f9ce0a67c53c37d3","sha1":"87723c6718843e3733163164387d402392c7ca9a","sha256":"d329cdad294c229727996ecb680daafb3e18766aec36301ca99df84551af9edf","sha512":"6769d270bd02a3eecbff56fd264b89313f4459da142bbd7992123b4672ffe694c0d439a0cc91e2e9fdc79fc16af245daca9d3afb6f1420d54273c69f7cc3d916","ssdeep":"96:0HJXEb+C2rS3iSM3eLTVg1M1KFloEm20pn3jvIABk5CaVSVCAbNTSotJ9Ch1zDtS:0nu33cevWM2NocstJ9ChHN6pIJi","tlshash":"ac122298705aaeec791b4c85196fd00c227e7bacc80a84717cbdac751d984d47a47fc6","size":9111,"data":"","first_seen":"2026-10-06T15:54:25.04784Z","last_seen":"2026-10-07T09:11:53.379198Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/0lw5zj5zei5-z.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"085368e9f7c5383cc92534ba6491fe6a","sha1":"827bdf923282ae1cc2a450f83941b4b79b52a072","sha256":"f893b01c6c20edca91b5b6182a799d55f597db16689cc2f43663e1c9faf391ef","sha512":"40e355a08732dd76ef98ec85aa8473712d71ebc0d6cf5220d6c4ee5b211cc4c241ebe3aeaad27fbee6f36834da0327a90384a0e4c7abe7067c9b5692d20bdcb3","ssdeep":"384:kuUbiRcWsmBYjUgeYS2IOiXo39wObLPa+blDTU/wLEhAMiK66IbvHZHVEe:kheRhV4Pa+blDTUdGK66IjP/","tlshash":"97c294599099befcb95a488c996f501c766e2b9cc60e0474faf87c3518184c4be83fce","size":26802,"data":"","first_seen":"2026-10-06T15:54:25.046496Z","last_seen":"2026-10-07T09:11:53.390383Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/0ws7t_wz4dvp7.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"15adc80f6aa4dfd89de91b6c1a9a284d","sha1":"48412382b3aa2332395967f5751718b464b95d66","sha256":"a4590375a64190f57d18b357bf576bf111bd5f02f3c93cad0f65fdf176689f46","sha512":"6b69925d1868f234111d4969d484becae33bcc180c5eca14d80e5c3f86c5c183b3a014f0ad5fa673c1774081425249fe9004ab4af4c167b5d01a4441901fa3a7","ssdeep":"384:shC/sWgYjYvz7c+0PJjRR8GnCYjEsR52xOlukqLoKvWNfp2g+1M7:stWgq2YjEsR59luRo+spmM7","tlshash":"c3e294a971d4f5d107a394e4803f401bf23d1c76246db4a0a3e2dceab9e554ec172faa","size":31346,"data":"","first_seen":"2026-08-06T19:27:49.250392Z","last_seen":"2026-10-07T11:03:35.055713Z","times_seen":527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/421rgzgr1grno.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d70afd6f2d418baeee5912b0f1482822","sha1":"8afd90ef958bd6207d62320161344cae1a52c321","sha256":"1a3218fc3944aac3bc51c5b195d4ef69ec37b4da0b54de9f9a19d0ea80872cba","sha512":"c1883537daae550881cddb258637a2d620b86e36b0c087e458a0b79074d798321988e33e4cda6c5feb08bc45993611a3dadf31dff7a9521b6b4259d794992610","ssdeep":"3072:n5mdU1lYSVQC3lOYVUrpTzMTSoFerkNwspVt:n5mdU1llQC3lOwUrp0ferkNwC","tlshash":"45d35b2a3206167b27ef43c5e41d4605f2684612948e4c18f1eeceb5a795f8db1bbf38","size":133915,"data":"","first_seen":"2026-10-06T15:54:25.054642Z","last_seen":"2026-10-07T09:11:53.340527Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/3-5krlkokuzlg.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6070e258efacb753198b071e02703324","sha1":"44decf19d8e504d23eea5e3e57967692ec7f3cfb","sha256":"241fe46cff69c86ba334ff033e501a9755a46a7a0e9481b2a6e527e5e1bacdca","sha512":"209a79c0b4d31d97aa7d87a5ff42cf5d22c40a2e2f3db1283e2a460ee31b7227f11c1ac5eff1639fdbe17931f5b8567f94661a977cd85448b8792e4f4dc1c1b2","ssdeep":"384:K46qFBW3ZTXD+XH3tG7mYKEoRPzq4pkdts2Cy7Sfas+bgP+TNDzN0gvd0TiePXMO:bDBWJTzYH3tlY6lmDRCh+A8NyKdkFr","tlshash":"06f2d8997194b9d87a5b4588486fc00cb13e2b2cc40e4474f7f9acba2a649cd74d7fca","size":34764,"data":"","first_seen":"2026-10-06T15:54:25.049942Z","last_seen":"2026-10-07T09:11:53.3868Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/27_r38vobnvdb.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"51aff62cfdc1160faa777db6e14b01dc","sha1":"f4a54893adf6c652b26b3406822e0a848e58fc24","sha256":"9395650a7713525c2e99b4c7e06d3807260a2d4751142b0bfe1cdcee7ffa049b","sha512":"833b761837f3eb6ad4b761522f02abee3f14de8063825891e2817513182b6b66835fe7ae7b30b3ca41abca57e0705f5b2f5e3622a58110c7c437760518118e20","ssdeep":"192:HF8zgMlCOyHpEgyMqkKnmWAGzaowglAZH2naGiqMig07Lm94+iiuplVbWmYZOqVD:HuhvyHpE5iuNQUMRii4lVHIOqF/hmiLH","tlshash":"2a926348a05abbec7a1b5c8ca92f805c326e0b5cc519043df9bc7d79265c4987947fcc","size":20330,"data":"","first_seen":"2026-10-06T15:54:25.041715Z","last_seen":"2026-10-07T09:11:53.383735Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/2y3fry_uz0u19.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c234dfe5e3f469d5ca754f11b1f06a1","sha1":"043cdff2951f79e7615ab447792f7615cd6b9288","sha256":"5f00acb9f16bfb9849d59986f50d267cbacd2d3be60f2c76ce21c5e0634142f8","sha512":"622761e66bd3b39e238feb3b1b154332dca08cf3d5a64061868e2179389770e067cbb55d5dcc8efb49e66481944652681a617f83626873fdc66800a1681f06a9","ssdeep":"96:ZHzZXvD9+saz3QXAkEZJq3nj1iHC9ofUsRQ141PpeXetiJ/60z:5x79+HKAJE32EXXuif","tlshash":"c8b16582605aadecaa5a0488a12fc00c751e3f48c91fc538b5fc7c7d2d265d5bd96bca","size":5210,"data":"","first_seen":"2026-10-06T15:54:25.033713Z","last_seen":"2026-10-07T09:11:53.399352Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/3iesb8oz5vwne.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"44e719fe1cba1809e22786098e2463b6","sha1":"6e438eb14e47264ca1910ed25157e1a01e7380d2","sha256":"3fb6ea089cc7464d1a64a00680113f8b9818f8d7c3502fb711120d8fd4205ecc","sha512":"964a149f56e06a05426a941f054d0e0d2402cdd9fe5313842c41c24454eb119ebf10ee21d8081d4c2899f46f04a086cbddf104ea4f81eecc51d02faa384ea69e","ssdeep":"3072:lQGKXAtOxpAq8jNCGR96fpnyZp5BbRICegfl:lQHAtOxptkCGRnZp5BbRIrgfl","tlshash":"c3e3e7f935d5f4820bab54aac03f0006f22c4d77189d6860e3e5dcda752465de2e3faa","size":156008,"data":"","first_seen":"2026-09-25T11:20:39.502604Z","last_seen":"2026-10-07T09:11:53.38548Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/421rgzgr1grno.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:17.990Z","timestamp":1791364277990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /_next/static/chunks/421rgzgr1grno.js HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kavino.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 165695\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"421rgzgr1grno.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 07 Oct 2026 09:11:17 GMT\r\netag: W/\"d70afd6f2d418baeee5912b0f1482822\"\r\nlast-modified: Mon, 05 Oct 2026 11:09:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/421rgzgr1grno.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nstmn-1791364277994-597ce1ccdf49\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":133915,"size_decoded":45223,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65251), with no line terminators","md5":"d70afd6f2d418baeee5912b0f1482822","sha1":"8afd90ef958bd6207d62320161344cae1a52c321","sha256":"1a3218fc3944aac3bc51c5b195d4ef69ec37b4da0b54de9f9a19d0ea80872cba","sha512":"c1883537daae550881cddb258637a2d620b86e36b0c087e458a0b79074d798321988e33e4cda6c5feb08bc45993611a3dadf31dff7a9521b6b4259d794992610","ssdeep":"3072:n5mdU1lYSVQC3lOYVUrpTzMTSoFerkNwspVt:n5mdU1llQC3lOwUrp0ferkNwC","tlshash":"45d35b2a3206167b27ef43c5e41d4605f2684612948e4c18f1eeceb5a795f8db1bbf38","first_seen":"2026-10-06T15:54:25.054642Z","last_seen":"2026-10-07T09:11:53.340527Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/icon.svg","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:18.074Z","timestamp":1791364278074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /icon.svg HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kavino.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 101708\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"icon.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 07 Oct 2026 09:11:18 GMT\r\netag: \"ac0e30fdebc0b9cecf003482022840c8\"\r\nlast-modified: Tue, 06 Oct 2026 04:56:09 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /icon.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nstmn-1791364278078-ebd94fe7d140\r\ncontent-length: 211\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":211,"size_decoded":751,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac0e30fdebc0b9cecf003482022840c8","sha1":"532c3d43b4e5bef85b07df311e245f5bcaf4e01d","sha256":"a7340353076577b87c59ed60304e6ba13b30ce793a4efbeeebb4f7e4c717ef36","sha512":"bad550d67a487a14a64b8ff179215a2e5df5fca1f1d6417a79d42f7de0c854eca2a4359980bf608ef0b05bd2600e968d10a140b88d94feb6d68e9722764c6883","ssdeep":"","tlshash":"22d02355c5ace5c4551442319fdd7996112351c512c402edf4d42514b1057f2ec0564d","first_seen":"2026-10-06T15:54:25.036861Z","last_seen":"2026-10-07T09:11:53.341466Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kavino.site/transactions?needsReview=true\u0026pageSize=10","fqdn":"api.kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:20.575Z","timestamp":1791364280575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 04:34:12 GMT","end":"Tue, 22 Dec 2026 04:34:11 GMT"},"fingerprint":{"sha1":"7D:00:D1:C5:7F:89:56:3A:53:69:71:6B:41:9A:A4:33:DB:9C:5E:93","sha256":"46:0D:74:AC:FF:51:BF:3F:55:FE:64:5A:83:1E:3E:28:12:5B:F7:A9:D6:F8:BF:21:79:95:04:AA:80:36:8F:BD"}}},"request":{"raw":"OPTIONS /transactions?needsReview=true\u0026pageSize=10 HTTP/1.1\r\nHost: api.kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://kavino.site/\r\nOrigin: https://kavino.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 09:11:20 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mGsHbYyadOGHo5yE%2Fuyv0omLIA%2FWNTzXeX5ei0EAnL3hqrpy2uzys8YhLyPBsd%2BR3flOb%2B1DwN6khIgxqGUEstNnXxX20OtIzfchlplglWiCr5LbwtD%2BhDPxemg5Qy9UIPo%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kavino.site\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-headers: authorization\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46bc7219b401a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":781,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T11:41:02.815504Z","times_seen":18913144,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"api.kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/media/797e433ab948586e-s.p.1v5bejj26fx9h.woff2","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:17.970Z","timestamp":1791364277970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /_next/static/media/797e433ab948586e-s.p.1v5bejj26fx9h.woff2 HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kavino.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 473\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"797e433ab948586e-s.p.1v5bejj26fx9h.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 07 Oct 2026 09:11:17 GMT\r\netag: \"cd5b25781181c5c03d99ac2cbf88016a\"\r\nlast-modified: Wed, 07 Oct 2026 09:03:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/797e433ab948586e-s.p.1v5bejj26fx9h.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bjnxb-1791364277975-f99b79459fb8\r\ncontent-length: 23108\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":23108,"size_decoded":23726,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23108, version 1.0","md5":"cd5b25781181c5c03d99ac2cbf88016a","sha1":"0e04bb6e7b54057d64c421b959c8c22774ae632d","sha256":"5f3d6ad60f29d6cb708414ec6887163d63bf197377ef5417d2483ff31ace6c3b","sha512":"f41989a87c7438a19dff3325c3546aaad0039f2433b4fe8550f3831bb01acfae9956c3e6d402d83fb6c38df647156cab2e4ed2ccc321007e858760e9af7ffe6e","ssdeep":"384:4CAnZnTSz1wLaDPA2knsJ9ufQnGaWPegCLyUrMF97Vg8RWP94KiBjJRMbkcYCaXp:4CAQzec94U9uonMP7BF97V9RWl4KyLMW","tlshash":"aea2d004c129ac1911b6017780694ce99eef64d51cac357f9cbe2cbaddb5252fc3be28","first_seen":"2026-06-08T23:37:37.659571Z","last_seen":"2026-10-07T10:45:45.57767Z","times_seen":19109,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/turbopack-3lzzub0dlel26.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:17.982Z","timestamp":1791364277982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-3lzzub0dlel26.js HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kavino.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 101708\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"turbopack-3lzzub0dlel26.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 07 Oct 2026 09:11:17 GMT\r\netag: W/\"aaad88b9a4bd1ad2f157a12d7aeeadf8\"\r\nlast-modified: Tue, 06 Oct 2026 04:56:09 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/turbopack-3lzzub0dlel26.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tcnd9-1791364277987-5db4e2466d34\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":9721,"size_decoded":4620,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9721), with no line terminators","md5":"aaad88b9a4bd1ad2f157a12d7aeeadf8","sha1":"e414d1fdac658e72acc33e50fc9c42e1a829e2b2","sha256":"73a90b4d9010ef5225a9f00976989e2ab59f0258f8d8b8bb57acd5e8dd31e99b","sha512":"3723c2f86ed8c405d17514137c5a1361e009cea06e3b3334f83dca857fc64a1b0c817d797f51b69b88f18fb5fa8ff3de07d5e029db73f0f4c23b0ea9689cf449","ssdeep":"192:/nqdj6pb8YWDl0IFre89uQBT4qd3bY/WTNlayTBtS:/nqdeO/0cvFztcOFm","tlshash":"8212c9da37e1f43353afa5ebd07b4400e2ba8569081e142cd39ca8f6387455a81e7f76","first_seen":"2026-10-06T15:54:25.016344Z","last_seen":"2026-10-07T09:11:53.34458Z","times_seen":4,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/1cm8nczss7_lf.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:17.987Z","timestamp":1791364277987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /_next/static/chunks/1cm8nczss7_lf.js HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kavino.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 165695\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"1cm8nczss7_lf.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 07 Oct 2026 09:11:17 GMT\r\netag: W/\"59524411cfd972f6162abf27bf524146\"\r\nlast-modified: Mon, 05 Oct 2026 11:09:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/1cm8nczss7_lf.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bjnxb-1791364277992-6196ffcdb458\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24566,"size_decoded":8611,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24566), with no line terminators","md5":"59524411cfd972f6162abf27bf524146","sha1":"1ae918eab4d47d1fd5f5bb94c1013ef9a853add2","sha256":"949cd0a40ba8d9be39ba9011072d771493b915635b9feb29fc209719271eb60d","sha512":"1d8991de87900e7efacf4c0895a6d3cbcec4bed38ef7193a985a75ee8bc0d1795d7198b66718f1f932fb92c3272e7493966119bca2c7a32116d9f11c6d419dcc","ssdeep":"384:BXjwFZIrHe3Mp/srbjiBPXp526qWnpFADvaw3W:ZKi/srviBvpQTjm","tlshash":"26b2b745b045aa9d7a570084d82f800ca13e6b58d80d883cf9fc7daa2d514ddbd9bff9","first_seen":"2026-10-06T15:54:25.026061Z","last_seen":"2026-10-07T09:11:53.345505Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/settings?_rsc=5CB68i4pnAekjehf","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:18.280Z","timestamp":1791364278280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /settings?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kavino.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1049218\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/x-component\r\ndate: Wed, 07 Oct 2026 09:11:18 GMT\r\netag: \"d844b5a0d43b65ccd3d19516a7e5bc0a\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /settings.segments/_tree.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bjnxb-1791364278283-3d2b70ac793f\r\ncontent-length: 552\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":552,"size_decoded":1215,"mime_type":"text/x-component","magic":"ASCII text","md5":"2a525f7bcd917d433a846d055ef4ca23","sha1":"e44e20c27ecafd1fab2f1c883fba423094877a34","sha256":"84319959e585cf07cc5d0e5640967f6e0e6329714e9f54a4b86de4cfdfe4819e","sha512":"bbdb5aa8a13aef8c0b26b0a909a798f23d0adb533623c9041a2340b19805219e757aae160e1e898d539b112732f92891b6bbf1939d100f50d8ea8936cc59069e","ssdeep":"","tlshash":"b0f050718a096dc4acf0d4a8625beb1b14786a3370b68dd8ccdecd90077503e2b46787","first_seen":"2026-10-06T15:54:25.040821Z","last_seen":"2026-10-07T09:11:53.349418Z","times_seen":4,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/sharing?_rsc=AE8MKoJQFAg458oz","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:18.313Z","timestamp":1791364278313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /sharing?_rsc=AE8MKoJQFAg458oz HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kavino.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /sharing/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1049218\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Wed, 07 Oct 2026 09:11:18 GMT\r\netag: W/\"c00c5004b237a854d7e4ee60967ca3e6\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /sharing.segments/sharing/__PAGE__.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qphlg-1791364278317-af98778a07da\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6895,"size_decoded":2592,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4387)","md5":"8b35218239f56bfb11c3022a735e5a66","sha1":"4b0ca30537c0e73445787dca2554eb6596f3c322","sha256":"d491de3bd959ac40989b084c2fe5bba21fc992283fb76d3fb84fac11e6f7ebfc","sha512":"e906aed718d6fc94c86afff548c6ffb3bc2c124238fe3eab48c5f60a1738a81be1709952db1c9bce6cfd21e33be9627ec8202ca4c3a1a4f09725571fa1f54434","ssdeep":"96:DZ/28GDHQnhhbFQKcqS7fUHDAz/kM/VmSH:keb2qS7IAz/HNdH","tlshash":"95e1ce3bca09ed5e1db6cc9c181fd326928d493bd6740da9e3ccdda806441762f862d2","first_seen":"2026-10-06T15:54:25.012686Z","last_seen":"2026-10-07T09:11:53.359529Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kavino.site/recurring/upcoming?days=30","fqdn":"api.kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:20.582Z","timestamp":1791364280582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 04:34:12 GMT","end":"Tue, 22 Dec 2026 04:34:11 GMT"},"fingerprint":{"sha1":"7D:00:D1:C5:7F:89:56:3A:53:69:71:6B:41:9A:A4:33:DB:9C:5E:93","sha256":"46:0D:74:AC:FF:51:BF:3F:55:FE:64:5A:83:1E:3E:28:12:5B:F7:A9:D6:F8:BF:21:79:95:04:AA:80:36:8F:BD"}}},"request":{"raw":"OPTIONS /recurring/upcoming?days=30 HTTP/1.1\r\nHost: api.kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://kavino.site/\r\nOrigin: https://kavino.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 09:11:20 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LYQczx3PsBhyDBq5LZYyyAvTSkup0lKCdpaqpN2QX8Hg0cjOhku1lbygOELvbsgN2VMKceCvRqBzCqFYOjuzaOospDV2PslJwLzqZ%2BZI4bFZ6EeWZcTU8F%2BbtQvjMyv%2BNqE%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kavino.site\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-headers: authorization\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46bc721ab461a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":777,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T11:41:02.815504Z","times_seen":18913144,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"api.kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/settings/account?_rsc=T7qTQ0J4Ochll9oO","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:20.615Z","timestamp":1791364280615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /settings/account?_rsc=T7qTQ0J4Ochll9oO HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kavino.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /settings/$d$section/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1046624\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Wed, 07 Oct 2026 09:11:20 GMT\r\netag: W/\"0d7f7aa187418c9b45199455cb715c90\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /settings/account.segments/settings/$d$section/__PAGE__.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bjd6h-1791364280619-aff67f08a680\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":7110,"size_decoded":2636,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4584)","md5":"fcea38b7df6a5a0ba7c6b99369e1f8cf","sha1":"a0e86818fbdbb3bb972c887e5f9b248c7eae21ad","sha256":"81eef0f38e397b2c75eea8af8600c8ccfac0d510aed03d8bd2f3937543978384","sha512":"f49f458a00b612a083a9fb54f0b1f437e96f49ea93dcadd6b8ae4634854a15f35ba334c6b20b7e5f9c86245ea3c5c900f0240ad9d0db8282475e34d119ce61ff","ssdeep":"48:a70nv0lH70nv0ek70nv0bR70nv06v70nv02q70nv0P0e70nv0PJ70nv0p970nv00:B8GWQnhhbFQZacqz3fUHDAz/kM/VTZPS","tlshash":"d3e1dd3bca09ed5e1db6cc9c581fd326928d493bd6740da9e3ccdda807442762f862d2","first_seen":"2026-10-06T15:54:25.030371Z","last_seen":"2026-10-07T09:11:53.360874Z","times_seen":4,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/?_rsc=5CB68i4pnAekjehf","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:18.275Z","timestamp":1791364278275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kavino.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1049218\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/x-component\r\ndate: Wed, 07 Oct 2026 09:11:18 GMT\r\netag: \"89f7c84d07d089639d4e89f0df13669f\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /index.segments/_tree.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bjnxb-1791364278279-e65bcb208f14\r\ncontent-length: 477\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":477,"size_decoded":1137,"mime_type":"text/x-component","magic":"ASCII text","md5":"854547d85b76bdccfdaafc93fb9bdd73","sha1":"007f056032ae3241f51980c44cc670d418db2732","sha256":"8da8fa69c591c4816a8599fc072cb34b145c5d2411d508dec929ead047afd8b2","sha512":"62a51321895af2efd7644428376a5641e5f7be44bfdd87f43b8fd9411ad8f8ab8fb0539e68dfcde30980dad4d3336ffa46463fdaed25e6bfba79cfa4baa63016","ssdeep":"","tlshash":"97f05c61c6096dd498f0d4a9625bd71710747e33b0ba8dd8c8dfcd940ba90392f86747","first_seen":"2026-10-06T15:54:25.019206Z","last_seen":"2026-10-07T09:11:53.362846Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/?_rsc=8nTjltbQWvg6NcbE","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:18.303Z","timestamp":1791364278303,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /?_rsc=8nTjltbQWvg6NcbE HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kavino.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1049218\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Wed, 07 Oct 2026 09:11:18 GMT\r\netag: W/\"e80c5be0dbca6dbbffdb514d3e316b6b\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /index.segments/__PAGE__.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dkd47-1791364278307-56840724fa2d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6850,"size_decoded":2586,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4324)","md5":"6defd44fa696ad67c512e09e674c3bca","sha1":"2fb6e0b58cabc72330f500126f3a141bef7b09bc","sha256":"e735f8ce99b85af23849997c6b46c318a09caab63ebe63f5dcbed3e33d6a38c0","sha512":"90438fda28529c0cbc2e543f50ddb79143d36683919dc3f5b0d129505d36ff34a8c1e18139d61e31af1b51cea8e15f8be00e240187ce6a9bb70c80970d294638","ssdeep":"48:P70nv0lvY70nv0ew70nv0bR70nv06v70nv0/70nv0M70nv0Pk70nv0r8rq70nv0A:N88HQnhhlFdcq0NfUHDAz/kM/V0AQ","tlshash":"6ce1df3bce09ed5e5db6cc9c181fe326928d493bd6700dade38cdda802451762f862d2","first_seen":"2026-10-06T15:54:25.045494Z","last_seen":"2026-10-07T09:11:53.373909Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kavino.site/reports/timeseries?sourceId=6ac60cb6c2064b14f6a1269e\u0026from=2026-10-01\u0026to=2026-10-31\u0026groupBy=day\u0026includeShares=true","fqdn":"api.kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:21.159Z","timestamp":1791364281159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 04:34:12 GMT","end":"Tue, 22 Dec 2026 04:34:11 GMT"},"fingerprint":{"sha1":"7D:00:D1:C5:7F:89:56:3A:53:69:71:6B:41:9A:A4:33:DB:9C:5E:93","sha256":"46:0D:74:AC:FF:51:BF:3F:55:FE:64:5A:83:1E:3E:28:12:5B:F7:A9:D6:F8:BF:21:79:95:04:AA:80:36:8F:BD"}}},"request":{"raw":"OPTIONS /reports/timeseries?sourceId=6ac60cb6c2064b14f6a1269e\u0026from=2026-10-01\u0026to=2026-10-31\u0026groupBy=day\u0026includeShares=true HTTP/1.1\r\nHost: api.kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://kavino.site/\r\nOrigin: https://kavino.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 09:11:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bgdRrvc9%2BRj4YZdqM6uVHCiSe0Rf20KTYJQUkFCKD31mU7r56wrhX%2Bs%2FLGf%2B8gmnQOJKCIRF2%2FmFNU8D9sODgLxqiEruDJXP98tIfSRJbGO9XHXJrQjqGlJl%2Bi5aD6wzGLA%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kavino.site\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-headers: authorization\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46bc7253cb61a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":783,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T11:41:02.815504Z","times_seen":18913144,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"api.kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/060h4wfe2obge.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:17.989Z","timestamp":1791364277989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /_next/static/chunks/060h4wfe2obge.js HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kavino.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 165695\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"060h4wfe2obge.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 07 Oct 2026 09:11:17 GMT\r\netag: W/\"6886d8c28cf517696b8bb2cb68ba546d\"\r\nlast-modified: Mon, 05 Oct 2026 11:09:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/060h4wfe2obge.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t2m2q-1791364277992-3d1a9d9e6c9f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":71074,"size_decoded":23668,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"6886d8c28cf517696b8bb2cb68ba546d","sha1":"212a9905ccfc06738834eed52294c1d91d33c0ba","sha256":"0db2fddc0ddaca26932b61b39f17c38a5d90468b41afe1aaaca85363a982280d","sha512":"ffdfa7d251674552cc08e86ff2b8b7324058fbbc56c76d77f060df3ae7d7c53339a4ae4d4926daaec8d35579668c2a6087dc3bfe72160a8687349767bba58335","ssdeep":"1536:XMj9xr21crE2vfX8JQXWHz4S7ejQ7R0gszFZT+YeC7Q0:gXX8JQXWHz4SijQ7kzFZT+O7Q0","tlshash":"d4632bc1b311a5a993974042d43e810af32e6a4c8809442cf67cbcfb7c699d5b6b3fb5","first_seen":"2026-10-06T15:54:25.017707Z","last_seen":"2026-10-07T09:11:53.375557Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/integrations?_rsc=yt6zR0N9zgfqFSMp","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:18.305Z","timestamp":1791364278305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /integrations?_rsc=yt6zR0N9zgfqFSMp HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kavino.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /integrations/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1049218\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Wed, 07 Oct 2026 09:11:18 GMT\r\netag: W/\"369f86eae4574a62db36eb9aaacbc945\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /integrations.segments/integrations/__PAGE__.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bjnxb-1791364278309-a3dd34f811ff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6901,"size_decoded":2604,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4387)","md5":"e40cc0110c3541ec0769151e8b905f3a","sha1":"78a59711cdf15a298207bf88473bcb9a24166101","sha256":"b64423f8ce059a1b6eb219667757dc9b1ab586558e22663ad0dd9dc13caddf0c","sha512":"75953b587a62968eff12bc86b634aa8b0314e27923afdc3d730bc3ece42c922d13ad4dc9eaf40a64b7a83ccc763c01ea4fc7a9d92314524dd51c76453ac9a844","ssdeep":"48:D70nv0le70nv0ek70nv0bR70nv06v70nv02q70nv0P0e70nv0P070nv0c70nv0Pm:O8GNQnhhbFQKcqS7fUHDAz/kM/VmSH","tlshash":"e8e1dd3bca09ed5e1db6cc9c181fd326928d493bd6740dade3ccdda806451762f862d2","first_seen":"2026-10-06T15:54:25.053197Z","last_seen":"2026-10-07T09:11:53.376427Z","times_seen":4,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/settings?_rsc=DROqpzYuhFJcAG-b","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:18.307Z","timestamp":1791364278307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /settings?_rsc=DROqpzYuhFJcAG-b HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kavino.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /settings/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1049218\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Wed, 07 Oct 2026 09:11:18 GMT\r\netag: W/\"8e067d0b7e1c5dd29a39a36db7495c7c\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /settings.segments/settings/__PAGE__.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qphlg-1791364278311-dfe1302d5f60\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6897,"size_decoded":2588,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4387)","md5":"da1a06925bca10195ac9bf7e9f66787b","sha1":"faa79883a5dddfa91cc89f843cd431926339e054","sha256":"4508a624ebd41d960792f9258dcaed8e596c626ce28e25bfa8a4d295e8a3427e","sha512":"e325ee1e617787946941c5126314755e0b61e3a5f953804a387650204b23ac4e52161d516254566b86ddc2aa388a2556b7b543f80a62bf01d2a5f36e317459e8","ssdeep":"48:a70nv0lH70nv0ek70nv0bR70nv06v70nv02q70nv0P0e70nv0P070nv0c70nv0PF:28G8QnhhbFQKcqS7fUHDAz/kM/VmSH","tlshash":"3de1ee3bca09ed5e5db6cc9c181fd326928d493bd6740da9e3ccdda807442762f862d2","first_seen":"2026-10-06T15:54:25.022737Z","last_seen":"2026-10-07T09:11:53.378101Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/0b2w2__tx6nn_.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:18.337Z","timestamp":1791364278337,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /_next/static/chunks/0b2w2__tx6nn_.js HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kavino.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 472\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0b2w2__tx6nn_.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 07 Oct 2026 09:11:18 GMT\r\netag: W/\"abffeeea8203cb47f9ce0a67c53c37d3\"\r\nlast-modified: Wed, 07 Oct 2026 09:03:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0b2w2__tx6nn_.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dkd47-1791364278341-c188e8aa87e3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9111,"size_decoded":3923,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7040)","md5":"abffeeea8203cb47f9ce0a67c53c37d3","sha1":"87723c6718843e3733163164387d402392c7ca9a","sha256":"d329cdad294c229727996ecb680daafb3e18766aec36301ca99df84551af9edf","sha512":"6769d270bd02a3eecbff56fd264b89313f4459da142bbd7992123b4672ffe694c0d439a0cc91e2e9fdc79fc16af245daca9d3afb6f1420d54273c69f7cc3d916","ssdeep":"96:0HJXEb+C2rS3iSM3eLTVg1M1KFloEm20pn3jvIABk5CaVSVCAbNTSotJ9Ch1zDtS:0nu33cevWM2NocstJ9ChHN6pIJi","tlshash":"ac122298705aaeec791b4c85196fd00c227e7bacc80a84717cbdac751d984d47a47fc6","first_seen":"2026-10-06T15:54:25.04784Z","last_seen":"2026-10-07T09:11:53.379198Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.kavino.site/socket.io/?EIO=4\u0026transport=websocket","fqdn":"api.kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:20.584Z","timestamp":1791364280584,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 04:34:12 GMT","end":"Tue, 22 Dec 2026 04:34:11 GMT"},"fingerprint":{"sha1":"7D:00:D1:C5:7F:89:56:3A:53:69:71:6B:41:9A:A4:33:DB:9C:5E:93","sha256":"46:0D:74:AC:FF:51:BF:3F:55:FE:64:5A:83:1E:3E:28:12:5B:F7:A9:D6:F8:BF:21:79:95:04:AA:80:36:8F:BD"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: api.kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kavino.site\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 5RRa1pbvUn6njDIW9P7MZw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 07 Oct 2026 09:11:21 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 0r+UbEvoRDd5RvrIBzID3n8QuyM=\r\nAccess-Control-Allow-Origin: https://kavino.site\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z84CY3wRZcnzC6U5Yl84XMNuDr3Z5MWr2GXFv%2FFXqMXkRK37O6NE9APver6syWLQ%2FFX1RSiDp6BJrIyUUvLxWcZoCF7iJkyZHbnfn2HePuL2k6TezXhFS8WOQQ2gTRtSc6M%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a46bc721dac0b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":697,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T11:41:02.815504Z","times_seen":18913144,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":21,"connect":24,"send":0,"wait":410,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/sources/6ac60cb6c2064b14f6a1269e?_rsc=tXyZJ52UQVBCVsD3","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:21.331Z","timestamp":1791364281331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /sources/6ac60cb6c2064b14f6a1269e?_rsc=tXyZJ52UQVBCVsD3 HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kavino.site/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Wed, 07 Oct 2026 09:11:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /sources/[id].rsc\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::8x8n5-1791364281343-5c6e80058fe8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2646,"size_decoded":1424,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (983)","md5":"821eec6320f19855137560fc6ab82e86","sha1":"fd4735cb96a644649837127ba12d13bb06b4c353","sha256":"72db5531643c9fa74440e8a4465b10ced27a0ebb4ab6ce0ee75a6021f1afd4ec","sha512":"f3c555a21c2dc517a478b33c15d485213c4ebb301971f306bfdb002ca301be0b3d2ddf1fadb1bb709c7165c65b2f1d227a886647326a14c12dddc01e514a68b6","ssdeep":"","tlshash":"8851f077c905ec1f5eb7cd9c544fa316568d8a3b8bb01dead44c8c1806956261f873e2","first_seen":"2026-10-07T09:11:53.380783Z","last_seen":"2026-10-07T09:11:53.380783Z","times_seen":1,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kavino.site/auth/guest","fqdn":"api.kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:18.231Z","timestamp":1791364278231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 04:34:12 GMT","end":"Tue, 22 Dec 2026 04:34:11 GMT"},"fingerprint":{"sha1":"7D:00:D1:C5:7F:89:56:3A:53:69:71:6B:41:9A:A4:33:DB:9C:5E:93","sha256":"46:0D:74:AC:FF:51:BF:3F:55:FE:64:5A:83:1E:3E:28:12:5B:F7:A9:D6:F8:BF:21:79:95:04:AA:80:36:8F:BD"}}},"request":{"raw":"POST /auth/guest HTTP/1.1\r\nHost: api.kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kavino.site/\r\ncontent-type: application/json\r\nContent-Length: 32\r\nOrigin: https://kavino.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":32,"data":"{\"timezone\":\"UTC\",\"locale\":\"en\"}"}},"response":{"raw":"HTTP/3 201 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 09:11:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nvary: Origin\r\naccess-control-allow-origin: https://kavino.site\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K0XlDlSLkg7HakBMKeroPIrBfttryN4lkdV4by%2FQsU7Ta7lVkk%2BBnY0%2F7Hl%2F7l9gEha3dW4c8%2FwOzLuBeJMbH%2FYEdQATrKowGbGKTC9UfZC0mzG012zI8mLZ%2BVvUwYwvmz8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46bc7153d201a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 584\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":584,"size_decoded":1290,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b0f36e4f536a1fa9d4d49333c90c3e53","sha1":"5277b999dcaeaa567b7576fe94c1ee30264b2e13","sha256":"d6e05fcfc183f958464b968749c1a59a2731989a67b691aa8a1dd7ddb1402dec","sha512":"77adb09b4885a7dcb53a995c0df215c38a891a5f48eb15bcc863e197e2314646bc17ddf2b4dceed98f7a7607cb9f140915054c5c3a3187f3db9cd2f2b5bd10fa","ssdeep":"","tlshash":"58f0e125405c497dda1136c2ec997d1d0a8e187370ba59f04ebecf1c50d25a56263013","first_seen":"2026-10-07T09:11:53.38228Z","last_seen":"2026-10-07T09:11:53.38228Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1895,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1895,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"api.kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/27_r38vobnvdb.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:18.339Z","timestamp":1791364278339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /_next/static/chunks/27_r38vobnvdb.js HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kavino.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 473\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"27_r38vobnvdb.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 07 Oct 2026 09:11:18 GMT\r\netag: W/\"51aff62cfdc1160faa777db6e14b01dc\"\r\nlast-modified: Wed, 07 Oct 2026 09:03:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/27_r38vobnvdb.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hc479-1791364278343-893e3ddb046f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":20330,"size_decoded":6659,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20319), with no line terminators","md5":"51aff62cfdc1160faa777db6e14b01dc","sha1":"f4a54893adf6c652b26b3406822e0a848e58fc24","sha256":"9395650a7713525c2e99b4c7e06d3807260a2d4751142b0bfe1cdcee7ffa049b","sha512":"833b761837f3eb6ad4b761522f02abee3f14de8063825891e2817513182b6b66835fe7ae7b30b3ca41abca57e0705f5b2f5e3622a58110c7c437760518118e20","ssdeep":"192:HF8zgMlCOyHpEgyMqkKnmWAGzaowglAZH2naGiqMig07Lm94+iiuplVbWmYZOqVD:HuhvyHpE5iuNQUMRii4lVHIOqF/hmiLH","tlshash":"2a926348a05abbec7a1b5c8ca92f805c326e0b5cc519043df9bc7d79265c4987947fcc","first_seen":"2026-10-06T15:54:25.041715Z","last_seen":"2026-10-07T09:11:53.383735Z","times_seen":4,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kavino.site/sources","fqdn":"api.kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:20.568Z","timestamp":1791364280568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 04:34:12 GMT","end":"Tue, 22 Dec 2026 04:34:11 GMT"},"fingerprint":{"sha1":"7D:00:D1:C5:7F:89:56:3A:53:69:71:6B:41:9A:A4:33:DB:9C:5E:93","sha256":"46:0D:74:AC:FF:51:BF:3F:55:FE:64:5A:83:1E:3E:28:12:5B:F7:A9:D6:F8:BF:21:79:95:04:AA:80:36:8F:BD"}}},"request":{"raw":"OPTIONS /sources HTTP/1.1\r\nHost: api.kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://kavino.site/\r\nOrigin: https://kavino.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 09:11:20 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0SLhVn8P%2FVor6kIgoxEhx0lGgdQnHyP%2BnBxdmKh%2FMXVbRfvnOGgmaJdXWq1m1YnPi%2FyAb8gOnH4zmjphnmOyCA5gDPrwf5HwDfZwNW%2FmoMvhXjq7%2BD8MV1%2BE3sADNlC2u8s%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kavino.site\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-headers: authorization\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46bc7218b291a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":785,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T11:41:02.815504Z","times_seen":18913144,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"api.kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kavino.site/reports/overview?from=2026-10-01\u0026to=2026-10-31","fqdn":"api.kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:20.580Z","timestamp":1791364280580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 04:34:12 GMT","end":"Tue, 22 Dec 2026 04:34:11 GMT"},"fingerprint":{"sha1":"7D:00:D1:C5:7F:89:56:3A:53:69:71:6B:41:9A:A4:33:DB:9C:5E:93","sha256":"46:0D:74:AC:FF:51:BF:3F:55:FE:64:5A:83:1E:3E:28:12:5B:F7:A9:D6:F8:BF:21:79:95:04:AA:80:36:8F:BD"}}},"request":{"raw":"OPTIONS /reports/overview?from=2026-10-01\u0026to=2026-10-31 HTTP/1.1\r\nHost: api.kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://kavino.site/\r\nOrigin: https://kavino.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 09:11:20 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4TlyyKQP8t5ldRz5%2FQTcNP3JTtbmSpaNM0nXV0WC3CNk915IYdYPTbqHIf3hskEJpUXWBJlTXPQkadkjLnorExAbH0RwS%2Btgxf1FtkRye3cp1Ex2NJAbWBH%2FfG8G6lRZ%2F3o%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kavino.site\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-headers: authorization\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46bc721ab451a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":779,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T11:41:02.815504Z","times_seen":18913144,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"api.kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/media/caa3a2e1cccd8315-s.p.0zr6hhvz-h9nw.woff2","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:17.972Z","timestamp":1791364277972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /_next/static/media/caa3a2e1cccd8315-s.p.0zr6hhvz-h9nw.woff2 HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kavino.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 504754\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"caa3a2e1cccd8315-s.p.0zr6hhvz-h9nw.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 07 Oct 2026 09:11:17 GMT\r\netag: \"f4634c3bc1fa7cb53247e1f2872adb5a\"\r\nlast-modified: Thu, 01 Oct 2026 12:58:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/caa3a2e1cccd8315-s.p.0zr6hhvz-h9nw.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tcnd9-1791364277977-5601e502512c\r\ncontent-length: 29288\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29288,"size_decoded":29909,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29288, version 1.0","md5":"f4634c3bc1fa7cb53247e1f2872adb5a","sha1":"9d846db84c501327431670fe23b1a8ea1d2a5349","sha256":"9b6f5ff45b278c744b5f379a2c4ecbaf858a842b8eaf82ac8d21b699ca16c608","sha512":"e480a1ca3a52fdfd2f59daf185b56c9f203c4b0daa7a36537410ccefee9bfab229308145026aeea53a49d02cd7f0e89de8d4c05ec15fe80a2b09e754197afa49","ssdeep":"768:ePXLNqwQ5RnlpBAyv/2+NR6C36OojNMUp06QIhgXZY2Ko1K:e/LNHQtpBAQO+NR6k/eFp06zE0","tlshash":"27d2f155036f442269023b6a0619a9a0c172469fa9bd73c2407a6a931f67fd7d37dc8c","first_seen":"2026-05-13T23:24:18.838523Z","last_seen":"2026-10-07T10:54:29.803707Z","times_seen":18613,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/3iesb8oz5vwne.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:17.980Z","timestamp":1791364277980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /_next/static/chunks/3iesb8oz5vwne.js HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kavino.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 101708\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3iesb8oz5vwne.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 07 Oct 2026 09:11:17 GMT\r\netag: W/\"44e719fe1cba1809e22786098e2463b6\"\r\nlast-modified: Tue, 06 Oct 2026 04:56:09 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/3iesb8oz5vwne.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bjnxb-1791364277984-505b6fb1d813\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156008,"size_decoded":44094,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36919)","md5":"44e719fe1cba1809e22786098e2463b6","sha1":"6e438eb14e47264ca1910ed25157e1a01e7380d2","sha256":"3fb6ea089cc7464d1a64a00680113f8b9818f8d7c3502fb711120d8fd4205ecc","sha512":"964a149f56e06a05426a941f054d0e0d2402cdd9fe5313842c41c24454eb119ebf10ee21d8081d4c2899f46f04a086cbddf104ea4f81eecc51d02faa384ea69e","ssdeep":"3072:lQGKXAtOxpAq8jNCGR96fpnyZp5BbRICegfl:lQHAtOxptkCGRnZp5BbRIrgfl","tlshash":"c3e3e7f935d5f4820bab54aac03f0006f22c4d77189d6860e3e5dcda752465de2e3faa","first_seen":"2026-09-25T11:20:39.502604Z","last_seen":"2026-10-07T09:11:53.38548Z","times_seen":8,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/3-5krlkokuzlg.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:17.992Z","timestamp":1791364277992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /_next/static/chunks/3-5krlkokuzlg.js HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kavino.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 473\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3-5krlkokuzlg.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 07 Oct 2026 09:11:17 GMT\r\netag: W/\"6070e258efacb753198b071e02703324\"\r\nlast-modified: Wed, 07 Oct 2026 09:03:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/3-5krlkokuzlg.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tcnd9-1791364277995-dea916de4ae9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34764,"size_decoded":12568,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34761), with no line terminators","md5":"6070e258efacb753198b071e02703324","sha1":"44decf19d8e504d23eea5e3e57967692ec7f3cfb","sha256":"241fe46cff69c86ba334ff033e501a9755a46a7a0e9481b2a6e527e5e1bacdca","sha512":"209a79c0b4d31d97aa7d87a5ff42cf5d22c40a2e2f3db1283e2a460ee31b7227f11c1ac5eff1639fdbe17931f5b8567f94661a977cd85448b8792e4f4dc1c1b2","ssdeep":"384:K46qFBW3ZTXD+XH3tG7mYKEoRPzq4pkdts2Cy7Sfas+bgP+TNDzN0gvd0TiePXMO:bDBWJTzYH3tlY6lmDRCh+A8NyKdkFr","tlshash":"06f2d8997194b9d87a5b4588486fc00cb13e2b2cc40e4474f7f9acba2a649cd74d7fca","first_seen":"2026-10-06T15:54:25.049942Z","last_seen":"2026-10-07T09:11:53.3868Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/2whgxvw1v7cos.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:17.995Z","timestamp":1791364277995,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /_next/static/chunks/2whgxvw1v7cos.js HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kavino.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 165695\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"2whgxvw1v7cos.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 07 Oct 2026 09:11:18 GMT\r\netag: W/\"9649abbf51087484876f7a6b2b4a0ace\"\r\nlast-modified: Mon, 05 Oct 2026 11:09:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/2whgxvw1v7cos.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nstmn-1791364277999-524e2d2abde9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":427274,"size_decoded":121755,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9649abbf51087484876f7a6b2b4a0ace","sha1":"0d06395b1984843ca9b19ba10996488628774fc0","sha256":"545b539dd7fff0391a3d51719d32165e17a8b949a88e64111b87198f306a5a8c","sha512":"b62c0aeb4efe88a3202c9f1ce16ef50a4e7534c82a278b8c33e33b821cc57d8ee0a267c9d8e5c489b451de95c33b0f103f667dd942e86f4ca2541a396648dae4","ssdeep":"12288:BCcKTvjIBpV5DZkFgyPYySdaFq1O1jfjTp0GR23Buz:BhKTQVgpl","tlshash":"b4944cd47692f43587b352a2007f150bf23c7a1a185d9414f372dcdd78a988aa2bbf36","first_seen":"2026-10-06T15:54:25.05577Z","last_seen":"2026-10-07T09:11:53.388223Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/favicon.ico?favicon.3fpu2ql9ns1a0.ico","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:18.071Z","timestamp":1791364278071,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /favicon.ico?favicon.3fpu2ql9ns1a0.ico HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kavino.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 473\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Wed, 07 Oct 2026 09:11:18 GMT\r\netag: W/\"c30c7d42707a47a3f4591831641e50dc\"\r\nlast-modified: Wed, 07 Oct 2026 09:03:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5htw9-1791364278079-a466aa72d3bf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":25931,"size_decoded":9844,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-10-07T10:21:55.311185Z","times_seen":47895,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/0lw5zj5zei5-z.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:18.334Z","timestamp":1791364278334,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /_next/static/chunks/0lw5zj5zei5-z.js HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kavino.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 101707\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0lw5zj5zei5-z.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 07 Oct 2026 09:11:18 GMT\r\netag: W/\"085368e9f7c5383cc92534ba6491fe6a\"\r\nlast-modified: Tue, 06 Oct 2026 04:56:10 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0lw5zj5zei5-z.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qphlg-1791364278339-a3408db077a2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26802,"size_decoded":8840,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26799), with no line terminators","md5":"085368e9f7c5383cc92534ba6491fe6a","sha1":"827bdf923282ae1cc2a450f83941b4b79b52a072","sha256":"f893b01c6c20edca91b5b6182a799d55f597db16689cc2f43663e1c9faf391ef","sha512":"40e355a08732dd76ef98ec85aa8473712d71ebc0d6cf5220d6c4ee5b211cc4c241ebe3aeaad27fbee6f36834da0327a90384a0e4c7abe7067c9b5692d20bdcb3","ssdeep":"384:kuUbiRcWsmBYjUgeYS2IOiXo39wObLPa+blDTU/wLEhAMiK66IbvHZHVEe:kheRhV4Pa+blDTUdGK66IjP/","tlshash":"97c294599099befcb95a488c996f501c766e2b9cc60e0474faf87c3518184c4be83fce","first_seen":"2026-10-06T15:54:25.046496Z","last_seen":"2026-10-07T09:11:53.390383Z","times_seen":4,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/settings/account?_rsc=5CB68i4pnAekjehf","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:20.590Z","timestamp":1791364280590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /settings/account?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kavino.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1046624\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/x-component\r\ndate: Wed, 07 Oct 2026 09:11:20 GMT\r\netag: \"6bf6dce18758321974d05c0d832cd8de\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /settings/account.segments/_tree.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bjnxb-1791364280594-7b33f7486c24\r\ncontent-length: 664\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":664,"size_decoded":1335,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (381)","md5":"f27bbb579983b267133f88e3e02034ec","sha1":"963eae3ae1559359d49fd3e796c25b9dfed37e51","sha256":"eead50f57bfe682d1f7b9bb4f0ae4a3a0717fda69742c2a66d04d92790539c22","sha512":"462fa357647f0bf435381e073fefd13e8efec83b5d97cd58a540797324d57d9fe978f3ff20f57bd44d9693cf149798d8664d137c1f69c3b9022bcb1528a7c336","ssdeep":"","tlshash":"a60149314a092dd4ede0d8a8626aeb1b1038263370b64de8cceecd90076903e2b47787","first_seen":"2026-10-06T15:54:25.014183Z","last_seen":"2026-10-07T09:11:53.393557Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/3dzbae53ebpvc.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:17.993Z","timestamp":1791364277993,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /_next/static/chunks/3dzbae53ebpvc.js HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kavino.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 473\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3dzbae53ebpvc.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 07 Oct 2026 09:11:18 GMT\r\netag: W/\"e6db33d29ba6c24f11c3197331aa2dc7\"\r\nlast-modified: Wed, 07 Oct 2026 09:03:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/3dzbae53ebpvc.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t2m2q-1791364277998-ac60574746e1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22414,"size_decoded":8273,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22405), with no line terminators","md5":"e6db33d29ba6c24f11c3197331aa2dc7","sha1":"0baebd84c2a795c04e8f27a19a32a9e52edf5f5e","sha256":"f08ee844b212914bee01d8b209048b01db60fe797fa226094035300bfde23d93","sha512":"58ea3e8229026358659b5258d3abab485294abec313a7fc20171763cd07e2c9db172d8ed52388489945b82fd6458ca2bf663cb152575ee09f762ecd558f9ab6d","ssdeep":"384:nhTzjrhTkAnxrf1LzXE4/7b/UO6Jw6xmMX59FK4fvASa70IMVBX/lPFLac:nhTzjVkq7/7LUO6ZxI4f/v5h","tlshash":"cba28445a449beec792b08cc996f801c652e1f68d60e8878f9fc7cb51a240d5ba47fcd","first_seen":"2026-10-06T15:54:25.051474Z","last_seen":"2026-10-07T09:11:53.394249Z","times_seen":4,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kavino.site/auth/guest","fqdn":"api.kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:18.241Z","timestamp":1791364278241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 04:34:12 GMT","end":"Tue, 22 Dec 2026 04:34:11 GMT"},"fingerprint":{"sha1":"7D:00:D1:C5:7F:89:56:3A:53:69:71:6B:41:9A:A4:33:DB:9C:5E:93","sha256":"46:0D:74:AC:FF:51:BF:3F:55:FE:64:5A:83:1E:3E:28:12:5B:F7:A9:D6:F8:BF:21:79:95:04:AA:80:36:8F:BD"}}},"request":{"raw":"OPTIONS /auth/guest HTTP/1.1\r\nHost: api.kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://kavino.site/\r\nOrigin: https://kavino.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 09:11:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2Bvnqu2g02nxQQKQmb7MD3gGUbU%2FN1FJwdQgWwLMKv4JStXzBE7oWB8aHULao2xdQrcq0J2SMlXd%2F3tXxb6ZO7WVJVeFh1WVlExdQEcNpi12p8QzV5MSoAcy0HR%2F6ppafpk%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kavino.site\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-headers: content-type\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46bc7132c4c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":778,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T11:41:02.815504Z","times_seen":18913144,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":0,"dns":0,"connect":22,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"api.kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/integrations?_rsc=5CB68i4pnAekjehf","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:18.277Z","timestamp":1791364278277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /integrations?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kavino.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1049218\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/x-component\r\ndate: Wed, 07 Oct 2026 09:11:18 GMT\r\netag: \"380fe727253f56cb7689f4584b57d2af\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /integrations.segments/_tree.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qphlg-1791364278285-65088413d89b\r\ncontent-length: 556\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":556,"size_decoded":1223,"mime_type":"text/x-component","magic":"ASCII text","md5":"242854296ea5f98a81b716049fdc112d","sha1":"b9443cddc482f39ce0eed6a9d527aeac69cd7541","sha256":"151b2a8c32d9bdc94b4661521d95513e91317b6f6975098cfdb36af8a773e04a","sha512":"cc4219cb9876e1fc491c539fbb7e16e7210f665e90bbc9db774195b60c25b585454399f0d605b98f4306dc510ac635e16f72c461c32eb3b6c910102a1688d122","ssdeep":"","tlshash":"faf02b7186096dd4ace0d8a9626aeb1a10786a3370b64dd8ccdecd9007a503e2b46787","first_seen":"2026-10-06T15:54:25.011166Z","last_seen":"2026-10-07T09:11:53.395914Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/sharing?_rsc=5CB68i4pnAekjehf","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:18.278Z","timestamp":1791364278278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /sharing?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kavino.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1049218\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/x-component\r\ndate: Wed, 07 Oct 2026 09:11:18 GMT\r\netag: \"1745a4d553828a66bd051ee681e158e6\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /sharing.segments/_tree.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dkd47-1791364278282-772a8d109316\r\ncontent-length: 551\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":551,"size_decoded":1213,"mime_type":"text/x-component","magic":"ASCII text","md5":"ac0a425d2ad074d2e069e48136400d5e","sha1":"c8dab83fcb5845c147de7fc016cac5c3d4ac8c1e","sha256":"c1baafe24e6b2795088a06446275ff6b9927a82fb15c0db61f0386cdaf868d27","sha512":"72584c0cea19784620a82a20da416728a1520135f644f6062841947eeb4a92a1a851355cfc8dd767a7cd5babd2d8295b47d24e7799dfaef8e6397b65a4e6ed8c","ssdeep":"","tlshash":"78f0507186096dc49cf0d8a8625beb1b11382a3370b64dd8ccdecd94076503e2b46787","first_seen":"2026-10-06T15:54:25.020645Z","last_seen":"2026-10-07T09:11:53.397843Z","times_seen":4,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/2y3fry_uz0u19.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:20.646Z","timestamp":1791364280646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /_next/static/chunks/2y3fry_uz0u19.js HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kavino.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 472\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"2y3fry_uz0u19.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 07 Oct 2026 09:11:20 GMT\r\netag: W/\"6c234dfe5e3f469d5ca754f11b1f06a1\"\r\nlast-modified: Wed, 07 Oct 2026 09:03:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/2y3fry_uz0u19.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dkd47-1791364280650-2fc21bb07ed4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5210,"size_decoded":2847,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5210), with no line terminators","md5":"6c234dfe5e3f469d5ca754f11b1f06a1","sha1":"043cdff2951f79e7615ab447792f7615cd6b9288","sha256":"5f00acb9f16bfb9849d59986f50d267cbacd2d3be60f2c76ce21c5e0634142f8","sha512":"622761e66bd3b39e238feb3b1b154332dca08cf3d5a64061868e2179389770e067cbb55d5dcc8efb49e66481944652681a617f83626873fdc66800a1681f06a9","ssdeep":"96:ZHzZXvD9+saz3QXAkEZJq3nj1iHC9ofUsRQ141PpeXetiJ/60z:5x79+HKAJE32EXXuif","tlshash":"c8b16582605aadecaa5a0488a12fc00c751e3f48c91fc538b5fc7c7d2d265d5bd96bca","first_seen":"2026-10-06T15:54:25.033713Z","last_seen":"2026-10-07T09:11:53.399352Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/sources/6ac60cb6c2064b14f6a1269e?_rsc=5CB68i4pnAekjehf","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:21.163Z","timestamp":1791364281163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /sources/6ac60cb6c2064b14f6a1269e?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kavino.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Wed, 07 Oct 2026 09:11:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /sources/[id].rsc\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::4rlnl-1791364281167-a6a8a88d3d2f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":354,"size_decoded":649,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (353)","md5":"a2395e28b16a075d60356cc01c782843","sha1":"f4ab725694c5cc6920a73f976eafb6359bb866cb","sha256":"312a713ba7925dd4a52066a67c6e48abfda7f4e8e3989a922db87152faa468a9","sha512":"eb9d25c3636e9ee95f0351395f77b48bc26e09dfdc98efe3893cf23b8125bb200db67f75dfb1ec94f633d951c67359d0d5c072375be4c69313c857d9f6be2185","ssdeep":"","tlshash":"9ee0df031c0804775abf24e1c42da4062149ec3727d818f4c8811e1e3bb272297cb696","first_seen":"2026-10-07T09:11:53.40077Z","last_seen":"2026-10-07T09:11:53.40077Z","times_seen":1,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T09:11:17.649Z","timestamp":1791364277649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1052176\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 07 Oct 2026 09:11:17 GMT\r\netag: W/\"d513b90fba8ca1728c5cc2211243fb59\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::npjpc-1791364277695-0f80d2b268a0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27178,"size_decoded":6211,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27169), with no line terminators","md5":"69504dd396571d389c21d69a2bbcc21e","sha1":"baad35f3caaf54943e83f8f2f84b4531339b24e5","sha256":"4981371c74e3d7c4183a009b1d5575e6cee5132ec5f0380f9ac61c0cf3b295ff","sha512":"a9e252a1b634fa85e3c0e00f05272eddc994b3a7bbbeb89103ac7adcbe4395e82c84b29896903faef0723108bc176915de185b841057bf25edfca61eb8d5c33e","ssdeep":"192:SV+/UO9onvUup4SBEU61ZR7qMuC+ObvZv2MFc13aV9aF5FCgnqzcpmga:SV+sOevf8N+aE11a","tlshash":"2cc2d926a10aed2e6d278eac653e7f3a40c9c236c635551cf2bcc6610e82db15fe75c4","first_seen":"2026-10-06T15:54:25.034918Z","last_seen":"2026-10-07T09:11:53.403432Z","times_seen":4,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":11,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/2gkx9n0m_pyn9.css","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:17.974Z","timestamp":1791364277974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /_next/static/chunks/2gkx9n0m_pyn9.css HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kavino.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 442988\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"2gkx9n0m_pyn9.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 07 Oct 2026 09:11:17 GMT\r\netag: W/\"0a4bdb7ddfc194ef83b2e8d4b06aed88\"\r\nlast-modified: Fri, 02 Oct 2026 06:08:09 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/2gkx9n0m_pyn9.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nstmn-1791364277979-bb4093d8afb7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54563,"size_decoded":11304,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (50849)","md5":"0a4bdb7ddfc194ef83b2e8d4b06aed88","sha1":"f41b2c897120d1896aedaac0ad120a6772ebe312","sha256":"167acf7b7a322bcfda6d5e3c6af863eb2cd5d76c0bb897b2ab8447725ff5b99c","sha512":"4cb8a21299adbf1e1048f5ebd03a6a821dcf134ff9e8c50f65c0221c4e5526a891e1a35706397f9d308a4944894622dabc6f3163dce1987741f4fd21db14b256","ssdeep":"768:52kJCN65gqTeJKhaCX9cVQ10OWjdC9INlG:5rJCN53JKhaCX9crOWjM9I3G","tlshash":"b633b6a0b33ada3fac3364e5f79cb48c650971568e316ae9f942361307cb3f58d15628","first_seen":"2026-10-06T15:54:25.028482Z","last_seen":"2026-10-07T09:11:53.405698Z","times_seen":4,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/2corl6wyj4669.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:17.986Z","timestamp":1791364277986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /_next/static/chunks/2corl6wyj4669.js HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kavino.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 165695\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"2corl6wyj4669.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 07 Oct 2026 09:11:17 GMT\r\netag: W/\"4233f7577a6ac05df095b56d2a2d5f17\"\r\nlast-modified: Mon, 05 Oct 2026 11:09:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/2corl6wyj4669.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tcnd9-1791364277992-0071340d4bd0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14377,"size_decoded":4384,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14375), with no line terminators","md5":"4233f7577a6ac05df095b56d2a2d5f17","sha1":"0e765fa20082908caa2ba3fee4ff23826786c0aa","sha256":"34ed6abf4c6d0d1bb3dc56d3f133d2a5dbc3a3c89c791deab314e27143ac14ce","sha512":"1544f45a32c8316419fe954dc108776625d248e97d097d513e74f1e87fc8a62f098f9c2f578d3350fb5f323a0e7f51030b1a376f85616f0ac81e5108aa9c1dbb","ssdeep":"192:vqiLR3+XOR/ka7fRDRkGR4ksCEMzdcfpDe5cO28Ah5e6g01U6rED:vQOR/Z7fRDRkGbEMze05cO2uD","tlshash":"4b52437132d0f89122df89e5c4364019f26d1d7a219a70a4a7d6ccfe36d198de0a1fa9","first_seen":"2026-08-04T17:05:55.964083Z","last_seen":"2026-10-07T11:03:35.061819Z","times_seen":2577,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kavino.site/shares/incoming","fqdn":"api.kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:20.570Z","timestamp":1791364280570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 04:34:12 GMT","end":"Tue, 22 Dec 2026 04:34:11 GMT"},"fingerprint":{"sha1":"7D:00:D1:C5:7F:89:56:3A:53:69:71:6B:41:9A:A4:33:DB:9C:5E:93","sha256":"46:0D:74:AC:FF:51:BF:3F:55:FE:64:5A:83:1E:3E:28:12:5B:F7:A9:D6:F8:BF:21:79:95:04:AA:80:36:8F:BD"}}},"request":{"raw":"OPTIONS /shares/incoming HTTP/1.1\r\nHost: api.kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://kavino.site/\r\nOrigin: https://kavino.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 09:11:20 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2cjf6mAK786N4crtupKFYXz2tk1NibWuX9439D%2BQWfeN40tlc0Yb3lOv5U3xz8WHViJxRo4g8GTGoLOiYNmfVzdDTPulxxqhvo29L6f6c8JcjOt1z58e1%2FObXXZeqbYr6Yk%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kavino.site\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-headers: authorization\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46bc7219b381a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":775,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T11:41:02.815504Z","times_seen":18913144,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"api.kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kavino.site/workspaces","fqdn":"api.kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:20.588Z","timestamp":1791364280588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 04:34:12 GMT","end":"Tue, 22 Dec 2026 04:34:11 GMT"},"fingerprint":{"sha1":"7D:00:D1:C5:7F:89:56:3A:53:69:71:6B:41:9A:A4:33:DB:9C:5E:93","sha256":"46:0D:74:AC:FF:51:BF:3F:55:FE:64:5A:83:1E:3E:28:12:5B:F7:A9:D6:F8:BF:21:79:95:04:AA:80:36:8F:BD"}}},"request":{"raw":"OPTIONS /workspaces HTTP/1.1\r\nHost: api.kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://kavino.site/\r\nOrigin: https://kavino.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 09:11:20 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=axy07%2FmtJUw3wDiH1B9qZ4sZl2ojwdV8Djyylcf%2B6Mc4Y8a%2FmTUUB1JQCH0hs51i4lrPxzWuFJOH2RtcC%2B46aS6wPdvOQPECRLBOFFBL1doTXuXbe56NiaPD3De8CNgcvwE%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://kavino.site\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-headers: authorization\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46bc721ab481a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":779,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T11:41:02.815504Z","times_seen":18913144,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"api.kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"api.kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/login?_rsc=5CB68i4pnAekjehf","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:20.589Z","timestamp":1791364280589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /login?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kavino.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1046624\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/x-component\r\ndate: Wed, 07 Oct 2026 09:11:20 GMT\r\netag: \"af7ef0f0659c1c644c3f75d342a2dd93\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /login.segments/_tree.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tj7cx-1791364280594-9ba2fe579249\r\ncontent-length: 549\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":549,"size_decoded":1209,"mime_type":"text/x-component","magic":"ASCII text","md5":"cf5838833fdae91c6c5ac3e4cb4da55b","sha1":"032cb75e6907f068f450d9959f1988a800482044","sha256":"679570a3a891c0aa5706b32623492afd838dd8f29cf90f3a868671f645e8e1a9","sha512":"5b48f8f0f24341a5dd47f15051c68349eea1db13292d1d5cdc1afdd1197282a5376f4f65aaf635ff0f4fa4743790b0ab712fea781489a849824dcbfae9b63c74","ssdeep":"","tlshash":"a6f02b7186096dc49cf0e4a8625aeb1b10382a3370b68dd8ccdecd900b6503a2b86787","first_seen":"2026-10-06T15:54:25.027224Z","last_seen":"2026-10-07T09:11:53.406977Z","times_seen":4,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/login?_rsc=lw_4HufM6eb2NBvR","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:20.618Z","timestamp":1791364280618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /login?_rsc=lw_4HufM6eb2NBvR HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kavino.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /login/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1046624\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Wed, 07 Oct 2026 09:11:20 GMT\r\netag: W/\"76eb5e3626de8c3d069a055c199b0fce\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /login.segments/login/__PAGE__.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::79rqw-1791364280623-4cd3be25371b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6893,"size_decoded":2591,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4387)","md5":"88f31b15c035d614a01bec48bc557533","sha1":"a19aab564f2b5a4a978e71fc19f58b5d7a20bbd1","sha256":"0552b2087de154bad2d2a38f00e579d83be095d7af2130ef62487e30ec0d35be","sha512":"11fa1f5ef73d8b8efe879601bb7a6b2a1d910d7fd442a37c5827b4b3d1df9560aa1bebdb3bfc1afcd93fa677cb4aaeb24dc129873ff666008571c93a33f6b2fd","ssdeep":"48:o70nv0ly70nv0ek70nv0bR70nv06v70nv02q70nv0P0e70nv0P070nv0c70nv0Pi:38GhQnhhbFQKcqS7fUHDAz/kM/VmSH","tlshash":"d1e1cd3bca09ed5e1db6cc9c181fe326928d493bd6740dade3ccdda806451762f862d2","first_seen":"2026-10-06T15:54:25.032405Z","last_seen":"2026-10-07T09:11:53.408605Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/1mlftcslf095m.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:17.976Z","timestamp":1791364277976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /_next/static/chunks/1mlftcslf095m.js HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kavino.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 504755\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"1mlftcslf095m.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 07 Oct 2026 09:11:17 GMT\r\netag: W/\"9f6f05f461f138af73e3a1801bbd59b3\"\r\nlast-modified: Thu, 01 Oct 2026 12:58:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/1mlftcslf095m.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qphlg-1791364277980-e8442ffbaab5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12653,"size_decoded":4307,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9733)","md5":"9f6f05f461f138af73e3a1801bbd59b3","sha1":"31a2d9ef7f888cfe739c035ac4e4b5e93507822e","sha256":"d9840d6de414f19d28fbe08cc2ddd0aeb95cf379864950a506592a54f4996f31","sha512":"b7806b3843f7a3c5c278a5f4d721b6ca30adca38cc9d1fc4dbbf05cc4c99507909a84669c52e7472afbdd758afdcd00b56c396525c88c5d6a570e17dfdf2a8bc","ssdeep":"192:5wMDhEBx0I+ofQZ91wco1HMyh3wZux/9QNwKDKw6PTIFIAw/w2:ZEb0IIRymC/mDKw6P1L","tlshash":"3742a422b2d5f8e1279b04950837600af2261c3a563db475b7e58df57a804debc27fe8","first_seen":"2026-08-08T15:14:37.522241Z","last_seen":"2026-10-07T09:11:53.411129Z","times_seen":407,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/0ws7t_wz4dvp7.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:17.977Z","timestamp":1791364277977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /_next/static/chunks/0ws7t_wz4dvp7.js HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kavino.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 442988\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0ws7t_wz4dvp7.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 07 Oct 2026 09:11:17 GMT\r\netag: W/\"15adc80f6aa4dfd89de91b6c1a9a284d\"\r\nlast-modified: Fri, 02 Oct 2026 06:08:09 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0ws7t_wz4dvp7.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t2m2q-1791364277981-bb22541c4b4b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31346,"size_decoded":9290,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31346), with no line terminators","md5":"15adc80f6aa4dfd89de91b6c1a9a284d","sha1":"48412382b3aa2332395967f5751718b464b95d66","sha256":"a4590375a64190f57d18b357bf576bf111bd5f02f3c93cad0f65fdf176689f46","sha512":"6b69925d1868f234111d4969d484becae33bcc180c5eca14d80e5c3f86c5c183b3a014f0ad5fa673c1774081425249fe9004ab4af4c167b5d01a4441901fa3a7","ssdeep":"384:shC/sWgYjYvz7c+0PJjRR8GnCYjEsR52xOlukqLoKvWNfp2g+1M7:stWgq2YjEsR59luRo+spmM7","tlshash":"c3e294a971d4f5d107a394e4803f401bf23d1c76246db4a0a3e2dceab9e554ec172faa","first_seen":"2026-08-06T19:27:49.250392Z","last_seen":"2026-10-07T11:03:35.055713Z","times_seen":527,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kavino.site/_next/static/chunks/1d65cawsn6kc2.js","fqdn":"kavino.site","domain":"kavino.site","tld":"site"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kavino.site/","date":"2026-10-07T09:11:17.978Z","timestamp":1791364277978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kavino.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 05:56:51 GMT","end":"Tue, 22 Dec 2026 05:56:50 GMT"},"fingerprint":{"sha1":"24:F7:83:03:51:4F:96:7B:DE:E8:1A:15:29:0F:17:8C:76:13:DF:6B","sha256":"66:93:FC:73:86:30:E5:3B:0D:C4:A1:00:D3:CF:D3:7B:F9:DC:63:5F:68:E2:43:CE:8F:C9:E8:00:C6:17:A1:10"}}},"request":{"raw":"GET /_next/static/chunks/1d65cawsn6kc2.js HTTP/1.1\r\nHost: kavino.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kavino.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 442988\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"1d65cawsn6kc2.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 07 Oct 2026 09:11:17 GMT\r\netag: W/\"d9eac18470c21ddebeff0f767dd2aea9\"\r\nlast-modified: Fri, 02 Oct 2026 06:08:09 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/1d65cawsn6kc2.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5htw9-1791364277983-e2f81cb1524b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229617,"size_decoded":73764,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d9eac18470c21ddebeff0f767dd2aea9","sha1":"cf3de905111824941aaaeff3663edd087ea6d11b","sha256":"e95ff3ab1da019ba64f5c4165dc08ad68e29c9ffa1b6b762db341711ffd695d6","sha512":"622c8ff5d98fd18214dc47642d9e24b633ef0c136d75af5171ccf4189bbab7b590108f53b5910163128c4b104ba166f9b5309f767badd6a4fb893211e19ed952","ssdeep":"3072:nLtfw+z/K36NQ4BICvoTYhoSCks/OuzY7wpeDRJm2vz:nLtfw+z/K36NQ4do/2ieDRJm2vz","tlshash":"8b24fbe83955f6626ab302b710af1803b338252b280d4d60b351fdddb57845eb17bf9a","first_seen":"2026-10-06T15:54:25.03972Z","last_seen":"2026-10-07T09:11:53.414844Z","times_seen":4,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"kavino.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"kavino.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}