{"report_id":"5ae89c20-3c11-4a0e-88b7-1199ac3ff83f","version":0,"status":"done","tags":[],"date":"2026-09-22T20:50:51Z","url":{"schema":"http","addr":"nearkat-proposal.xyz/","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"172.67.210.227","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nearkat-proposal.xyz/","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"title":"NEARKAT - Many Tunnels. One Mob. Powered by NEAR Intents","dom":{"size":54666,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51842)","md5":"67492198ab975b6781b30edad82aabde","sha1":"13b595e85eae431251e5f06431fb8487ff18f189","sha256":"012a7b615408937444e6c22514697f41980178f62fe2518cf5f72077f1566ba2","sha512":"b10193b7ae94bfebfe261f9271105eadca6bda00d8e6f2cd34924b3c2ad7625b2bb3a9cb1936e48a9e8deb5dd5b86cb3744a981f1280452246e762b34e06f655","ssdeep":"768:SNmARKKhHAGcCfURfUbDRW47cIfUDfUTz30oq/mccCYZrgIDcDMWqQqV7ceA7/n7:S0G5W47Moq/mfBrt7QD","tlshash":"043319699214123f922b47cce71af36451be41decb190048b4281bb61f7af9bbd776c8","dom_hash":"domhashb8a3e6a4ad0ab699cd054ebb6ff3c5d7","first_seen":"2026-09-22T20:50:57.004408Z","last_seen":"2026-09-22T20:50:57.004408Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nearkat-proposal.xyz/","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"172.67.210.227","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T20:50:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nearkat-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nearkat-proposal.xyz","ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-21","domain_rank":0,"first_seen":"2026-09-22T20:47:00.918069Z","last_seen":"2026-09-22T20:47:00.918069Z","alert_count":17,"request_count":17,"received_data":1735108,"sent_data":8657,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nearkat-proposal.xyz/script.js","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f8b8be6a8b4e1b742862a5345eadded","sha1":"21369b01d139cd8e83df3378c85afbdba089fb57","sha256":"03a3a5e62bce4fa324b715ad25b26837d1d9834c3dd5740a170ab09af73de4c8","sha512":"57734c2c644d212e0ddcddc52b1ded6c00a6e4ba354234a6f0f93df93486af92286ee235fac7008905ef9d8e63b6dbe858c433418fe8d9879443b9a0d3a40905","ssdeep":"192:vv7RK91WetPG8Y4lotLF5FOYUsefoZeQlZ5N2O1rKxrjQxmVneHKUrg4:vY/V08NloP1ULoZemPN2EreksnApv","tlshash":"7e02eab631783136467782baf787d2643f3e11117203d9a2b65c4c842ee0d64a5bbdda","size":8982,"data":"","first_seen":"2026-09-22T20:47:04.75559Z","last_seen":"2026-09-22T20:50:57.006239Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nearkat-proposal.xyz/5jFvaVi1.php?s=%2Fipfs%2Ftx2kbwdjmHEPcuTrEvu-WQa1707393df31ed9a3ab0c0448c77a782%3Ft%3D1790110218237","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e937e36048e8255ab263535d3c2d271f","sha1":"ef09fa4be6da9879758490dacac300258c36980c","sha256":"4ab80aacc218cf33018c0d933953a86d649fb466efd6c31b0947373ab2fd4363","sha512":"497f8b35c577c2ee56187ecd30df6f36038f02021e41ed50c65c1e9b9469acbd2c1ef4c3050e9dc79a33c0e1ab8cfa724ae39a0b3d0c64c2fc2e085c9e95ec48","ssdeep":"6144:ch5gD6Nrq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csOq9NWCEiox3Ti/ESVPHSyyA","tlshash":"cfd4cbd0b34a56bbd8d6b2b7043349afdfa82906064b188bd2e7dce4725470791dc9bc","size":645585,"data":"","first_seen":"2026-09-22T20:50:57.013864Z","last_seen":"2026-09-22T20:50:57.013864Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nearkat-proposal.xyz/","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"568ce1b56d93b656a9cf0589921ac458","sha1":"9270d7a198139c605a575fec7e48a309210d50de","sha256":"85c77574c22963da6389b0a6ea11bb31d24549ce67a9a1487a3ce784aad719d0","sha512":"4079d87dae3e00d09ca26a6db8c88e2cc744021e1f36fecbc11fbd4266cfff404609067e110d9f41561c1c2ef82056b8cdae6afba6aebc054d552edb9a4ed4c6","ssdeep":"","tlshash":"a1c0c08048f28de0080c08c7113912c4705038bc80f37081c5fccd0b8c0fd552acc218","size":181,"data":"","first_seen":"2026-09-22T20:44:54.706615Z","last_seen":"2026-09-22T20:54:43.30382Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nearkat-proposal.xyz/script.js","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nearkat-proposal.xyz/","date":"2026-09-22T20:50:18.272Z","timestamp":1790110218272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nearkat-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 23:21:34 GMT","end":"Sun, 20 Dec 2026 23:21:33 GMT"},"fingerprint":{"sha1":"93:9E:27:7C:9D:D8:71:3F:36:A8:E0:7D:2C:82:36:63:87:68:1E:C9","sha256":"D4:21:DC:95:F2:99:C8:51:93:86:0E:C1:CD:D2:4C:07:16:FD:A7:67:A3:98:60:B3:EA:F7:4B:EE:A2:9B:DF:AB"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: nearkat-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearkat-proposal.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Sep 2026 00:49:50 GMT\r\netag: \"2316-65c07be75afd5-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/javascript\r\ndate: Tue, 22 Sep 2026 20:50:18 GMT\r\nserver: cloudflare\r\nage: 232\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SFfrLXgnSb6ibN48wxC1hQJNGnfuoATmKmIZHIPRce7Y1AxlU8NZ%2B8lbVwIcWd1WsHOhmi5rRwo7WeuzPJz44Jcepfrhp1Imj%2BnNOzsEnJdst4DtUSGXsKxLyARe0t5oesshzF8PMA%3D%3D\"}]}\r\ncf-ray: a3f42e603fdd0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3425\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8982,"size_decoded":4196,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"6f8b8be6a8b4e1b742862a5345eadded","sha1":"21369b01d139cd8e83df3378c85afbdba089fb57","sha256":"03a3a5e62bce4fa324b715ad25b26837d1d9834c3dd5740a170ab09af73de4c8","sha512":"57734c2c644d212e0ddcddc52b1ded6c00a6e4ba354234a6f0f93df93486af92286ee235fac7008905ef9d8e63b6dbe858c433418fe8d9879443b9a0d3a40905","ssdeep":"192:vv7RK91WetPG8Y4lotLF5FOYUsefoZeQlZ5N2O1rKxrjQxmVneHKUrg4:vY/V08NloP1ULoZemPN2EreksnApv","tlshash":"7e02eab631783136467782baf787d2643f3e11117203d9a2b65c4c842ee0d64a5bbdda","first_seen":"2026-09-22T20:47:04.75559Z","last_seen":"2026-09-22T20:50:57.006239Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nearkat-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearkat-proposal.xyz/img/soil-loam-1536.webp","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearkat-proposal.xyz/","date":"2026-09-22T20:50:18.285Z","timestamp":1790110218285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nearkat-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 23:21:34 GMT","end":"Sun, 20 Dec 2026 23:21:33 GMT"},"fingerprint":{"sha1":"93:9E:27:7C:9D:D8:71:3F:36:A8:E0:7D:2C:82:36:63:87:68:1E:C9","sha256":"D4:21:DC:95:F2:99:C8:51:93:86:0E:C1:CD:D2:4C:07:16:FD:A7:67:A3:98:60:B3:EA:F7:4B:EE:A2:9B:DF:AB"}}},"request":{"raw":"GET /img/soil-loam-1536.webp HTTP/1.1\r\nHost: nearkat-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearkat-proposal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Sep 2026 07:03:26 GMT\r\netag: \"5fdd0-65c0cf68c0b80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: image/webp\r\ndate: Tue, 22 Sep 2026 20:50:18 GMT\r\nserver: cloudflare\r\nage: 231\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ybfeZtpOkVzTn7%2BuoFF6fSZ1iEkrRIA0c%2BxG2XbEchPIRgrS53PufEghUP2m1FIRLD9dqNcb8RHo1RisgVZtUI9V1Eat8%2FciiQs1Y1C6ZPWQertrwbWKy%2FjMb9jWMY6fEdg14ANkYw%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3f42e604fe50883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":392656,"size_decoded":393480,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cabc074e10d596907c792f66eaabafb0","sha1":"e56b222ca4dc3430bc7e9a9db62cf97830177cc5","sha256":"86bae3b7330177d14ad3b08bc6c0c5489a0b2bee2cb52eb1783529d125e8afc9","sha512":"3b212eb6e988af0af72f9bbc71d23087c4c3fb3b6051d8ba84b472cf8968ea7ac8aa2ffeed64c64b5f91f74c8c279e867a86cf6c53baf6371a26c424070e3811","ssdeep":"6144:VslkMBa28NUrnVfWu+Fr9hkpkl8wiGRyIp4Fnhctsp74fQfKZe1aGI5n8Rm1TM+:KxY28Ne9shkpkKKcIp4Fnyk6QKZDGI5R","tlshash":"d684231ce601ee181e435469a42a89f263ed1fef0d1b2fa494cbe6f11116f3697f9c12","first_seen":"2026-09-22T20:47:04.759614Z","last_seen":"2026-09-22T20:50:57.007217Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nearkat-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearkat-proposal.xyz/fonts/grotesk700.woff2","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nearkat-proposal.xyz/","date":"2026-09-22T20:50:18.406Z","timestamp":1790110218406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nearkat-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 23:21:34 GMT","end":"Sun, 20 Dec 2026 23:21:33 GMT"},"fingerprint":{"sha1":"93:9E:27:7C:9D:D8:71:3F:36:A8:E0:7D:2C:82:36:63:87:68:1E:C9","sha256":"D4:21:DC:95:F2:99:C8:51:93:86:0E:C1:CD:D2:4C:07:16:FD:A7:67:A3:98:60:B3:EA:F7:4B:EE:A2:9B:DF:AB"}}},"request":{"raw":"GET /fonts/grotesk700.woff2 HTTP/1.1\r\nHost: nearkat-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearkat-proposal.xyz/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Sep 2026 07:03:26 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Lt6zLVwDlCoIdGSMMyVpnMme%2F%2FMiRW5y62QakZUgdoqxD2XiEmevYQ2QoyJTSoMCjCv443PAOAqmo1%2BL0ARmxrEDrx3vMotVJto%2BgdMEJv8FXBMJUVwhRR6IZB7RYfVaCmaUIm4WA%3D%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"3228-65c0cf68c0b80-gzip\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\ndate: Tue, 22 Sep 2026 20:50:18 GMT\r\nserver: cloudflare\r\nage: 231\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3f42e6108280883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12840,"size_decoded":13544,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12840, version 1.0","md5":"f9e147a59a9381b7db65941ceac88e52","sha1":"094681c9ad35d8b6d277b4053d7632df8b2b57d9","sha256":"35f8aec56cfd5cbfdb03cc68733a54a0b05bb3617ffcd5fd332badc0b045ca55","sha512":"8c325b17bd8bfdbb7aa2894f48185bdc809bb49a205940bc2ff78350a55cd11ef61427c25a899772710f334440b6d1698694bc62a90daddfe05f1340fd815b7a","ssdeep":"384:h9qpGfNwXx8A8NrYf9hI6DWS+Gm22l8Uy:aAyXhS0xc8Uy","tlshash":"7042b0942aae3e73d472b832731f846ae135192d61bd4fd1a9fc4942df0d4bbb244784","first_seen":"2025-09-14T13:34:05.0883Z","last_seen":"2026-09-22T21:10:28.274173Z","times_seen":736,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nearkat-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearkat-proposal.xyz/img/icon-32.png?v=3","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearkat-proposal.xyz/","date":"2026-09-22T20:50:18.555Z","timestamp":1790110218555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nearkat-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 23:21:34 GMT","end":"Sun, 20 Dec 2026 23:21:33 GMT"},"fingerprint":{"sha1":"93:9E:27:7C:9D:D8:71:3F:36:A8:E0:7D:2C:82:36:63:87:68:1E:C9","sha256":"D4:21:DC:95:F2:99:C8:51:93:86:0E:C1:CD:D2:4C:07:16:FD:A7:67:A3:98:60:B3:EA:F7:4B:EE:A2:9B:DF:AB"}}},"request":{"raw":"GET /img/icon-32.png?v=3 HTTP/1.1\r\nHost: nearkat-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearkat-proposal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Sep 2026 07:03:26 GMT\r\netag: \"b98-65c0cf68c0b80\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Tue, 22 Sep 2026 20:50:18 GMT\r\nserver: cloudflare\r\nage: 231\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sQ6Yefenu2wukXECTo1cXafuhRFdblu0W%2BanfTa%2BsitxscAPgxaCT8qccghb59nDmmO1rYIhKHv09rVYD7lZ95fo%2FVNbGuDnz3s1P588EHu7bB1UYbUbssfMvS%2FSVB8DlcLCqRfilA%3D%3D\"}]}\r\ncf-ray: a3f42e61f8520883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2968\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2968,"size_decoded":3684,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced","md5":"9d9dbb36664e8604b9ce70261a9a9d94","sha1":"dd9b5c05b99a8db7acae81c6ecb2fe2664801c7d","sha256":"c59feb34857ef1beed474434e602780b1ff2d72c53a8e8102605265cf5a3c0fa","sha512":"780ba3420b554a226b29519646c4e6c545f3c91a3d46b5c8fe2f4a79485bfda36a172bd474790c7ac742c27921c0ceda044a0f3f30749af772170b0438c7a22e","ssdeep":"","tlshash":"2f512decdfe3c18f3215ee90fa13ea65189448e095537d5769879ce4e42a024391d207","first_seen":"2026-09-22T20:47:04.760851Z","last_seen":"2026-09-22T20:50:57.009031Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nearkat-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearkat-proposal.xyz/5jFvaVi1.php?s=%2Fjmpd%2F","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nearkat-proposal.xyz/","date":"2026-09-22T20:50:20.873Z","timestamp":1790110220873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nearkat-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 23:21:34 GMT","end":"Sun, 20 Dec 2026 23:21:33 GMT"},"fingerprint":{"sha1":"93:9E:27:7C:9D:D8:71:3F:36:A8:E0:7D:2C:82:36:63:87:68:1E:C9","sha256":"D4:21:DC:95:F2:99:C8:51:93:86:0E:C1:CD:D2:4C:07:16:FD:A7:67:A3:98:60:B3:EA:F7:4B:EE:A2:9B:DF:AB"}}},"request":{"raw":"POST /5jFvaVi1.php?s=%2Fjmpd%2F HTTP/1.1\r\nHost: nearkat-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nearkat-proposal.xyz/\r\ncontent-type: application/json\r\nContent-Length: 1361\r\nOrigin: https://nearkat-proposal.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1361,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBNQNjAyMAFQAKA_oCLgDXAisAAQACeAMAAO8nhn2XtsKCAfuFQX81TD69ke91n44CAADjAL8TfaWwFL2iiacuFljSk09J0xECU9JMTkC3mSmokmr0sJym6DGfjRDjmwaxkj4yp8Rx6fRfLxbkqLVaOQS6HrE1d35ns6OUSeT_xheNi7DQcB7g1Gq_A_d68fOMAKdPyKu5-d6zypdGZ3d-lBz8SL4w9MtgBUrxhXlGKmUascVNj0SuzxouwQM0qXN8yJfeKbGghIg6IdhBrj_vtobHZzMKgeFMNA-zm4bQ4gWmtrknZ1Of0KWfkpRoI1GWo021-G1BS8UmG6Ti17AQGfPObmx8KW0gHNgfAMySauoYVD8NCxdgxgYAzGTWrOh9JPjYwlMvqZX2twedBg7mUE_f5D6D54gQwN16Wh65OECKSHwRu9eJhDKLNM9KTB0wC0URtqwHg53y8bzJK0LChRhnnC5nuwQCuu5ZDr_gSEd1uc0mNVBLGwN0hq88uZXgT7HIXeoX7mQ-nloD3yoBgRuIDQReFMzS_MEgtIamJCuVDZC2TrHoC1ZAZnf_OzPM7VpkvxTW3yLNGH44zO8VHSO4zxHEtb3VDLrBTIgjGWqAjnJmL8CoS8NkX2ORNQtibXUH346qeO-M3wHS6AGCFyzjaBFYjYP2U2rUtCExUTq5QIROQs8j0SNBWXQcgHIJiGPx2ml5RQlK45ZVdKDTbiVJh2AODhsEZAKhrgBc-XUO5q1mmNy3GJqqpFgWUEq0uXNQh8FC5-HQLR4cn6a_DjScKRMNcREJKKL_N9BP7MyOSRDaxn_FpqZJ8M5IcWhShtzCFcfkIap8ec3UQsfPbTC5ioBBoqDH4-LMcfXWdxI3lzi0PFXIs0-qjSLJG9byTASBXCu5C8qYIjZ0d3ceZvgBXPGW-im9ZR3mFNwacwuA7A858wWqw9aiNR8fTVeI09ecc5OaD7q5ITpdrzkVrqNSjT0TPfXNhz9tWSKMUuJI1iB2XbpP5AilY9pj9d9IDO1Y4T30AY9zzaaD87pKszjfaOtiTxet2UfWaYHEeO4VhPbI1q7CZCKLCdYRZGQ0ECB8CZWsgngpSZaS0yEaIp-Kil2z_WqWAaLgdzGZmbQxJyJDlME80IpnmaYjL8X-D7VDCPu-Q-iS0lNXLebTEIHU4k8GHfY6Mr0I8GEFvcKU6sX0MLyKc93-6vBt1Ztsws9y8RIJAAN00_ZMUS3ziq0dKZVQvEAYUVoTFo785xjBbBpe99JJsdi1cn679gE3pBA\",\"challenge\":null}"}},"response":{"raw":"HTTP/3 204 \r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ndate: Tue, 22 Sep 2026 20:50:22 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aOkt4eCPUlIo%2Bdp%2FjALxIcZ%2FF7lLYQ3RuHX2dEtwgK1zuqpbuU0Idz6motvSB%2FDtPOKVDGQjt02nMUq0YydZnG4AU5lTawdPP2%2B3QuXDojh7KZcJXoXSRkX9ENS%2FTjYPubUqZ6HwGg%3D%3D\"}]}\r\ncf-ray: a3f42e707ca70883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":2608,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":1583,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1583,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nearkat-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearkat-proposal.xyz/styles.css","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nearkat-proposal.xyz/","date":"2026-09-22T20:50:18.268Z","timestamp":1790110218268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nearkat-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 23:21:34 GMT","end":"Sun, 20 Dec 2026 23:21:33 GMT"},"fingerprint":{"sha1":"93:9E:27:7C:9D:D8:71:3F:36:A8:E0:7D:2C:82:36:63:87:68:1E:C9","sha256":"D4:21:DC:95:F2:99:C8:51:93:86:0E:C1:CD:D2:4C:07:16:FD:A7:67:A3:98:60:B3:EA:F7:4B:EE:A2:9B:DF:AB"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: nearkat-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearkat-proposal.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Sep 2026 07:08:08 GMT\r\netag: \"17801-65c0d075b0600-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/css\r\ndate: Tue, 22 Sep 2026 20:50:18 GMT\r\nserver: cloudflare\r\nage: 231\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YO4iwKqUFfqExMOO7UimqWZIcWHpZMgBa7OpgrIA3u9dltW9g7sBrkgRdPayVbGqTIutMcSVF2bdso8uDrAvQbUMafWa0T1%2BEERzSFSxWZ%2FceirKQ2ZwboXTfbs4p0WDYb2zY0BwTg%3D%3D\"}]}\r\ncf-ray: a3f42e602fda0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19446\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96257,"size_decoded":20212,"mime_type":"text/css","magic":"ASCII text, with very long lines (65469), with CRLF line terminators","md5":"0a19ea7ffef12f9473b0d4cf14d55a13","sha1":"96272853be1eadb6851b57aa05832fb4561f7194","sha256":"32a1b86fa4db2121e8f4046cb7d2d00c30ec3fb9f188644188f3cc9ec61e4a1f","sha512":"75209178055907761b45d74c1a9c7f815c2929d27964eb6e077207f3b4fc41bb187a26ac6117a964d0c59be1407377aac2c2cf39cc54cbad8c8a1e12111c17e3","ssdeep":"1536:SdhK/Nfy83uaqVKvAdKcd3Ouqlm8gfWpzxQKFJ:8KFfyQuaqVKv037qlmep2m","tlshash":"9b93d660f220e53fbd37a9b9a7ccb5dc7218b092dc3257f9fa55621245c77f21a26600","first_seen":"2026-09-22T20:47:04.74847Z","last_seen":"2026-09-22T20:50:57.010816Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nearkat-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearkat-proposal.xyz/fonts/mono700.woff2","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nearkat-proposal.xyz/","date":"2026-09-22T20:50:18.339Z","timestamp":1790110218339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nearkat-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 23:21:34 GMT","end":"Sun, 20 Dec 2026 23:21:33 GMT"},"fingerprint":{"sha1":"93:9E:27:7C:9D:D8:71:3F:36:A8:E0:7D:2C:82:36:63:87:68:1E:C9","sha256":"D4:21:DC:95:F2:99:C8:51:93:86:0E:C1:CD:D2:4C:07:16:FD:A7:67:A3:98:60:B3:EA:F7:4B:EE:A2:9B:DF:AB"}}},"request":{"raw":"GET /fonts/mono700.woff2 HTTP/1.1\r\nHost: nearkat-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearkat-proposal.xyz/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Sep 2026 07:03:26 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LnpmsnkM93Empz1Xly4hNj7r5bGPngz%2Fox9QHgtarIKdtSeV71mEYyQB6pJ9C5Jl7DZc1WIPx9gRY8LRTQWyEi8RrBCuIO%2Fei5GyNsp2yhe8QSAWgpTUyok%2FQsqt5x%2BmqyDBjKU0hQ%3D%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"4154-65c0cf68c0b80-gzip\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\ndate: Tue, 22 Sep 2026 20:50:18 GMT\r\nserver: cloudflare\r\nage: 231\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3f42e60a8080883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16724,"size_decoded":17428,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16724, version 1.0","md5":"e5e908997a453e21f2fe41cb72e186d2","sha1":"d0c504bd8f896d39883e0ddfc81c511af526656b","sha256":"2d46bd159b53f55c41167a4f1540a074649464194fd1e416f5b4694a6c0f282c","sha512":"dd6bf730a4b16a50b0977b2d8efe865be0805da41c50aa86d39b4892c79db91f354e91b1a2ce4198e4b58e26752d4e9a06e33e9911e63f2df2e004d610685cd8","ssdeep":"384:ZRyfvfqIrJOZA3s5dQsQLR7JIWapcGsukRYRv5fpD:ZUXfNs5IRQ3zkCZ5fpD","tlshash":"8f72d0b8fe064610c2542fbf06209de1831895fe192e4f24f8aa74ac4f1715e3f117ba","first_seen":"2025-02-19T12:54:04.600022Z","last_seen":"2026-09-22T21:05:55.775039Z","times_seen":3520,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nearkat-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearkat-proposal.xyz/img/icon-180.png?v=3","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearkat-proposal.xyz/","date":"2026-09-22T20:50:18.553Z","timestamp":1790110218553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nearkat-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 23:21:34 GMT","end":"Sun, 20 Dec 2026 23:21:33 GMT"},"fingerprint":{"sha1":"93:9E:27:7C:9D:D8:71:3F:36:A8:E0:7D:2C:82:36:63:87:68:1E:C9","sha256":"D4:21:DC:95:F2:99:C8:51:93:86:0E:C1:CD:D2:4C:07:16:FD:A7:67:A3:98:60:B3:EA:F7:4B:EE:A2:9B:DF:AB"}}},"request":{"raw":"GET /img/icon-180.png?v=3 HTTP/1.1\r\nHost: nearkat-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearkat-proposal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Sep 2026 07:03:26 GMT\r\netag: \"13cca-65c0cf68c0b80\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Tue, 22 Sep 2026 20:50:18 GMT\r\nserver: cloudflare\r\nage: 231\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7V0%2BAire%2BbMraeNCMxQAhHxZEydD38hOEddq16lpP0jVpbcOsV4le1EFvIpe0AU1c7e2Phg3ZpRpqaeMG1vvIlKoa0AvgvZHnsdSY8F%2FYAjWc3fkdGwXgtbsTj9m4M%2FfMZ%2Fb8M5NAg%3D%3D\"}]}\r\ncf-ray: a3f42e61f8510883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 81098\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81098,"size_decoded":81819,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"e088efa8f62515bed9e538f6f7b23ac0","sha1":"047c8adff98b8e514ee949d5cf7380ff01015eab","sha256":"1137398675a2d6008a1c83305ea68d11508df3e3604d1c6260674283aeb107ad","sha512":"4a39d94c16555a7dc53c538dece077b322b099a13f9c6e90a995d74a4e7ddec6a2b5ba80922273f76655bc33e7723cf64e1269940d9cb98d0fe6b6e66e833843","ssdeep":"1536:ULaVTvEgrsVqPmUnVyk3kL72o2lxEe9v2CSLo1yhW/0ae50tX0qIjNttl:AkEEjVyqMd2l+iOCgL500qIJt/","tlshash":"078312e569fc64739581974a033f498b2a5a032753ff0df9870ecb369cbc218971a9b1","first_seen":"2026-09-22T20:47:04.754168Z","last_seen":"2026-09-22T20:50:57.012606Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nearkat-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearkat-proposal.xyz/img/hero-cutaway-sharp-1280.webp","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://nearkat-proposal.xyz/","date":"2026-09-22T20:50:18.270Z","timestamp":1790110218270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nearkat-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 23:21:34 GMT","end":"Sun, 20 Dec 2026 23:21:33 GMT"},"fingerprint":{"sha1":"93:9E:27:7C:9D:D8:71:3F:36:A8:E0:7D:2C:82:36:63:87:68:1E:C9","sha256":"D4:21:DC:95:F2:99:C8:51:93:86:0E:C1:CD:D2:4C:07:16:FD:A7:67:A3:98:60:B3:EA:F7:4B:EE:A2:9B:DF:AB"}}},"request":{"raw":"GET /img/hero-cutaway-sharp-1280.webp HTTP/1.1\r\nHost: nearkat-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearkat-proposal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Sep 2026 07:03:26 GMT\r\netag: \"2f3c0-65c0cf68c0b80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: image/webp\r\ndate: Tue, 22 Sep 2026 20:50:18 GMT\r\nserver: cloudflare\r\nage: 231\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2FaA%2FTYNBo1yv%2BPMZhveJpE1O4t3bF0vAQjhkvf5WSNqgJ4ITBAJ18vRCnDuAk1EWRAZwZW8RrM%2B4Ln6MsiHLMfAaacgq3L%2FBUrOGqGwP5ksKLGuNDOuO6fXPaXzlrDi9aSYbh64DA%3D%3D\"}]}\r\npriority: u=3,i\r\ncf-ray: a3f42e603fdb0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193472,"size_decoded":194268,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"46fed484cb7fea361750d1bed70bc963","sha1":"05dedbf83ce202d099dd7de1c24c08ae818d2078","sha256":"5b52352ff7dd072ded96484b02ed7ea44b4d7a3b0075601a51466c7904f3e98b","sha512":"3282ff78ae55aace539b473a00407e7740b85e3242b1780af04d3e4be085562719a662fe1b734e186e9f76a3af432286b5645f16be92963d4629f3da1fafc1f9","ssdeep":"3072:wdBKrvozAQo95GGBvdajqK0UszQSVkB91AWwxy2DZ4Ig1U5rZXAdyolksCQS:7MzAr570jDtYY8LxPDw1UTil5nS","tlshash":"091423fb1fab04e04562dbbb7a89f70ff6a990909ba108a3d15243cd53347994521fd2","first_seen":"2026-09-22T20:47:04.750101Z","last_seen":"2026-09-22T20:50:57.013186Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nearkat-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearkat-proposal.xyz/5jFvaVi1.php?s=%2Fipfs%2Ftx2kbwdjmHEPcuTrEvu-WQa1707393df31ed9a3ab0c0448c77a782%3Ft%3D1790110218237","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nearkat-proposal.xyz/","date":"2026-09-22T20:50:18.274Z","timestamp":1790110218274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nearkat-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 23:21:34 GMT","end":"Sun, 20 Dec 2026 23:21:33 GMT"},"fingerprint":{"sha1":"93:9E:27:7C:9D:D8:71:3F:36:A8:E0:7D:2C:82:36:63:87:68:1E:C9","sha256":"D4:21:DC:95:F2:99:C8:51:93:86:0E:C1:CD:D2:4C:07:16:FD:A7:67:A3:98:60:B3:EA:F7:4B:EE:A2:9B:DF:AB"}}},"request":{"raw":"GET /5jFvaVi1.php?s=%2Fipfs%2Ftx2kbwdjmHEPcuTrEvu-WQa1707393df31ed9a3ab0c0448c77a782%3Ft%3D1790110218237 HTTP/1.1\r\nHost: nearkat-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearkat-proposal.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 22 Sep 2026 20:50:20 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d5Q%2BXGV9WC%2FE4hDxBO2NfqslL6u1K9%2Fm4ZZvqVdqRqT%2Bu%2B4PpJ8RMNtMeXampL2KdG8tIaVqg4l8dgIRCRcK2cEfqN%2Fl7Qby3LzNSDwZClGMde0fYUNVAN%2BLaWiWVfkPJ5Ww2tlo%2Bg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3f42e603fdf0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":645585,"size_decoded":124420,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e937e36048e8255ab263535d3c2d271f","sha1":"ef09fa4be6da9879758490dacac300258c36980c","sha256":"4ab80aacc218cf33018c0d933953a86d649fb466efd6c31b0947373ab2fd4363","sha512":"497f8b35c577c2ee56187ecd30df6f36038f02021e41ed50c65c1e9b9469acbd2c1ef4c3050e9dc79a33c0e1ab8cfa724ae39a0b3d0c64c2fc2e085c9e95ec48","ssdeep":"6144:ch5gD6Nrq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csOq9NWCEiox3Ti/ESVPHSyyA","tlshash":"cfd4cbd0b34a56bbd8d6b2b7043349afdfa82906064b188bd2e7dce4725470791dc9bc","first_seen":"2026-09-22T20:50:57.013864Z","last_seen":"2026-09-22T20:50:57.013864Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2086,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nearkat-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearkat-proposal.xyz/img/near.svg","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://nearkat-proposal.xyz/","date":"2026-09-22T20:50:18.373Z","timestamp":1790110218373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nearkat-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 23:21:34 GMT","end":"Sun, 20 Dec 2026 23:21:33 GMT"},"fingerprint":{"sha1":"93:9E:27:7C:9D:D8:71:3F:36:A8:E0:7D:2C:82:36:63:87:68:1E:C9","sha256":"D4:21:DC:95:F2:99:C8:51:93:86:0E:C1:CD:D2:4C:07:16:FD:A7:67:A3:98:60:B3:EA:F7:4B:EE:A2:9B:DF:AB"}}},"request":{"raw":"GET /img/near.svg HTTP/1.1\r\nHost: nearkat-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearkat-proposal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Sep 2026 07:03:26 GMT\r\netag: \"5b5-65c0cf68c0b80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: image/svg+xml\r\ndate: Tue, 22 Sep 2026 20:50:18 GMT\r\nserver: cloudflare\r\nage: 231\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YpvrTa%2B1G6DzVJjmizzIPS8ihTzmZxDEzCuytz22wFrctRvW1nEnDPuCRIwvESwahxeLi5eODeWClyaJJhZaaLOyQoZtYi5lTEWGqjci1VEL4vx5nyrTAWO1CSdPupH89mIpe0NmDg%3D%3D\"}]}\r\ncf-ray: a3f42e60d81c0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 822\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1461,"size_decoded":1587,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (1137)","md5":"1a06b4bb21d529a073d70d279d538d44","sha1":"4b21f5032bc332b87d4f9c50dbd30e8b479b9f82","sha256":"b6dc3b54b2ab67f68bb58a4d332fa24f481dada1fbbd52f90b146ba281bc9afc","sha512":"8e673ee476ba3ccc02b488b1a1e4e4f0a2ffeb27cf8dd1376832c5eec96bf0f6339d01974b6dc8e656049fd545bda4fa2d4f8a9ab5277bc607ae089944101ba1","ssdeep":"","tlshash":"913183fb22a8a8c8c6099f44dd2b5875f4a735bfbfd0c2c495e499c0db607ea0508db0","first_seen":"2026-09-22T20:47:04.738112Z","last_seen":"2026-09-22T20:50:57.014743Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nearkat-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearkat-proposal.xyz/img/rations-full.webp","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://nearkat-proposal.xyz/","date":"2026-09-22T20:50:18.424Z","timestamp":1790110218424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nearkat-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 23:21:34 GMT","end":"Sun, 20 Dec 2026 23:21:33 GMT"},"fingerprint":{"sha1":"93:9E:27:7C:9D:D8:71:3F:36:A8:E0:7D:2C:82:36:63:87:68:1E:C9","sha256":"D4:21:DC:95:F2:99:C8:51:93:86:0E:C1:CD:D2:4C:07:16:FD:A7:67:A3:98:60:B3:EA:F7:4B:EE:A2:9B:DF:AB"}}},"request":{"raw":"GET /img/rations-full.webp HTTP/1.1\r\nHost: nearkat-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearkat-proposal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Sep 2026 07:03:26 GMT\r\netag: \"29cea-65c0cf68c0b80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: image/webp\r\ndate: Tue, 22 Sep 2026 20:50:18 GMT\r\nserver: cloudflare\r\nage: 231\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6iqIQjjtEjMP%2BTAYXODoVMBidfC6Ld9%2FFYfE%2FCWVEX6OTxyVuaH%2FksWNtKCCc7o2ObLSBw8%2B8LDE1n%2BxymYvTuE0%2FB6Bx9HXzybdArOpM2bTDDT5wqf5l3bNMmXlSbx3LMYwrF4fQw%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3f42e6128330883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171242,"size_decoded":172042,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2f983a7e5aba3859dee1f2f77b24ec88","sha1":"ef10d8aae40871672f18ca5c55590acdd3ce605c","sha256":"b267eb8b64ec2ea333f4daa054343dd9246ed9ce5bc03607339ee491eeafae92","sha512":"ea6f6796c59da95478ac19611d9ea6a5701ede9e5406ffac68331c829a5fee3c49de1ff3b779593d8546bf10b8e4acccec0d94b0c7758e7d61c47f4ff5888cbc","ssdeep":"3072:mGy+VEyZqPizTPmO2u5iNbwndgx8J3eZNteQMD04ntQQB1jKkQ5gfTwuPC:mGt9QPUPm3DNbwndg3ZNteQ0t7+5u6","tlshash":"2cf3221e2e26fdcf3d316f20d9852603d7493c265d2b68de353c8688576834ab461abf","first_seen":"2026-09-22T20:47:04.744312Z","last_seen":"2026-09-22T20:50:57.015377Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nearkat-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearkat-proposal.xyz/","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T20:50:17.873Z","timestamp":1790110217873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nearkat-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 23:21:34 GMT","end":"Sun, 20 Dec 2026 23:21:33 GMT"},"fingerprint":{"sha1":"93:9E:27:7C:9D:D8:71:3F:36:A8:E0:7D:2C:82:36:63:87:68:1E:C9","sha256":"D4:21:DC:95:F2:99:C8:51:93:86:0E:C1:CD:D2:4C:07:16:FD:A7:67:A3:98:60:B3:EA:F7:4B:EE:A2:9B:DF:AB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nearkat-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Sep 2026 07:09:28 GMT\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=epzXLYSGNByUIBS0YCoNIMgNvegcOF9U2H0VEPSctnacJKIITyA16Pt0fgj8S7JH6cUlBC7x8b8qgoEuJfF7gf3s1jilxdVZMaO%2FwjLtDsVaxmJzPMcGt9YxRbupF%2FTCZ6P9TYEdyQ%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\ndate: Tue, 22 Sep 2026 20:50:18 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3f42e5def280883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":53678,"size_decoded":13169,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51748), with CRLF line terminators","md5":"3d09812be78df631ffacff667df7c678","sha1":"779229b3f263ba8a36dffc946acfd221fb30f16d","sha256":"14969ac66b4b37f6b1217bec40475b5da70de238c69e19d4db6ce153b5fc752f","sha512":"3fe1eeb8123938865561039fe4c4fbebeb4bffa7a54908427e3ba7521262fb9add2b81415ef3e97c8655911a166339ea24736d7079fb4ab5bea11d2e08b050b1","ssdeep":"768:4GaLAu3zAGcCfURfU6DKW47cIfUDfUTzOxoq/mccCYZrYIDcDMJ7c1A7WT:4qG5W47Yoq/mfBr77ds","tlshash":"0e331a699204123f922b47cce71af36451be41decb1a0048b4281bb65f7af9bbd776c4","first_seen":"2026-09-22T20:47:04.745608Z","last_seen":"2026-09-22T20:50:57.016075Z","times_seen":2,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":7,"connect":19,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nearkat-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearkat-proposal.xyz/fonts/archivoblack.woff2","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nearkat-proposal.xyz/","date":"2026-09-22T20:50:18.265Z","timestamp":1790110218265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nearkat-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 23:21:34 GMT","end":"Sun, 20 Dec 2026 23:21:33 GMT"},"fingerprint":{"sha1":"93:9E:27:7C:9D:D8:71:3F:36:A8:E0:7D:2C:82:36:63:87:68:1E:C9","sha256":"D4:21:DC:95:F2:99:C8:51:93:86:0E:C1:CD:D2:4C:07:16:FD:A7:67:A3:98:60:B3:EA:F7:4B:EE:A2:9B:DF:AB"}}},"request":{"raw":"GET /fonts/archivoblack.woff2 HTTP/1.1\r\nHost: nearkat-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nearkat-proposal.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Sep 2026 07:03:26 GMT\r\netag: \"48ac-65c0cf68c0b80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\ndate: Tue, 22 Sep 2026 20:50:18 GMT\r\nserver: cloudflare\r\nage: 231\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zVzPlasUI7nfpEQXpex8ltdi10ZaWy8NvWVgBGiZWCW7ArSIpN2wu%2FnUMeKATKqNI%2FKdvWf2YC2LygjEh5kLzi16ZM1bybgq48S31NAqelgw%2F%2F1Ek5Ab%2BZR%2B%2BnsnQnSNAX0Xceydtw%3D%3D\"}]}\r\ncf-ray: a3f42e602fd80883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18627\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18604,"size_decoded":19404,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18604, version 1.0","md5":"4b6914a69e6a586fbe253f73d19d90b0","sha1":"1f965709606b88830826c45ef0ebcfe3484aa674","sha256":"25f33e61cf995abd6be62931cf03bf427286259177b43618cc410ee0157cfd30","sha512":"c279d8584561068ccf6908f37ea6ab33a981b7646d037108a30b3c886c5dd4e53a4107cbe129d430c6230e1528a466a61c3cb3017df15aa50421c5e0be4c166e","ssdeep":"384:7OXmkDf7dA0ytyin9ES4S8sDqcMHXuOsR+qSg43T47z3vt:7cmkDTdTunWSrOsQqyU77t","tlshash":"7c82e13d73cb9ccb5929ca22d53c821d863af6e1275c94d1b0b2e8421e1cd9a71d494f","first_seen":"2023-05-04T19:52:48Z","last_seen":"2026-09-22T20:51:17.673924Z","times_seen":5266,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nearkat-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearkat-proposal.xyz/fonts/grotesk500.woff2","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nearkat-proposal.xyz/","date":"2026-09-22T20:50:18.266Z","timestamp":1790110218266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nearkat-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 23:21:34 GMT","end":"Sun, 20 Dec 2026 23:21:33 GMT"},"fingerprint":{"sha1":"93:9E:27:7C:9D:D8:71:3F:36:A8:E0:7D:2C:82:36:63:87:68:1E:C9","sha256":"D4:21:DC:95:F2:99:C8:51:93:86:0E:C1:CD:D2:4C:07:16:FD:A7:67:A3:98:60:B3:EA:F7:4B:EE:A2:9B:DF:AB"}}},"request":{"raw":"GET /fonts/grotesk500.woff2 HTTP/1.1\r\nHost: nearkat-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nearkat-proposal.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Sep 2026 07:03:26 GMT\r\netag: \"3400-65c0cf68c0b80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\ndate: Tue, 22 Sep 2026 20:50:18 GMT\r\nserver: cloudflare\r\nage: 232\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9xTdBNAzR%2BoThYJqGOW0THH4m2dHbafmE80ehRCED6ZM%2FqnC8DE8IweEJBLid9m93%2F5pMLjCmewi%2FwDLyUfROVTDtIo4j3%2BwUZZZVOdweDvi%2FOhayp6hRn912iNKWjrFTX4EhJo4Zg%3D%3D\"}]}\r\ncf-ray: a3f42e602fd90883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13335\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13312,"size_decoded":14110,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13312, version 1.0","md5":"ab4861869c91f3c339f3a9f0a0d5a0b5","sha1":"dd2759071c4c16a84288d76cd9bed55854249c0a","sha256":"1b1a8131d9edf975d9decee81e2f2bf504812f7a4f498e5500f28a613e22e64c","sha512":"f56a283704582c7f118678abc08c1c6c8c157587c96f152798dd26f966d2cd02bb8a882eea8099ff0c96d77218b3829ddbaed3d7661d76c6e4d7151992f448d8","ssdeep":"384:P5TXOyLMeg+lHeFEaoEJKeZDHF9JyiVU7Soua7Cis:IeM3+ltEJK6rKufis","tlshash":"3752c0615d207b21ea11eeb6564338c9881f28c55ff1a5df82d8605f53adb4f053c9e0","first_seen":"2025-10-05T14:36:12.394231Z","last_seen":"2026-09-22T21:10:28.273562Z","times_seen":295,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nearkat-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearkat-proposal.xyz/img/icon-64.png?v=3","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearkat-proposal.xyz/","date":"2026-09-22T20:50:18.283Z","timestamp":1790110218283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nearkat-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 23:21:34 GMT","end":"Sun, 20 Dec 2026 23:21:33 GMT"},"fingerprint":{"sha1":"93:9E:27:7C:9D:D8:71:3F:36:A8:E0:7D:2C:82:36:63:87:68:1E:C9","sha256":"D4:21:DC:95:F2:99:C8:51:93:86:0E:C1:CD:D2:4C:07:16:FD:A7:67:A3:98:60:B3:EA:F7:4B:EE:A2:9B:DF:AB"}}},"request":{"raw":"GET /img/icon-64.png?v=3 HTTP/1.1\r\nHost: nearkat-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearkat-proposal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Sep 2026 07:03:26 GMT\r\netag: \"2b8b-65c0cf68c0b80\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Tue, 22 Sep 2026 20:50:18 GMT\r\nserver: cloudflare\r\nage: 232\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PN9eABUUmpdcEc0upr%2FovTUHWYeHFcXh3SrrsWq8y9g5Chs46jWMw1keD55bGHGCvgax%2BrgifeUMiUbtjvMQin9qSuF0CvzvxCu%2FvDaS66g%2F2BAshZpZ%2BLfnVf5Y2YLS2tkjRR6wTQ%3D%3D\"}]}\r\ncf-ray: a3f42e604fe30883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11147\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11147,"size_decoded":11864,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced","md5":"fdd2a1d14fdace12781d916bdace2bb0","sha1":"43bd0ca1fee856f9f8a300802d5fb2a68d74f6a4","sha256":"157f4fce7e2d04449679ce4bf162cf35c3167d7a7874e5d2d4fe2183ac3664a6","sha512":"732a3752697af6baa1f6e7ae9cf1221806e343e1c29bef9e9c8fd484c726b11887b7111216c867a789fb3c04d8e76d9a3475d635323a54aba06002d19c7b8eef","ssdeep":"192:We8Vmg+c5Mqnkft7qvvFZvdUEhc/qVTuAJPVbhxW+Azhc8ltP:Z0f5MGcwvFLUhATjJPNhI+Atc4P","tlshash":"4832cf9f4fbcdf916655924aa287f10b9cf3ec316744916cc36829e18ea2cf5b10490b","first_seen":"2026-09-22T20:47:04.758506Z","last_seen":"2026-09-22T20:50:57.017893Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nearkat-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nearkat-proposal.xyz/img/solana-mark.svg","fqdn":"nearkat-proposal.xyz","domain":"nearkat-proposal.xyz","tld":"xyz"},"ip":{"addr":"104.21.83.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nearkat-proposal.xyz/","date":"2026-09-22T20:50:18.287Z","timestamp":1790110218287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nearkat-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 23:21:34 GMT","end":"Sun, 20 Dec 2026 23:21:33 GMT"},"fingerprint":{"sha1":"93:9E:27:7C:9D:D8:71:3F:36:A8:E0:7D:2C:82:36:63:87:68:1E:C9","sha256":"D4:21:DC:95:F2:99:C8:51:93:86:0E:C1:CD:D2:4C:07:16:FD:A7:67:A3:98:60:B3:EA:F7:4B:EE:A2:9B:DF:AB"}}},"request":{"raw":"GET /img/solana-mark.svg HTTP/1.1\r\nHost: nearkat-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nearkat-proposal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Sep 2026 07:03:26 GMT\r\netag: \"9d7-65c0cf68c0b80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: image/svg+xml\r\ndate: Tue, 22 Sep 2026 20:50:18 GMT\r\nserver: cloudflare\r\nage: 232\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rHVyUh5LORZt5Sc07Px9y7iyXOnhNvfTrC%2FKLiMKRV3hl39f%2FGK3Wx%2FjRSZ0mJ0qrKth8SHzdr2w8RavF8BXZB1bY7uTrRVMudsHG0WDkvg%2FAQQhmIy4DESNCAF0aLDjSsyUJdLAnw%3D%3D\"}]}\r\ncf-ray: a3f42e604fe80883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1168\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519,"size_decoded":1937,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1451c141117d732b103931641401bea1","sha1":"303503a4fd0b3c3b49182e8f5c72d1a6d1294d90","sha256":"3d3401109aa061dec40a8659f1847817a8e647f98de1e65e76e86a95bbe1f08a","sha512":"273bc0f2835b65bb58d9e9fd18fd04acd65eb0226283d98f5c63696452158749280eb5abec859cd30871c728e0d7291994d64ee53d0241c20c19a57d99ce6b59","ssdeep":"","tlshash":"ac51569a37f492fb700ed6e8de694456315f66e75c40e0f0c2a4ed0be10a0ce1e19ac5","first_seen":"2023-12-25T15:56:59Z","last_seen":"2026-09-22T20:50:57.018518Z","times_seen":97,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"nearkat-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}