{"report_id":"5cad54f7-9f84-4a35-955e-c8d2bafcf14e","version":0,"status":"done","tags":[],"date":"2026-10-07T08:02:29Z","url":{"schema":"http","addr":"139150.vip/","fqdn":"139150.vip","domain":"139150.vip","tld":"vip"},"ip":{"addr":"91.92.243.106","port":0,"asn":202412,"as":"Omegatech LTD","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"title":"开元棋牌 代理","dom":{"size":13122,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c98e90474e23f31946958ded31bcf9f0","sha1":"6a41826112bd2cdc83cdc130064c234fa0d1eca1","sha256":"e2fc758da1f067e2ed2bf83a6217507b7905b399193b3f8c7714fd1401553efe","sha512":"24fb01164abe2c8d1c3f0473b662013cd221e6c1782fa95037a2429ccf038dedb62c182a1eb1edb3181ae5e2d49ec3eaed394ea6817008b29d381c46fa36fc7b","ssdeep":"96:tO7mH7TgdjJB3eJbm6dOfyO2F8C7gcekh0IqzVt2gz7Zj:jgdjJYJChqO2F84Zek5qzCgz7Zj","tlshash":"dc42b78a44f6104154a6e0623fb2150e2f61ea0bc50eeb557bdc8ec89fc3ae4dc5b7c8","dom_hash":"domhash2029dc0c890e42719c1d973bd4ae383b","first_seen":"2026-10-07T08:02:39.10629Z","last_seen":"2026-10-07T08:02:39.10629Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"139150.vip/","fqdn":"139150.vip","domain":"139150.vip","tld":"vip"},"ip":{"addr":"91.92.243.106","port":0,"asn":202412,"as":"Omegatech LTD","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T08:02:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"139150.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ky63dl.com","ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-02-03T11:39:25.007334Z","last_seen":"2026-07-01T03:43:36.387854Z","alert_count":0,"request_count":12,"received_data":1040481,"sent_data":6397,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"139150.vip","ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"2026-10-04","domain_rank":0,"first_seen":"2026-10-07T08:02:30.878877Z","last_seen":"2026-10-07T08:02:30.878877Z","alert_count":1,"request_count":1,"received_data":238,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"domTimer","is_inline":false,"md5":"650f916cb66444528a1db99fe656938a","sha1":"244aba3c7cd408538f411412d3d7ed9c4288a8d7","sha256":"9348223303e59c6a01ede965a963a4aa677b10042d657ace08b5c8a9a36f0c7a","sha512":"e16ed1094dbb27918b80c70b7714d9dc5a88cd384b27f8c94a8e731fb785bed8c907c0a0bc9aab0834f3703f709ae1181383523f40f3cca3655b7fd4ecebcf1c","ssdeep":"","tlshash":"05e00000c0880030c88800b88082300880000a22cbb00808a000a88000288aa0080300","size":413,"data":"","first_seen":"2026-10-07T08:02:39.1473Z","last_seen":"2026-10-07T08:04:12.923626Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"fdc224d3482ec8297ee30ef4e390c337","sha1":"03d4e9cde231a4ed9fef2bc9e691b323ffcaf464","sha256":"fee64cc339737249164cc7ccf3af2ec520baae9768b1b0b35b8ed57a7f5155fa","sha512":"700f8c2daa988bdc087a994acc0976820f90bfc57d5c0f018054718f9b3bb8a133ba027379dbebb44e7f3c39fec3dfde6b6b024ed4efe53ddacca5b2fbaba06d","ssdeep":"","tlshash":"1bf0249b0597205a1a2f64e58e072109b27324ff0c48e481798c87d65f8467fc07beae","size":526,"data":"","first_seen":"2026-10-07T08:02:39.150865Z","last_seen":"2026-10-07T08:04:12.921736Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"03e95f69159687310b334392c89f06b7","sha1":"a23a3d18908159c4700a64f3e2cab07cc29b5ce2","sha256":"587d4ec2b7cde247f27bfbd5603f592b294c681c9984f81bdafb71663e31796d","sha512":"6199266d7bb67e564d0f277af4da33a18c9cd94824539ecc5812eaa66701a0b1c15c698792c035a6e88f2c7c9d0ee2e7ba4e75578139b5c79a5b3ec58550040b","ssdeep":"","tlshash":"94f05948e4835b47ea32203653bd711914d5d223280fda153e9ed9e05fcce7848acbe9","size":634,"data":"","first_seen":"2026-06-26T16:22:35.587901Z","last_seen":"2026-10-07T08:04:12.922465Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"6403cbc1e4d851b9f1a4b11f36740415","sha1":"0cae47008d745855c8cd67db85ba082876c6041e","sha256":"b825e18e481f908895e266cbdfa45f0830915583c74e3814dd0b53e24717ea78","sha512":"d064c64cabe4c64edf25b801a131ad869870cfa3986331bdfa5cd498c25a51f0386bb39b7eef10b73c804b547d61c005b4eaac7997e3ad39c97008db459cdc1c","ssdeep":"","tlshash":"dbe0cd0d35e900d0e9ab7072859f540d6430243f054b8a047d0c9eeddfa98bdc2c1f38","size":350,"data":"","first_seen":"2026-06-24T08:08:43.932974Z","last_seen":"2026-10-07T08:04:12.923009Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"domTimer","is_inline":false,"md5":"a896555f5193e3fd9e6a621209a214dd","sha1":"3fb9b0a5e7e8bef51566dbc4ffd49c30c8df6be4","sha256":"a15b1a28a0dc9ae39059eedb559ad2526741bd8ef37f2a03139a2ff494604e47","sha512":"ac620f5b69775e3fec769c1eab233a09c0f4f4b828c6aacd7392f81ffd08a0e85026f832f34ac667c9904c43fda498ec5be8067968d559360de7cd7985251b9b","ssdeep":"","tlshash":"bee00008e0000222c88c00b8808a208880280b32e2308800a00028a2000082c0880200","size":413,"data":"","first_seen":"2026-10-07T08:02:39.158958Z","last_seen":"2026-10-07T08:04:12.924335Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ky63dl.com/os2.js","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cc566f04b61079b6ce7f5fee685c736","sha1":"a4672eee6318e1592ad6b0d942e86d38815fb13e","sha256":"d4919537fbb0d0365582e74b255b6f776c24830768255fdca7284aea7cad951b","sha512":"8d26907ea1e27ffa803e769dd293647337023e2e04ba485ee34a48352b9bb84908b8767af44c659364a09c1e78c39cbbfc19043154e01bd37688987841ead0b0","ssdeep":"3072:TWGoYZWo1U4bu/SMaDxCScKLo62lY+MnLXEc:Xoc9U4bu/SMaDxCScKLo62ljMbEc","tlshash":"af243d8aa6e324315213b17d4e6f9849b135985f1e9cfd063d4c82a49f0c83e97b5eec","size":221626,"data":"","first_seen":"2024-07-07T16:16:28Z","last_seen":"2026-10-07T08:04:12.915995Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ky63dl.com/static/js/jquery.js","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a13f7f208ba534681deadb1ec7a2e54a","sha1":"3f51e2eecfa88c61e1200a48ed14f2cdda98ed87","sha256":"d72fcb8924d1e14dbd4b04aff994c1183ee86c620f0aaac034f75fc508548220","sha512":"63535b5944b535a8d3343ae691c15a5cd1211f1fb071ae3a8ea076eb12492c827ba18f6253a353c9341ab329d90a6accde473ab989f4614bb34ebf43ccf11765","ssdeep":"1536:lYRKUfAjtledhTmtaFyQHGvCXseUOgRc9izzr4yff8teLvHHEjam7WuX3yzSiLnM:cUb6GvCD0932o2skAieW","tlshash":"5c93e7d9b2d67123c7b731b850af510bb17698aa784c8c50f068d8e4be74a48907bf7d","size":94843,"data":"","first_seen":"2023-03-07T01:34:33Z","last_seen":"2026-10-07T08:04:12.92003Z","times_seen":1633,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"ky63dl.com","filename":"https://ky63dl.com/?proxyAccount=38991567","line_number":50,"column_number":12}]},"http":[{"url":{"schema":"https","addr":"ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T08:02:00.472Z","timestamp":1791360120472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ky63dl.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 10:50:57 GMT","end":"Fri, 04 Dec 2026 10:50:56 GMT"},"fingerprint":{"sha1":"EE:DB:E6:2F:71:B1:D9:B4:2B:6C:F1:87:3D:4A:BD:C0:97:20:EB:DF","sha256":"FD:2F:DD:C4:60:DF:C8:1A:AD:DC:BA:7D:D6:42:0A:67:F2:A7:0D:92:80:DD:2D:FA:64:36:00:F4:42:23:43:47"}}},"request":{"raw":"GET /index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567 HTTP/1.1\r\nHost: ky63dl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ky63dl.com/?proxyAccount=38991567\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 08:02:00 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 05 Jul 2026 13:55:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4a626a-3354\"\r\ncontent-encoding: gzip\r\nserver: openresty_edge\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":13140,"size_decoded":3174,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"d425f102255948b1e0f66553b3fc0a6a","sha1":"f925445091d04838e9c0ac6146804595a84199df","sha256":"ee53ccf1b431f16f43c412b7451215b27f79a04ca48ad8c7de35038ce13bc59b","sha512":"696dba64a6bc80c0fedabe701b8c7b119d06b00ad0f586e5a20c2e520a20e04150b7a24998745c48569057e0e7221a55bc62b292666f8a34cdde0739753c805b","ssdeep":"96:1O7mH7ggdjJB3eJbm6dOhyO2J6h0/8C7gc5ozVt2g87o:ogdjJYJChMO2J6M84Z5ozCg87o","tlshash":"d842a68a44f610411496a0623fb6160e2f62ea1bc50eeb517bdc5ed89fc3ae4dc5b7c8","first_seen":"2026-10-07T08:02:39.109846Z","last_seen":"2026-10-07T08:04:12.91483Z","times_seen":2,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ky63dl.com/static/css/reset.css","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567","date":"2026-10-07T08:02:00.851Z","timestamp":1791360120851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ky63dl.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 10:50:57 GMT","end":"Fri, 04 Dec 2026 10:50:56 GMT"},"fingerprint":{"sha1":"EE:DB:E6:2F:71:B1:D9:B4:2B:6C:F1:87:3D:4A:BD:C0:97:20:EB:DF","sha256":"FD:2F:DD:C4:60:DF:C8:1A:AD:DC:BA:7D:D6:42:0A:67:F2:A7:0D:92:80:DD:2D:FA:64:36:00:F4:42:23:43:47"}}},"request":{"raw":"GET /static/css/reset.css HTTP/1.1\r\nHost: ky63dl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 08:02:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Apr 2026 07:38:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d4b475-6b0\"\r\nexpires: Wed, 07 Oct 2026 19:41:26 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nserver: openresty_edge\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1712,"size_decoded":1080,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (1499), with CRLF line terminators","md5":"b53440d7d25efe80f7b48db5fd89ac14","sha1":"5a352413a584f296feb6819f3c337d918cca4bcb","sha256":"9d1ed91c7c3ecc411b977df79f7272e4102957a0ecc319d0f60d35ca9f967611","sha512":"0cbada6c3619930e04392c7152f9bb4d9328201f3571e3c351a0d8edede4e1c60c7add6ac0ac61f32a5642bd9c8ea0d56d37948d477342ea6ee4da77f35f4c65","ssdeep":"","tlshash":"7d312122c338eca7b57bc8aa3115fe5d3a9c9292580bcb74fa327815cc550673712b6c","first_seen":"2025-09-08T13:31:47.321782Z","last_seen":"2026-10-07T08:04:12.918884Z","times_seen":24,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ky63dl.com/static/css/global.css","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567","date":"2026-10-07T08:02:00.852Z","timestamp":1791360120852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ky63dl.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 10:50:57 GMT","end":"Fri, 04 Dec 2026 10:50:56 GMT"},"fingerprint":{"sha1":"EE:DB:E6:2F:71:B1:D9:B4:2B:6C:F1:87:3D:4A:BD:C0:97:20:EB:DF","sha256":"FD:2F:DD:C4:60:DF:C8:1A:AD:DC:BA:7D:D6:42:0A:67:F2:A7:0D:92:80:DD:2D:FA:64:36:00:F4:42:23:43:47"}}},"request":{"raw":"GET /static/css/global.css HTTP/1.1\r\nHost: ky63dl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 08:02:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 557\r\nlast-modified: Tue, 07 Apr 2026 07:38:29 GMT\r\netag: \"69d4b475-22d\"\r\nexpires: Wed, 07 Oct 2026 18:16:33 GMT\r\ncache-control: max-age=43200\r\nserver: openresty_edge\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":557,"size_decoded":879,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"aad40412154a813fbace2ca08672e19c","sha1":"df9133df9b94b8cb43c4ebc83d0a283fd9e0ee65","sha256":"f75415420925dbc7af74839f88478b8b0990684f3bab6ed30c8a15714ed96af5","sha512":"fd89448a600d744d2988bb755ff843dbd19b0e594b6336cee4f2289924f7168aeffb9b33289f7b0db572ce8c3889cd0a5d4f722d140e93504dabd831feb2dba2","ssdeep":"","tlshash":"92f08ba8b565b58ce2125934eff41bb61c3814833e4f05c7c928eb90e54e009b9b30c4","first_seen":"2025-09-08T13:31:47.322684Z","last_seen":"2026-10-07T08:04:12.919429Z","times_seen":10,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ky63dl.com/static/css/index.css","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567","date":"2026-10-07T08:02:00.855Z","timestamp":1791360120855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ky63dl.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 10:50:57 GMT","end":"Fri, 04 Dec 2026 10:50:56 GMT"},"fingerprint":{"sha1":"EE:DB:E6:2F:71:B1:D9:B4:2B:6C:F1:87:3D:4A:BD:C0:97:20:EB:DF","sha256":"FD:2F:DD:C4:60:DF:C8:1A:AD:DC:BA:7D:D6:42:0A:67:F2:A7:0D:92:80:DD:2D:FA:64:36:00:F4:42:23:43:47"}}},"request":{"raw":"GET /static/css/index.css HTTP/1.1\r\nHost: ky63dl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 08:02:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 0\r\nlast-modified: Tue, 07 Apr 2026 07:38:29 GMT\r\netag: \"69d4b475-0\"\r\nexpires: Wed, 07 Oct 2026 18:16:33 GMT\r\ncache-control: max-age=43200\r\nserver: openresty_edge\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":318,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T11:41:02.815504Z","times_seen":18913144,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ky63dl.com/os2.js","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567","date":"2026-10-07T08:02:00.861Z","timestamp":1791360120861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ky63dl.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 10:50:57 GMT","end":"Fri, 04 Dec 2026 10:50:56 GMT"},"fingerprint":{"sha1":"EE:DB:E6:2F:71:B1:D9:B4:2B:6C:F1:87:3D:4A:BD:C0:97:20:EB:DF","sha256":"FD:2F:DD:C4:60:DF:C8:1A:AD:DC:BA:7D:D6:42:0A:67:F2:A7:0D:92:80:DD:2D:FA:64:36:00:F4:42:23:43:47"}}},"request":{"raw":"GET /os2.js HTTP/1.1\r\nHost: ky63dl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 08:02:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Apr 2026 07:38:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d4b475-361ba\"\r\nexpires: Wed, 07 Oct 2026 19:41:27 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nserver: openresty_edge\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":221626,"size_decoded":57176,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"2cc566f04b61079b6ce7f5fee685c736","sha1":"a4672eee6318e1592ad6b0d942e86d38815fb13e","sha256":"d4919537fbb0d0365582e74b255b6f776c24830768255fdca7284aea7cad951b","sha512":"8d26907ea1e27ffa803e769dd293647337023e2e04ba485ee34a48352b9bb84908b8767af44c659364a09c1e78c39cbbfc19043154e01bd37688987841ead0b0","ssdeep":"3072:TWGoYZWo1U4bu/SMaDxCScKLo62lY+MnLXEc:Xoc9U4bu/SMaDxCScKLo62ljMbEc","tlshash":"af243d8aa6e324315213b17d4e6f9849b135985f1e9cfd063d4c82a49f0c83e97b5eec","first_seen":"2024-07-07T16:16:28Z","last_seen":"2026-10-07T08:04:12.915995Z","times_seen":102,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ky63dl.com/static/js/jquery.js","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567","date":"2026-10-07T08:02:00.854Z","timestamp":1791360120854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ky63dl.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 10:50:57 GMT","end":"Fri, 04 Dec 2026 10:50:56 GMT"},"fingerprint":{"sha1":"EE:DB:E6:2F:71:B1:D9:B4:2B:6C:F1:87:3D:4A:BD:C0:97:20:EB:DF","sha256":"FD:2F:DD:C4:60:DF:C8:1A:AD:DC:BA:7D:D6:42:0A:67:F2:A7:0D:92:80:DD:2D:FA:64:36:00:F4:42:23:43:47"}}},"request":{"raw":"GET /static/js/jquery.js HTTP/1.1\r\nHost: ky63dl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 08:02:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Apr 2026 07:38:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d4b475-1727b\"\r\nexpires: Wed, 07 Oct 2026 19:41:27 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nserver: openresty_edge\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94843,"size_decoded":34236,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32769), with CRLF line terminators","md5":"a13f7f208ba534681deadb1ec7a2e54a","sha1":"3f51e2eecfa88c61e1200a48ed14f2cdda98ed87","sha256":"d72fcb8924d1e14dbd4b04aff994c1183ee86c620f0aaac034f75fc508548220","sha512":"63535b5944b535a8d3343ae691c15a5cd1211f1fb071ae3a8ea076eb12492c827ba18f6253a353c9341ab329d90a6accde473ab989f4614bb34ebf43ccf11765","ssdeep":"1536:lYRKUfAjtledhTmtaFyQHGvCXseUOgRc9izzr4yff8teLvHHEjam7WuX3yzSiLnM:cUb6GvCD0932o2skAieW","tlshash":"5c93e7d9b2d67123c7b731b850af510bb17698aa784c8c50f068d8e4be74a48907bf7d","first_seen":"2023-03-07T01:34:33Z","last_seen":"2026-10-07T08:04:12.92003Z","times_seen":1633,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ky63dl.com/static/picture/kf.png","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567","date":"2026-10-07T08:02:00.864Z","timestamp":1791360120864,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ky63dl.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 10:50:57 GMT","end":"Fri, 04 Dec 2026 10:50:56 GMT"},"fingerprint":{"sha1":"EE:DB:E6:2F:71:B1:D9:B4:2B:6C:F1:87:3D:4A:BD:C0:97:20:EB:DF","sha256":"FD:2F:DD:C4:60:DF:C8:1A:AD:DC:BA:7D:D6:42:0A:67:F2:A7:0D:92:80:DD:2D:FA:64:36:00:F4:42:23:43:47"}}},"request":{"raw":"GET /static/picture/kf.png HTTP/1.1\r\nHost: ky63dl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 08:02:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Apr 2026 07:38:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d4b475-2887\"\r\nexpires: Fri, 06 Nov 2026 06:34:28 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nserver: openresty_edge\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10375,"size_decoded":10735,"mime_type":"image/png","magic":"PNG image data, 128 x 195, 8-bit colormap, non-interlaced","md5":"76477e7d31a5ab35f67080d4467eb2cc","sha1":"21ad16f78ba1263442e6ed615511d4091287040c","sha256":"1fb65d9d9228749a7fd2037520fd6f056b9f6964faf4b8ce4790c871c593a0ca","sha512":"1aa2b3b6f46b578176bfe23b865999769f7f00a92ae7bee5cbdaff482fcf59aeed6c9cf3dba0175bcbab6e3bfc7e5cadf35f57930bb3731138ee6c83688f0d5e","ssdeep":"192:W1x32iwW+4Z9/TAEdfCi2kcwH9Er5bc09ry/Weer6k3TDYwwBBemrAeQVy/WAwut:W1xRwnOsEdKibcKEt3xYWt3TDmBePeQG","tlshash":"b122bfc8164fec5151856aeba8f4b5f5fd9cba373b9084e12b320c06e3150e0ee55a0e","first_seen":"2024-09-19T22:30:05.618716Z","last_seen":"2026-10-07T08:04:12.911725Z","times_seen":18,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ky63dl.com/static/picture/btn.png","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567","date":"2026-10-07T08:02:00.866Z","timestamp":1791360120866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ky63dl.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 10:50:57 GMT","end":"Fri, 04 Dec 2026 10:50:56 GMT"},"fingerprint":{"sha1":"EE:DB:E6:2F:71:B1:D9:B4:2B:6C:F1:87:3D:4A:BD:C0:97:20:EB:DF","sha256":"FD:2F:DD:C4:60:DF:C8:1A:AD:DC:BA:7D:D6:42:0A:67:F2:A7:0D:92:80:DD:2D:FA:64:36:00:F4:42:23:43:47"}}},"request":{"raw":"GET /static/picture/btn.png HTTP/1.1\r\nHost: ky63dl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 08:02:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Apr 2026 07:38:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d4b475-50be\"\r\nexpires: Fri, 06 Nov 2026 06:34:28 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nserver: openresty_edge\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":20670,"size_decoded":20752,"mime_type":"image/png","magic":"PNG image data, 357 x 103, 8-bit/color RGBA, non-interlaced","md5":"f84f3721a937c2762d3b9b11b1d9b20c","sha1":"16bdc633730d34142068afa59f5aa1d3a2f38ea3","sha256":"40fe2dd69d4fd579f180942a550807762a4241686aa92bb8e03bf14002d5a3f7","sha512":"c22d21904ba4002319694c5f6df079e0a745319806967ecc76469a71432605e34506b03ebee9cbc0201ae6f1c3a5ce98a6537d2e2ab7bb493a78a22c965e007a","ssdeep":"384:4MYOYm4sH0ukgGiVeDwLrjpqMRfX6QgvJUmd8vNI:KOYmlH07hiTZRRGPd8vK","tlshash":"8b92d068af54318b70a7518db0aa183ed3d9105955c57cf024dfc0df0c72ee869aedea","first_seen":"2025-09-08T13:31:47.319741Z","last_seen":"2026-10-07T08:04:12.912584Z","times_seen":22,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ky63dl.com/static/picture/foot.png","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567","date":"2026-10-07T08:02:00.867Z","timestamp":1791360120867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ky63dl.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 10:50:57 GMT","end":"Fri, 04 Dec 2026 10:50:56 GMT"},"fingerprint":{"sha1":"EE:DB:E6:2F:71:B1:D9:B4:2B:6C:F1:87:3D:4A:BD:C0:97:20:EB:DF","sha256":"FD:2F:DD:C4:60:DF:C8:1A:AD:DC:BA:7D:D6:42:0A:67:F2:A7:0D:92:80:DD:2D:FA:64:36:00:F4:42:23:43:47"}}},"request":{"raw":"GET /static/picture/foot.png HTTP/1.1\r\nHost: ky63dl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 08:02:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 06:42:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d9ed46-e0c3\"\r\nexpires: Fri, 06 Nov 2026 06:34:29 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nserver: openresty_edge\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57539,"size_decoded":57635,"mime_type":"image/png","magic":"PNG image data, 640 x 120, 8-bit/color RGB, non-interlaced","md5":"6df744a95d686448c86c26bfe8ee9588","sha1":"053a70d5cbf199ad371c6c31f304a546fcd67a1a","sha256":"c892e73d7a1fef92841a9a0620c16cc726609494c19630e349ffbc46c0085fbe","sha512":"03630cbcd827e555d0b1a3162ecd70b6dd6e3abaacd2a7f93e34e6153f8bfca6b4c18fa8b676f7847f3b29806cd965817f9b09e4808668ddb28af73bbc877047","ssdeep":"768:9O1bic6H8i4EJl83pQnbKzpGPGAHb7pTosZAPD8kBuglg+pdpom8BReKNC5QnFM1:sb6CEJWpQbKNGuAHbNZ9kEGQQQFk","tlshash":"8343025dc0d310f5b93ee5d142e688eb1ea2c862cdc7c1a13e9b049b39d51ba88368cd","first_seen":"2026-07-01T03:43:41.360432Z","last_seen":"2026-10-07T08:04:12.913568Z","times_seen":3,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ky63dl.com/static/image/bg.jpg","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567","date":"2026-10-07T08:02:01.275Z","timestamp":1791360121275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ky63dl.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 10:50:57 GMT","end":"Fri, 04 Dec 2026 10:50:56 GMT"},"fingerprint":{"sha1":"EE:DB:E6:2F:71:B1:D9:B4:2B:6C:F1:87:3D:4A:BD:C0:97:20:EB:DF","sha256":"FD:2F:DD:C4:60:DF:C8:1A:AD:DC:BA:7D:D6:42:0A:67:F2:A7:0D:92:80:DD:2D:FA:64:36:00:F4:42:23:43:47"}}},"request":{"raw":"GET /static/image/bg.jpg HTTP/1.1\r\nHost: ky63dl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ky63dl.com/static/css/global.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 08:02:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 11 Apr 2026 06:42:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d9ed39-96824\"\r\nexpires: Fri, 06 Nov 2026 06:34:29 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nserver: openresty_edge\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":616484,"size_decoded":594516,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x1976, components 3","md5":"b203eb7e82da792f851380e775d51ce0","sha1":"c08a4a4d664633e64d5a90c94f55e1d7d4e30edf","sha256":"5d0700d3b7808842b1043cc32118423808cd9f64ad4b207c35a69ddab8a44df0","sha512":"a7839cdfb4f9a9e51210daddd6ff43e22736ae72ad09dfdfb2f255ac69242005b075705192e9afc73c1cef15f79112d0e885d7fe9594b8275b1413667a066720","ssdeep":"12288:FWFeAu764Yp/5sP4aA2dBtedn2Jvb+mzfd9aCx:VqphsP4iO2U8V9aCx","tlshash":"a8d4ff7c2a34500ea5df1ea9c43013d323b7aa64e09f5931e101d4d3ab7b7427769eae","first_seen":"2026-07-01T03:43:41.345529Z","last_seen":"2026-10-07T08:04:12.916535Z","times_seen":3,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ky63dl.com/favicon.ico","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567","date":"2026-10-07T08:02:01.432Z","timestamp":1791360121432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ky63dl.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 10:50:57 GMT","end":"Fri, 04 Dec 2026 10:50:56 GMT"},"fingerprint":{"sha1":"EE:DB:E6:2F:71:B1:D9:B4:2B:6C:F1:87:3D:4A:BD:C0:97:20:EB:DF","sha256":"FD:2F:DD:C4:60:DF:C8:1A:AD:DC:BA:7D:D6:42:0A:67:F2:A7:0D:92:80:DD:2D:FA:64:36:00:F4:42:23:43:47"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ky63dl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ky63dl.com/index2.html?shareName=ky63dl.com\u0026proxyAccount=38991567\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Wed, 07 Oct 2026 08:02:01 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nserver: openresty_edge\r\nx-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":146,"size_decoded":310,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-07T11:08:27.358306Z","times_seen":565989,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"139150.vip/","fqdn":"139150.vip","domain":"139150.vip","tld":"vip"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T08:01:57.268Z","timestamp":1791360117268,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 139150.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 08:01:59 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 07 Oct 2026 00:40:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac594ea-895\"\r\ncontent-encoding: gzip\r\nserver: openresty_edge\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T11:41:02.815504Z","times_seen":18913144,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"139150.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ky63dl.com/?proxyAccount=38991567","fqdn":"ky63dl.com","domain":"ky63dl.com","tld":"com"},"ip":{"addr":"91.92.243.106","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T08:01:59.386Z","timestamp":1791360119386,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /?proxyAccount=38991567 HTTP/1.1\r\nHost: ky63dl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://139150.vip/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T11:41:02.815504Z","times_seen":18913144,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}