{"report_id":"66bca063-ed83-498d-9c56-7f3507d49061","version":6,"status":"done","tags":[],"date":"2026-04-22T12:32:24Z","url":{"schema":"http","addr":"s2.1kes.com","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"s2.1kes.com/","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"title":"WhatsApp","dom":{"size":180051,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65030)","md5":"71c340cb7e8db1bdf3507632c104c7dd","sha1":"f9784d1b55c35cb757c4f679c5d4f1f731d696d8","sha256":"0a45c8f541b8c4526c63cf8c2bbbf2e64285a75f6da8ff544c0a911ed0e1940b","sha512":"c75399326d28b13d3b260c4e5d1a1f454b37d6359238aca53eaa216351cebb14ebc1a0e6dc8c5abfb696a66d52ff59301e151666ce91068d243a83817dd49520","ssdeep":"1536:KbpNax/S9DEXwlwZIt5fE8Sis7YUoxqJAvshWio+VYEppkzhu3EW988+xmro525D:sm","tlshash":"d3040370126b15be1277c3f454a79fa352edc348e5b34439a2ac81772ecbc52ed87682","dom_hash":"domhash6e58a79d07df16d11e448488b4ad2446","first_seen":"2026-04-22T12:32:26.948728Z","last_seen":"2026-05-14T18:17:23.293998Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"s2.1kes.com","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-27T12:32:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"wechat.inficloudai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"wechat.inficloudai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"s2.1kes.com","ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-13","domain_rank":0,"first_seen":"2026-04-22T10:46:43.714683Z","last_seen":"2026-04-22T10:46:43.714683Z","alert_count":80,"request_count":20,"received_data":840473,"sent_data":8882,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wechat.inficloudai.com","ip":{"addr":"104.21.61.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-24","domain_rank":0,"first_seen":"2026-04-19T18:35:05.202186Z","last_seen":"2026-04-19T18:35:05.202186Z","alert_count":2,"request_count":1,"received_data":976,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"s2.1kes.com/assets/runtime-dom.esm-bundler-DJuI_5GC.js","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6a240edb1b483e4c32900120b31a7780","sha1":"59ecf24a37f4ecb6297880e3c451b07fe87ee31f","sha256":"22c4f84029fb13d379fe5b48402fd3fe666b9ecc525bd945599cc97b1951151e","sha512":"12936b2e4055387177536f4233084a4788c30c513ad3a757de2c1d6edde83b6e2ca92e973271e97d306b811f47d63c639e9b4d606ad9e3c112ded3ef87fba121","ssdeep":"1536:SCLpv+ygvxnPswDPqn2S/IMZFjbd5n7/nG1N:L7gvxnPsiPlSNZFjLn7Gj","tlshash":"9b7307f83182b57253fa19e1407b0502f3292956384ed9a8b1adaddf3e6740640b7fbd","size":73505,"data":"","first_seen":"2026-04-19T18:35:11.770998Z","last_seen":"2026-05-16T14:34:05.387059Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/assets/main-BXcc2uUm.js","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f051134cc93d51548d37075f6e9c9cc7","sha1":"3cb197bb58d8ad8ba2039ef5943b69ff751fd197","sha256":"a73f7ba5f603b0338e7336af79abd68fb3fd71157df612e7cdaa5e4e329eabb1","sha512":"8ab062b44300b2177523d2b50a9625ee6e8e7e8dcd6c47bd757e18275eb339ebdc4e938b71711f47c27c2c6d1386f0116721fb52818d3b6b5773236257f002c7","ssdeep":"768:JdP1jw/ZZmpR7Bny4r8GRM8TteY3bFz+LOih1Q9OKuZisQGbpGOraG6zmEV/Fp+S:COFv/tUOihEZpGbp+GGmM/Fp+gxG8","tlshash":"b0f2a3d8e022d9ac357be1607c5e5ca8523c0f4a941da456f15ce8623ec3be8152efbc","size":36680,"data":"","first_seen":"2026-04-22T10:46:47.220042Z","last_seen":"2026-05-14T18:17:23.313536Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"s2.1kes.com/assets/live-11-C4tk90XN.jpg","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:02.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET /assets/live-11-C4tk90XN.jpg HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s2.1kes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:32:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 15 Apr 2026 08:32:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69df4d0c-8212\"\r\nexpires: Fri, 22 May 2026 10:46:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6341\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mPQCIm%2FZMsgBTzpVXJkkj4APBd32f7%2BbtihrFkXKQNoFrQ5XylPi3zrE9nuXvcAeWTxshjNMZDRdahjbtkGXTWEdyRCaQx%2Bll0%2Bjhyeb6wwr2OWhfqM8Y%2FAO8s29dQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f04a61d1ff876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33298,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x690, components 3","md5":"74da520a84d5935fdf4b91c3f7fcf382","sha1":"caadfc3f7b3bf01b8e2054953f0da6ca1df460b6","sha256":"a4e16fb36b39b75851e5085091a2a234fd761881bd5be11065e194f970a38897","sha512":"a69d426803ad884d06576358516cca5fdec7f4449ee862ad394d542234a46fbc90fce0dd831ed695154c7b90086c6b49afcbc73002648282e081ba5aaaa563f0","ssdeep":"768:PeQ1ikYu2Qti+g3OKYbaD9mWOfh9osEVtnOON8dh4ndVGtUhv:PeQk1uhi+OT0WOf0HV4mXdF","tlshash":"d7e2f257291147a41dadec7e987d0386a00b9335fa2c660d2fb38537d5931c27f16abc","first_seen":"2026-04-22T10:46:47.217467Z","last_seen":"2026-06-19T08:23:26.838182Z","times_seen":16,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/assets/live-06-BmSVKM24.jpg","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:02.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET /assets/live-06-BmSVKM24.jpg HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s2.1kes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:32:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 15 Apr 2026 08:32:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69df4d12-dcaf\"\r\nexpires: Fri, 22 May 2026 10:46:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6341\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1p88p8yVGxskerfs8gboT85E71lJe92ey%2BYwmJ55PaaDZ6myBPTkdW%2FisHzNHbgR0soYcE30NRAdZtjcVanvJrPXC%2FfbZZNp%2BnGvze6qU8JXtH%2BpMg2uDGgtv5D4Nw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f04a61cfff076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56495,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x704, components 3","md5":"905aa349ead39c708ebccc108e4c70d6","sha1":"e7ada6401cf6c059f81b85e6d324781e5927ae31","sha256":"5c14f9873f40ed4a159d75721644629a60f27ca07caab62174cca53653976d96","sha512":"2dc743ad9e4ce9a08a0d304514e9b8e3dfc53b19c3edb6af5fd6897b5ed6f3f0818fa63b82701954627df9aead46f58c520be98b87f8183d01a4d4906c51dfa9","ssdeep":"1536:hz8/IdaKQnWRPADKnede3HZsO/ZqQfNbSsKNad3Eg5kVqJRyM7:aHqP2Kede3H2Ohq888U7qJRL","tlshash":"e543f14c33561c0abec99de48597a192707c7b1c29bc77a4c52134f70e1f5468a1b8bb","first_seen":"2026-04-22T10:46:47.208419Z","last_seen":"2026-06-19T08:23:26.848035Z","times_seen":16,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/assets/live-09-AltgC-Cr.jpg","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:02.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET /assets/live-09-AltgC-Cr.jpg HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s2.1kes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:32:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 15 Apr 2026 08:32:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69df4d0a-b334\"\r\nexpires: Fri, 22 May 2026 10:46:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6341\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BJbkinPKEa94%2FyRGkiCSQF9bAjGHfhj0d0wUFmfotWGqF95KnwQLOLUjvh9p6loFWyyem%2F9bSf1giF18eF8GqjZtuRlJvc7SsEMqRLw%2Fq8K0J9Z%2FwIRPjrHldn%2FOhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f04a61d0ff576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45876,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x689, components 3","md5":"64a0e906922d1b696238cdaa9948cfdf","sha1":"f03e26d1c7f0fac0582f47e939fe2e983beac6e0","sha256":"50366e511a05c5d65a7304615ceab8fedaf1d0aab132297021c2aa772866dc8d","sha512":"3f74a4daceaad48f7a7a9015edbfb0fce9b5049b5333475f8bec9a1ddccb13437a47767578e9e16f51709db0cbd1c506eac606085cb82a4375ad77c1ee62f8f9","ssdeep":"768:QExIQc9fZzyfHmc3Mk0PFrT77nHnigRHdFLBktEO5i86/CawUz/+xm4aHIcIOK:QExPEZ2fjMk0VT7lyqn3/CVS2xwocIOK","tlshash":"7b23f1527c3b463d7bc34531d9a929e9825b9fa60f884a4b9aa801072f1db7f4d43d28","first_seen":"2026-04-22T10:46:47.21562Z","last_seen":"2026-06-19T08:23:26.840659Z","times_seen":16,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/assets/live-10-BdfN2wNE.jpg","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:02.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET /assets/live-10-BdfN2wNE.jpg HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s2.1kes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:32:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 15 Apr 2026 08:32:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69df4d17-900a\"\r\nexpires: Fri, 22 May 2026 10:46:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6341\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8u7%2B%2BdhZEJeYc9NAXbPJZRH%2Fd8rxbyzzg3s0dIKSrKvM%2FVanelgDexaBr3mAO0Kl7eK%2F5fiVbxOkANQ26DAyqU1r7GTwPAUutX16AyOXDHPQqpZYAhwRJFbzx3EDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f04a61d0ff776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36874,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x689, components 3","md5":"b22f0614fdeea628c8c52fd54e5935bf","sha1":"01759f07bc02678b8fc5beda810de2c271f31444","sha256":"fcc6eb6ab1bd4c39732a10d139b82214d59dd7c24e6773dbaf21e5eb68c29b5b","sha512":"86e6c854f745027b2f6ea1f97595caf745d8435db2f112bbcbf501ab53b917de73bd262ed0df3cc0610db5032820ee7e35f445b33bac8e225d0470fa9b1f2560","ssdeep":"768:QeOjln2BxkkAqExhZ/p9ybFs94SwSuWt3C+QsrSoGW28OGSuKhdnQEx6S6Qa:Q9l2BGZqkb/pAbW9SSuWuZLp943Qa","tlshash":"caf2f11a3130d6927cede1ecc80fb0f657f82b0172940a6e9c61e6750a97826fad54dc","first_seen":"2026-02-20T06:09:39.938933Z","last_seen":"2026-06-19T08:23:26.853402Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/assets/live-01-ChMfvz89.jpg","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:02.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET /assets/live-01-ChMfvz89.jpg HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s2.1kes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:32:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 15 Apr 2026 08:32:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69df4d11-d256\"\r\nexpires: Fri, 22 May 2026 10:46:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6341\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0507QK9%2FTXXFAZd7zTO5wNyyNJndA46Co8Wg9Yleh9%2FSUCWRncvNUU8RC26Q6krBA%2B9E0oTSc%2BLjRNj2koaWIlpbnkzpOGTzXyu%2FhneHKmTJLAfUH5f8Slgc5lFFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f04a61cdfe576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53846,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x818, components 3","md5":"9e02c834a7506e14b5718489296df3d4","sha1":"5802d72989aceac3771a5373581919417d3e06a7","sha256":"137cbc3c3a6024d44bc806a19df006e0c2e574833bf9c3910235852743e409c1","sha512":"7c6614e1a27be58b742f3113a700a76b9555f646978aef1ee16c6de0b7a912fe81cb1527698a541dca4ffe6473f7b6107a4bbda69de2cbac1af62f4e97c4b319","ssdeep":"1536:grc15oYfWuAX5Ddto3XaczmljjZLU57xGQH:1Cm+D8vzmljlQVX","tlshash":"6233f26474174edf0ce4c2b6be494cb68a98fdf5154076e6462b03e6ebd825e818d30b","first_seen":"2026-04-22T10:46:47.230193Z","last_seen":"2026-06-19T08:23:26.843785Z","times_seen":16,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/assets/live-03-vidL1xeh.jpg","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:02.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET /assets/live-03-vidL1xeh.jpg HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s2.1kes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:32:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 15 Apr 2026 08:32:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69df4d18-adae\"\r\nexpires: Fri, 22 May 2026 10:46:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6341\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MI%2B%2F%2BVFfaWnjgBQABYCIaAzJ160rzWvGeb201knIFDjHbcGDJLW7uq9IBdnekMQo2Aogrl6f4ePr7PotLAn79QLV2%2BQ24BF9d56lEnBDMPEmqYmdvcugs1jA9mTZbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f04a61cefeb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44462,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x689, components 3","md5":"550b48cbd61657aed78778b6849efbff","sha1":"5eca98d04f882b1bfd8f65abe0db49cba5f5bd06","sha256":"fecf16a0a195713f055803d95ca89e0493ae11a5763df85db11c6c90da1fb67f","sha512":"ea0398c5f1351af8f19ffd93a94cac0f80e6a649ccda854fec5fe783f1db48182e877c3cdb99ea21e1548155dc941ef5278aa69285d8af681fb168a882a42756","ssdeep":"768:QOSQv+jOZHjbwAeiB7HMsBtwji5oKvn4H3dBrJHY8mOeC9dsqE2UHK1w:QO/vxjxBLMWM97H3dKOL9uwK","tlshash":"d213f18d797ad8a7ca5c827641f0c9ba7fe3462000521e1fa26db941648f2172f6e7cd","first_seen":"2026-04-08T15:18:54.535705Z","last_seen":"2026-06-19T08:23:26.854522Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/assets/live-07-HIoBRpwd.jpg","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:02.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET /assets/live-07-HIoBRpwd.jpg HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s2.1kes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:32:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 15 Apr 2026 08:32:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69df4d0c-e261\"\r\nexpires: Fri, 22 May 2026 10:46:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6341\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IWwLVE%2FoZ6QHcQp6d5ks0yMUwHcJNwY43XwicWnUIy9Oh4l%2BHx%2FL%2FNezP6Zq1JaI3Sdtl4CNNP6HWs19yifxfGdbmvqOFDYhO3NAphclPoFSGwViqMpwhXBbp6OKvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f04a61cfff176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57953,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x689, components 3","md5":"60dbdf043264aee1223fa3e4a45634cd","sha1":"27e822a9333b1574198412a513203f0fb6d953b3","sha256":"11a849f6345f00f416b515c27e89f2483874cc2f34a1e04f0c342bd58d1a8d57","sha512":"2e90d3c1f013dd6f2893fe8d21a0ccadbf22186c8130233e339a5f83d633110d3a5a1f45e2c9603f9e72e4a475b2dcaf9844909d7b33f6c0aa19d5065e109bfd","ssdeep":"1536:QwCR3QUC0Y7VnOmgxuJUtBn8bD268mIAu7nzcv6FZcH:HS3k04VnO7EOXejyn4v6PcH","tlshash":"19430113b94dfc32e077997a2989f502ea91efb6b9b3144ce673982310d04978e075b3","first_seen":"2026-04-22T10:46:47.211181Z","last_seen":"2026-06-19T08:23:26.84331Z","times_seen":16,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/assets/live-08-DMfWJ5es.jpg","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:02.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET /assets/live-08-DMfWJ5es.jpg HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s2.1kes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:32:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 15 Apr 2026 08:32:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69df4d0b-c36f\"\r\nexpires: Fri, 22 May 2026 10:46:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6341\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JQB1G2axPXRIvhqZy%2B7f9a6FOk161KCXm%2BvE3wNGe7xtLefISgCrm%2BnchfFX6ENmEv1FWsxN6UEvkBXlEZH%2F5BT8WdVBe4p37EOcs2IIyTGJ%2BWUwZZuYorcVqstsdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f04a61cfff276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50031,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x690, components 3","md5":"a3425878cd76019c1039f0ff3dc77640","sha1":"376cf03b057beab54acc099255f6d035f7234364","sha256":"9c6165dad45412ebf2c133a15a0fc15eec8130b2bc69835c0a84b64a557cf1d1","sha512":"51f044041ad305f85fd023586fed3405f46857f598312269d4393d787c8e4885fc669cccffed2c20a8507f52619524c868f6fb4a9c263ef117be04d76c6fe404","ssdeep":"768:P0bhvADS5PDuPh7DijpFv9k2daYIKip6b6pbtSXagLFdlNlRszkWi:P0dvADS5buPFDuy2UYck0ZSXFplRsIf","tlshash":"fb23029e3a07277206c1c236dac8031fa1b4b95e5c59c59ea6b4140bdbb46f7cc899c8","first_seen":"2026-04-22T10:46:47.213605Z","last_seen":"2026-06-19T08:23:26.851188Z","times_seen":16,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/assets/live-12-sBAK2-gK.jpg","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:02.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET /assets/live-12-sBAK2-gK.jpg HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s2.1kes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:32:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 15 Apr 2026 08:32:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69df4d16-a77e\"\r\nexpires: Fri, 22 May 2026 10:46:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6341\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oznGQwtxr3zY1AEVMR0mkhB2VEYLQjIJeMDA3nMOuSZWQDdy3d6bnnAW0DDBxICJ4LoXelnYkdcfzPiX3CEoEjplcCCuONmMNJoE7d2xmvN5vmWbLoGnJZQmXAvqkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f04a61d1ffc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42878,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 460x690, components 3","md5":"fb64119db9116687d10d050ad0b5f62c","sha1":"a1bc0d031911c0c41ce209cd45f02db7f5f1f02e","sha256":"f4926f4725c29c6107a709cced0c6d2b79c76b4699269b05ca408a03c1d06c63","sha512":"0984daf58516fff33fefb55087db021833c41577e6e8333196ce689de3c75d2afe6a042e7e0b32e9374c3a8a925379a3fdcb2f45bedbbee071bae7debff0c760","ssdeep":"768:vWyiJXO4YBlvOS7PRYpkmMTXUr4P6fI3cXMsxUInQSJKIjb85o+dQ2TomaqydgD:vWZJXO4YfvOSLRYpkmck+13cLxU2JJjc","tlshash":"4f13f211eba68687a6c560fec8f55e3674d0e5136ce4567c63109aae38f08c0bbc5d71","first_seen":"2026-04-22T10:46:47.224151Z","last_seen":"2026-06-19T08:23:26.844737Z","times_seen":16,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/assets/live-13-ijd0olIG.jpg","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:02.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET /assets/live-13-ijd0olIG.jpg HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s2.1kes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:32:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 15 Apr 2026 08:32:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69df4d14-859f\"\r\nexpires: Fri, 22 May 2026 10:46:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6341\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nBiJKON%2BlOyo8At%2FyLCMFvpTselcIUE6D%2F0KLt5dLwSgMOeSgIDRYCSPoJx%2F5DxZ8yUkIOQZuTD2DqtF0eFEHArTZuP8ubPjcWqo7VDWo8qWxMMnQM65zSQUUCOasw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f04a61d1ffd76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34207,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x690, components 3","md5":"2001a8cb622773946d806558fe9606c9","sha1":"c7c6f2f891d5c8b9b1047c98f21f123dce0f10de","sha256":"5be61f3f8276cbada55caedbec70c263d984e1866cbdd8acf94260f25b0124eb","sha512":"66c7ef5a2498f633ad71cf789815db915d4d29390fc7b00732db2c5ed2a142c7020ab251e321e900d3cbdcecf02934f32029fd93a6b2a5abd4969f6f123eee5d","ssdeep":"768:PVigU95PeQd5LSXrs8QCSH84Lz4p9S8G9Od1OzUGdD:PVlK5Pe0Ms8RS/Q9S9OwR","tlshash":"01e2f189807927a9fa5ae43e704796eb4bf057c4e6582c8cff3b21b0c3152e48706c6d","first_seen":"2026-04-22T10:46:47.239343Z","last_seen":"2026-06-19T08:23:26.8459Z","times_seen":16,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/assets/live-14-mo3pgvKj.jpg","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:02.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET /assets/live-14-mo3pgvKj.jpg HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s2.1kes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:32:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 15 Apr 2026 08:32:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69df4d18-ac63\"\r\nexpires: Fri, 22 May 2026 10:46:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6341\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BXNvwnVw9SnFOU74S2A2sDX8XAAZcaTJprL3GhyLknUivVv1CEJObxeZMrE7Z%2Byw6XJrkapTUdkSmQpc28tiO53hoVFNSm6Q7LMLMWbNwtys68UgwNDmTH2Ot0EWMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f04a61d1ffe76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44131,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x690, components 3","md5":"a7044ab48bb95b7f4f7706d69a04a4b9","sha1":"53242e77818561699d981456e77a29b0a4638e1b","sha256":"af56911d0f8f0f034fa2a1a5338a115af57fa78b4b1dea6fb235b54743384e61","sha512":"5b47680398e8c8f20bb6215e507948097adfc409b9460ed4f9dfaaa62c2195c01875b605eee7a97cc49df43554eadc0070d93ecc4af2e1cb39f3f4a8897b528c","ssdeep":"768:PbwZfma7BBmhE5MSU591ygTliiOaP5A9Tz7JJOqLiC/J8Drn0ANgCC7i:PYfmauIMN59tQL0qH7JJPOC/J8Dr0Wwi","tlshash":"c5130122ff1f37c0a619d0f414bd627422e6b91649107e250b11ec19a7c56f63b8dcf9","first_seen":"2026-04-22T10:46:47.225829Z","last_seen":"2026-06-19T08:23:26.838723Z","times_seen":16,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wechat.inficloudai.com/api/number/geo-country","fqdn":"wechat.inficloudai.com","domain":"inficloudai.com","tld":"com"},"ip":{"addr":"104.21.61.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:02.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inficloudai.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:31:38 GMT","end":"Mon, 22 Jun 2026 12:31:37 GMT"},"fingerprint":{"sha1":"D2:F4:48:75:D5:5E:BF:35:DF:83:4D:4D:90:F7:6E:8D:57:0F:C0:03","sha256":"7D:25:67:74:E4:E8:62:52:06:F0:8A:8C:1C:A1:AF:F3:2F:B7:1F:DF:AB:BF:5A:4B:B7:94:22:15:CF:C4:47:DA"}}},"request":{"raw":"GET /api/number/geo-country HTTP/1.1\r\nHost: wechat.inficloudai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://s2.1kes.com/\r\nOrigin: https://s2.1kes.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 12:32:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 33\r\nserver: cloudflare\r\naccess-control-allow-headers: Authorization, Content-Type, Content-Length, Accept, Accept-Encoding, X-Requested-With, Origin\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Type\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rd%2Faas6%2FaFBWpAXxQmLkxaIvlJP0sYyXxOdqHwhmi7DhGCjvx6Vklp3I0YH9LvZlwe4FVqfO0HxkpZRL7jw4ZQ0IWbMTVJEsQaLblfsjUUPjrafaN2GT%2FMmJarD5q%2BPXS9BZ81zJeogA\"}]}\r\ncf-ray: 9f04a61d8baf4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6215da25af792b3a51219d84e7378c54","sha1":"1e16a1231c0c1b17d7caabf569f618340108d272","sha256":"2aa1fae87cca2c2e596bde4901d986122ca19e1ed177e32f81397351f6625bf0","sha512":"2aeb305f55eafb99793359b8e12a84124d1c000e8373dc4ee8e11853ecd84c77ad8970b39eade308d5e7df85ba3933220fd99d76ba7175c6c5ae3998c5e62cc9","ssdeep":"","tlshash":"68800002283c00038a02828c2a0f0a08002fa2808c230320cc8cba20c3080e02220838","first_seen":"2026-04-19T18:35:11.801118Z","last_seen":"2026-04-24T01:42:05.405656Z","times_seen":9,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":14,"dns":1,"connect":1,"send":0,"wait":555,"receive":2,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"wechat.inficloudai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"wechat.inficloudai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T12:32:01.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 12:32:01 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 08:32:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fMprJDZWiDcqhWgfJ26IwmPLrKt6qXnFqU%2Ft0xyE9BXJyqy4Vd25UCWTc7LobJZc%2BfH%2FjPGR05d6J4vrUKS8hPvuNyMqneYN7tsvlwTV44r7WJ88pRy6Ne6iS7U8Ow%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f04a61acb5656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":486,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"cce3643672fb13564cf0c57fe2a33c3b","sha1":"50010098c09834fa1e0a0578316fd1a37c3f1956","sha256":"3a9954a70f7348e083b0b57b5aa8cbac696c4d1501e2e4982fc4a1ea4e381be0","sha512":"16385b85db351545deee28ab98f241136bfcac0f52319c9ee738473ccf6c4d3038992082c075d69094f6e4679ddc89afca2788a8c54f95e882791bd75f4a1209","ssdeep":"","tlshash":"67f09704e8f08808a23427182dc1f818ae81eb479b49dd0826fb60b84f84756cec7abc","first_seen":"2026-04-22T10:46:47.228536Z","last_seen":"2026-05-14T18:17:23.299016Z","times_seen":4,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":108,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/assets/main-r89FHAss.css","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:01.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET /assets/main-r89FHAss.css HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s2.1kes.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:32:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 15 Apr 2026 08:32:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69df4d13-6194\"\r\nexpires: Wed, 22 Apr 2026 22:46:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6341\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sckjUXevC5EUcoWVggqbfcHv7ZaVYlz2pplHIWcqSLfr3FgsOtjBOwLR%2B6thzRPY4d3glzD%2FJ%2BbJAFFdDWHOrfx0JHTdcAzTTwRneNeZxRKmEo3hkDi7vBHpI0anuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f04a61c6fcc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24980,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (24979)","md5":"10fc8eb73177610820434b75c6d5ec4f","sha1":"db08461c9e714703e9c7a855e2f404ead0550684","sha256":"c30a34b3870370f401dbcf6e9bfe69ed5885b3585f14d7ee4ba3dfb762b230da","sha512":"d6b048e916bf4989a8cd9e0d9ae7ee2641f259bef7a6c154e8ac57e0bbe9b9e050a50fdf00659d8c9f59f0ebd1b14f6d5f23203385cd400a40dfd42c9665ffc9","ssdeep":"192:O9JyW9JyyxpTAcmQ1ZXsf3sf4sfMsfzsf5jmm9BVZi4F0U4nJleTiXrAuCBOU3qU:kpl1ZYjV9BV8U47gKpnTE/k/m/H3t4L0","tlshash":"f0b262296a14503f7c12a0f5d6d8ba9db91eb0c2df3e5bb9bd8541116bd23fa0c9a600","first_seen":"2026-04-22T10:46:47.221556Z","last_seen":"2026-05-14T18:17:23.307134Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/assets/runtime-dom.esm-bundler-DJuI_5GC.js","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:02.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET /assets/runtime-dom.esm-bundler-DJuI_5GC.js HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s2.1kes.com/assets/main-BXcc2uUm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:32:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 15 Apr 2026 08:32:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69df4d0e-11f21\"\r\nexpires: Wed, 22 Apr 2026 22:46:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6341\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2F8fhtAOpgyj%2FRgPyXMi6492x51NcEd6pim3ItAffP6hd3oM%2Fxf32BUrbv%2BfzLmoWJZs3K6r6zwnIgZCKft%2FD4QJJNehyYOQxV3658tMEaVQiHPWt72nZmWFsjVrhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f04a61c8fd376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73505,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39322)","md5":"6a240edb1b483e4c32900120b31a7780","sha1":"59ecf24a37f4ecb6297880e3c451b07fe87ee31f","sha256":"22c4f84029fb13d379fe5b48402fd3fe666b9ecc525bd945599cc97b1951151e","sha512":"12936b2e4055387177536f4233084a4788c30c513ad3a757de2c1d6edde83b6e2ca92e973271e97d306b811f47d63c639e9b4d606ad9e3c112ded3ef87fba121","ssdeep":"1536:SCLpv+ygvxnPswDPqn2S/IMZFjbd5n7/nG1N:L7gvxnPsiPlSNZFjLn7Gj","tlshash":"9b7307f83182b57253fa19e1407b0502f3292956384ed9a8b1adaddf3e6740640b7fbd","first_seen":"2026-04-19T18:35:11.770998Z","last_seen":"2026-05-16T14:34:05.387059Z","times_seen":6,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/assets/live-04-ABQsCH01.jpg","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:02.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET /assets/live-04-ABQsCH01.jpg HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s2.1kes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:32:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 15 Apr 2026 08:32:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69df4d10-b590\"\r\nexpires: Fri, 22 May 2026 10:46:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6341\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nqPQsI9gOB8aAtZcwZabxBK4CVcl3usauVtCsG%2FC4LGZ%2B9%2Bs6fwzeitYCCZ6tAX7P672syD%2Fn3hk6GVJgw6NGsRx%2Be1rwZLwWpKadYHt7eW1CokJVY%2FB61HeNT%2Bpqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f04a61cefec76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46480,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x690, components 3","md5":"3b385bcacf9bdf67c32b2dbb3b2276fb","sha1":"d5396993949d60dc0e41619411477fba9fb9190c","sha256":"3eec5aabe1221a7334e8b11081de53705821584e956f6d70f100b5e06a7f085e","sha512":"bb881995881dfcd0fc5c7fb91e8613a07caf0625722320a39be7da5ea940b9aac69c00548326f3be89ed8ce5b7e2f6a5d713706838d1d6218eb7add7f2d1a37d","ssdeep":"768:PS7QWu0SL579XUcn8DFZRuifGayb91U5hpciQQO4+TNrw+yLsHO8Y1US4G:PEQWu0SLVFCuiLybAzpcijgTZma4UfG","tlshash":"a923f188565681f4ed21eb77f75ebf18e2d4a80116d5e84c0f612e39b1adc48f62cb32","first_seen":"2026-04-22T10:46:47.232237Z","last_seen":"2026-06-19T08:23:26.855651Z","times_seen":16,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/favicon.ico","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:02.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s2.1kes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:32:02 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xAs7i9WaUCPCy1ZhcGctq37TTqzRYzNZSX1yL1uxRNPjypbnnqfyWioBTolJsDvmJdRqHcS35JKlM9pwm9kVoGLjVy9fUA6FiuhbNgLUhNTVG18d0Ar3Kfx%2BBACy3w%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9f04a61ee84e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T09:57:51.246537Z","times_seen":548871,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/assets/main-BXcc2uUm.js","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:01.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET /assets/main-BXcc2uUm.js HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s2.1kes.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:32:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 15 Apr 2026 08:32:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69df4d16-8f48\"\r\nexpires: Wed, 22 Apr 2026 22:46:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6341\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sNBVoL4GcQin2n%2F1WPnolw3nd2k2j9XIapB6EkJrm%2FNNuOlvT4gk3R3awt7nnDyo83KFwpQVo5k8UDsLaFf2g%2Bag0h0ZwL9TX9OvukQ2XonwS1U2y%2BG9uup5ZHEFRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f04a61c6fcb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36680,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36267)","md5":"f051134cc93d51548d37075f6e9c9cc7","sha1":"3cb197bb58d8ad8ba2039ef5943b69ff751fd197","sha256":"a73f7ba5f603b0338e7336af79abd68fb3fd71157df612e7cdaa5e4e329eabb1","sha512":"8ab062b44300b2177523d2b50a9625ee6e8e7e8dcd6c47bd757e18275eb339ebdc4e938b71711f47c27c2c6d1386f0116721fb52818d3b6b5773236257f002c7","ssdeep":"768:JdP1jw/ZZmpR7Bny4r8GRM8TteY3bFz+LOih1Q9OKuZisQGbpGOraG6zmEV/Fp+S:COFv/tUOihEZpGbp+GGmM/Fp+gxG8","tlshash":"b0f2a3d8e022d9ac357be1607c5e5ca8523c0f4a941da456f15ce8623ec3be8152efbc","first_seen":"2026-04-22T10:46:47.220042Z","last_seen":"2026-05-14T18:17:23.313536Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/assets/runtime-dom.esm-bundler-DJuI_5GC.js","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:02.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET /assets/runtime-dom.esm-bundler-DJuI_5GC.js HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://s2.1kes.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:32:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 15 Apr 2026 08:32:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69df4d0e-11f21\"\r\nexpires: Wed, 22 Apr 2026 22:46:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6341\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z4UzMIWeuH7i3CpP88oVYzLqh%2FZI4BTdXbjKFD%2F5d69i3WmBuZs0Ue5fOSjkmj4kI%2FZnZoaubt7hxy8RY0VdO2lu6yq6YwXd3CPNWlOsRxny%2FaA9mgKA1qmwJE7uEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f04a61ccfe176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73505,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39322)","md5":"6a240edb1b483e4c32900120b31a7780","sha1":"59ecf24a37f4ecb6297880e3c451b07fe87ee31f","sha256":"22c4f84029fb13d379fe5b48402fd3fe666b9ecc525bd945599cc97b1951151e","sha512":"12936b2e4055387177536f4233084a4788c30c513ad3a757de2c1d6edde83b6e2ca92e973271e97d306b811f47d63c639e9b4d606ad9e3c112ded3ef87fba121","ssdeep":"1536:SCLpv+ygvxnPswDPqn2S/IMZFjbd5n7/nG1N:L7gvxnPsiPlSNZFjLn7Gj","tlshash":"9b7307f83182b57253fa19e1407b0502f3292956384ed9a8b1adaddf3e6740640b7fbd","first_seen":"2026-04-19T18:35:11.770998Z","last_seen":"2026-05-16T14:34:05.387059Z","times_seen":6,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/assets/live-02-p_Lagc1L.jpg","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:02.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET /assets/live-02-p_Lagc1L.jpg HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s2.1kes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:32:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 15 Apr 2026 08:32:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69df4d15-7626\"\r\nexpires: Fri, 22 May 2026 10:46:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6341\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=givh2QB4yFHiXMxHxPBWoKP4OgntcclfQKHmxgVrkAJU9%2BQLWf6rnlmhWjrdCDGvZTjbZmIXLc9K5EbffBcYzgy0ZBZ2ts%2BWVllZVCWMCsUxQbGKu3AFThhmUM1%2FaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f04a61cefe776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30246,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x690, components 3","md5":"f6d39a61fbbadc52f45841cc2dc23119","sha1":"0d13bf03654a4cb2e6c0b8e8da62aac836c0bb7b","sha256":"ee21beb449ed5e5df879b4a1e8899cc45e1a5eed89bcc66e26107027152e55dc","sha512":"444878bd040f5161358a42a81902a31c1572fe38e84825dbb36715e6350651f77dfd7e6f32d6633e2904dbf2143de5bb9c376655d569cbb416022f942da68fc8","ssdeep":"768:PguQt8tLh2gkORGjOLdQRt+p82x4xokjDy5qMi9Obt5H:PEt8Zh2gkOw/Ro8e4xokqpi+t5H","tlshash":"84d2f11f7a3559c74593d9b224d8725eefd9bca33c63014a3c3a88da6a01cc6a26ac51","first_seen":"2026-02-20T06:11:19.942426Z","last_seen":"2026-06-19T08:23:26.84424Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.1kes.com/assets/live-05-G7bLAT2-.jpg","fqdn":"s2.1kes.com","domain":"1kes.com","tld":"com"},"ip":{"addr":"172.67.189.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s2.1kes.com/","date":"2026-04-22T12:32:02.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1kes.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 23:52:19 GMT","end":"Sat, 11 Jul 2026 23:52:18 GMT"},"fingerprint":{"sha1":"B4:FA:1C:9F:0C:14:7A:BF:06:DB:31:FD:F5:4B:BB:83:A1:2C:C4:CC","sha256":"76:32:79:AC:74:5C:B3:89:C2:AF:86:84:96:7E:02:35:E3:FF:6A:4F:8B:8A:93:75:84:F0:C8:CA:55:64:70:7D"}}},"request":{"raw":"GET /assets/live-05-G7bLAT2-.jpg HTTP/1.1\r\nHost: s2.1kes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s2.1kes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 12:32:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 15 Apr 2026 08:32:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69df4d11-9785\"\r\nexpires: Fri, 22 May 2026 10:46:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6341\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X6nWh5Wsmxzlj5QScEyXNRZTLZOAzqKsAh6ppClIJ1BQsNfJB4%2BmdOUjmAQssXrJsK76jjqFU79W0FtLfdU5%2F2UuPGdJ3IYG1qJbNn3p4X8zPcbRxQ0%2FBDx6W2cAmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f04a61cffee76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38789,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x690, components 3","md5":"b35feea712c2c589b47276a225a0211f","sha1":"8be006b624ee5f431a4d15b289d81392224701ca","sha256":"9c098eddaf6e875d5369b32d816976148c91c79224714f6ae36002b971b5de33","sha512":"40f83c3e53d11f97422d8a7b25264aadc06ba3c51b36b896b0a0c4485d2186900c628063dad11a3494eeecc60c25f006e32d39410a02b91de3f2d94a5148f0e4","ssdeep":"768:PvsjA1aIa54EZ61Q/arub6p6AY8FRlnDR6I5wayupPm7dXIJlwNt8HLQDnEnW6Z:PvWA1atm4tmppYSnDR6IFpQRIJlwXiIq","tlshash":"6e03f11530abea9cd488a27cb87010727bfa2f16df516a3d466557b030f2617ccd52f6","first_seen":"2026-04-22T10:46:47.236971Z","last_seen":"2026-06-19T08:23:26.847183Z","times_seen":16,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"s2.1kes.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"s2.1kes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}