{"report_id":"6857ff10-b23a-432c-88ec-0643b5a8c3c5","version":0,"status":"done","tags":[],"date":"2026-08-09T10:04:12Z","url":{"schema":"http","addr":"kkm.9988330.icu/","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":0,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"kkm.9988330.icu/","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"title":"FB","dom":{"size":10755,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5892)","md5":"a269f73b72e2de4c7cd87493e0e14ac8","sha1":"908c07597c32f0cf6d5c0ef905cf73d1c9b06696","sha256":"23e50f5db00e60a755a318dfa30214ab485555f087df48e819f5245c5280eeef","sha512":"50d64b0fbede2225cebfe48631da51d90858e10e1ba096441fe7acc5e70cd80fe228c8744546fd81ef44742ad5efd03a090f8208d554864cfda85b55145247bb","ssdeep":"192:ZsQvUKYJwfZCxfcy8zoyJkdA8jPQEDGudKEBuaQ/iuw39bu3OKuT6kZ/lJihneb5:Zv9fZCxMC5HGGKEBbKilMOKA/lJihQ62","tlshash":"df223b5fb5e092bb062305d3b99f6f947ed2820fc3461810b8bd41ec6fa0e9a9637254","dom_hash":"domhash36454483311876cdc20c579a1791c246","first_seen":"2026-08-09T01:53:40.742264Z","last_seen":"2026-08-09T10:04:14.283456Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kkm.9988330.icu/","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":0,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-13T10:04:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kkm.9988330.icu","ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"domain_registered":"2026-05-20","domain_rank":0,"first_seen":"2026-08-09T01:53:36.377893Z","last_seen":"2026-08-09T01:53:36.377893Z","alert_count":57,"request_count":19,"received_data":3457169,"sent_data":9470,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/index-1f065c20.js","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac67d28ba8d7156d66d27be22edb1e9b","sha1":"23a2eb1a00bc78d7fa3d048e0306ba53ff00e266","sha256":"caa9fb07b0a863cb01938864230d225e1e63e0aa45a98848ab9313d4e3ee4be3","sha512":"cd9ec0fd57257aa42ca75119ded03dcd60f592062ee1fa7d5697417dd10f9c7efbf0fe8e705a0c1f0b3f4f98ce79bb96c59276b6f5d2ae984941a8c79c12098e","ssdeep":"","tlshash":"e24188d525d09029035d0e9bb1b7d394faf825427c8ad0c2d12c5eaccb3adc094b9e8e","size":2252,"data":"","first_seen":"2026-08-09T01:53:40.754058Z","last_seen":"2026-08-09T10:04:14.297393Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/polyfills-e08be946.js","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7a503e5503f191b45d01f37526325e6","sha1":"a5b73f5c2b4172fb60fd2b5ec392ba1d95248080","sha256":"3108c46ff734d5ba065d2c0874e118f4dca995b1f428429b36e23b7d36011b63","sha512":"7c90dae6bd1e31ea3efa8c805ac54b39c11344a2e2b57e21087ae0e057836fe77b99b9214261224332d738bceae72be74dc0d81e2e105c31e7b306949523cfc6","ssdeep":"768:udlbsP6J0TxccHWmsa14/SdxnClxfXfXMjzimPjrD6ZpIele64S2wLDRVLmwQKrd:MWv83fXkX7PjrDewu3qW2RlgO18MlUH","tlshash":"66b3e489f6c6f0a146e774a4402f100bf23b6d15b80e8190e766d1e17cb9a8bd13bf6d","size":118066,"data":"","first_seen":"2026-08-09T01:53:40.758572Z","last_seen":"2026-08-09T10:04:14.308746Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/vue.runtime.esm-bundler-69b3c457.js","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"105304dcf4f629b1615c91113c7dfea0","sha1":"0462f212f806410fda2573d8addfe23bd5c5b054","sha256":"7d438efb61dce229a6f49e2bd40a64b6057afe90762957c0233e218983324829","sha512":"ff34ad4b3e65b5b0e125a21e7b6fc088f22f1b262b787ccbd2617423e2e9c7cc244840cf8af23040b312454bc25dfcd4997fc4e6ff1056add0d445d74c654716","ssdeep":"768:Bxd6ihtP2hnRI4BKc5MwlzsTHpinzukWhr5bZCgjbv86uEQnJBxhX56w4ZrZv3hH:Xwnur0ai0z","tlshash":"ddd219a8745127321ada86e6f4ba4103f264101c740689ddf5af8ccf2ebf98560a7f7d","size":28802,"data":"","first_seen":"2026-08-09T01:53:40.75961Z","last_seen":"2026-08-09T10:04:14.287799Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/runtime-core.esm-bundler-1ff860c3.js","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae471f8a2fe477624a96bec1cdc7ea9f","sha1":"bf49e212eb5e29b347c64c065fcb110f3a7374cb","sha256":"87f53f6b676f3f5f23b05949c1b2cd3464bc08b84d7420884603ed2d674186dd","sha512":"46d2da6cc429f823b5074096e45b928e2dd11451d4c9a86722c1d6ef3842f3967313160c0ec5aec2e23ca227d9d90fd06fe0ad08ae083d4d1a2937690ba20231","ssdeep":"1536:CahZWKGjpCtDlg+4yh+dWdu7dO6vMxLotrt:BWjItJgG+AidO6UxsVt","tlshash":"408327e43092b17253ea0ce640770006f36e2c1a384ec5d8b55daddb3a7a45591bbfbe","size":86472,"data":"","first_seen":"2026-08-09T01:53:40.746883Z","last_seen":"2026-08-09T10:04:14.301176Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/App-1cfdfd52.js","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"84860509c9c9599e4bae2ae622d4c1d5","sha1":"dd05d0c1355d57d20dce7198a0adc3b8e5bc4bc6","sha256":"d701de9a286d9244e7a5ed68e377c2d8d7a9d0559ca56bc11ff147fe02662925","sha512":"a3ca8f7b3402ef0f2c63778fec1bcb5ec333f7b04dde75d3f7ef2308a8502a69dd952a0ff2526af7e263bb424cac5190b4bb18ec0deac4f24541fefa82f98e53","ssdeep":"3072:u7mJMT0ZAXivKCKZ1jB4oH7AjYTwEXU4Wi2pSX90S4pWWzeg2B+vGo/cr+XoT:u7sMT0eXii7Fj7JwETxSSX90dNagA+uT","tlshash":"4e14e10d614c0f3932d4494cf58eccb50e4868697c988576bffa8f6b1907ef42ba9638","size":195823,"data":"","first_seen":"2026-08-09T01:53:40.755999Z","last_seen":"2026-08-09T10:04:14.311388Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-16T21:08:24.566812Z","times_seen":41515,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-16T21:08:24.567314Z","times_seen":42959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/vue.runtime.esm-bundler-69b3c457.js","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kkm.9988330.icu/","date":"2026-08-09T10:03:45.286Z","timestamp":1786269825286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook-s.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:25:11 GMT","end":"Wed, 26 Aug 2026 10:25:10 GMT"},"fingerprint":{"sha1":"4B:0B:34:E8:68:AA:A4:E3:E5:11:F8:BE:7B:2C:73:40:EB:E6:32:16","sha256":"9F:4A:A3:04:FE:23:7A:DE:6E:65:6B:15:40:F8:A7:03:65:D4:39:6A:07:A0:9D:66:55:7A:1A:6C:14:05:97:3F"}}},"request":{"raw":"GET /assets/vue.runtime.esm-bundler-69b3c457.js HTTP/1.1\r\nHost: kkm.9988330.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kkm.9988330.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:03:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 24 May 2026 13:53:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1302c9-7082\"\r\nexpires: Sun, 09 Aug 2026 22:03:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28802,"size_decoded":11819,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23767)","md5":"105304dcf4f629b1615c91113c7dfea0","sha1":"0462f212f806410fda2573d8addfe23bd5c5b054","sha256":"7d438efb61dce229a6f49e2bd40a64b6057afe90762957c0233e218983324829","sha512":"ff34ad4b3e65b5b0e125a21e7b6fc088f22f1b262b787ccbd2617423e2e9c7cc244840cf8af23040b312454bc25dfcd4997fc4e6ff1056add0d445d74c654716","ssdeep":"768:Bxd6ihtP2hnRI4BKc5MwlzsTHpinzukWhr5bZCgjbv86uEQnJBxhX56w4ZrZv3hH:Xwnur0ai0z","tlshash":"ddd219a8745127321ada86e6f4ba4103f264101c740689ddf5af8ccf2ebf98560a7f7d","first_seen":"2026-08-09T01:53:40.75961Z","last_seen":"2026-08-09T10:04:14.287799Z","times_seen":3,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/links.json?ts=1786269825945","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kkm.9988330.icu/","date":"2026-08-09T10:03:45.951Z","timestamp":1786269825951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook-s.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:25:11 GMT","end":"Wed, 26 Aug 2026 10:25:10 GMT"},"fingerprint":{"sha1":"4B:0B:34:E8:68:AA:A4:E3:E5:11:F8:BE:7B:2C:73:40:EB:E6:32:16","sha256":"9F:4A:A3:04:FE:23:7A:DE:6E:65:6B:15:40:F8:A7:03:65:D4:39:6A:07:A0:9D:66:55:7A:1A:6C:14:05:97:3F"}}},"request":{"raw":"GET /links.json?ts=1786269825945 HTTP/1.1\r\nHost: kkm.9988330.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kkm.9988330.icu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:03:46 GMT\r\ncontent-type: application/json\r\ncontent-length: 306\r\nlast-modified: Thu, 11 Jun 2026 01:32:29 GMT\r\netag: \"6a2a102d-132\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":306,"size_decoded":581,"mime_type":"application/json","magic":"JSON text data","md5":"4e32105fd699130ab8e54688fbce6845","sha1":"67c46240e300eb263b435c0fd9712aad23e77a31","sha256":"e62417d975caba81a476f5066cf58a9af8210e986e192e36dc6a9046c09a3ec2","sha512":"93b46ab041d8c0d5071862e10fc37c6709ee0e847bd146e409bf4fe8590d9d94ca08046445dbee12cebae532271a2a23fc59696d7740d7a1d8b2cd9e802bf07e","ssdeep":"","tlshash":"a1e05efbe0ee8ce32bed1489d69d5014b022841f4c496e12b92c024caf899f5b29c25e","first_seen":"2026-08-09T01:53:40.747952Z","last_seen":"2026-08-09T10:04:14.288999Z","times_seen":3,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/1-Ci3-buvu-07bdce9a.png","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkm.9988330.icu/","date":"2026-08-09T10:03:45.954Z","timestamp":1786269825954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook-s.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:25:11 GMT","end":"Wed, 26 Aug 2026 10:25:10 GMT"},"fingerprint":{"sha1":"4B:0B:34:E8:68:AA:A4:E3:E5:11:F8:BE:7B:2C:73:40:EB:E6:32:16","sha256":"9F:4A:A3:04:FE:23:7A:DE:6E:65:6B:15:40:F8:A7:03:65:D4:39:6A:07:A0:9D:66:55:7A:1A:6C:14:05:97:3F"}}},"request":{"raw":"GET /assets/1-Ci3-buvu-07bdce9a.png HTTP/1.1\r\nHost: kkm.9988330.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kkm.9988330.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:03:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 24 May 2026 13:53:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1302c4-bb3ff\"\r\nexpires: Tue, 08 Sep 2026 10:03:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":766975,"size_decoded":766015,"mime_type":"image/png","magic":"PNG image data, 698 x 1368, 8-bit/color RGBA, non-interlaced","md5":"efcd8b73f5b840c7aa8998a5d3819c0f","sha1":"aa707e4b64fefd206cce6f8626687020da1379c7","sha256":"07bdce9a632318a8e290ba8798b1a0b82e5f985161d702cca4d0a67dade5dfbc","sha512":"26393d1a08a0c9ef455051380c992b211c1a2837925875758b2f949174d54669de519ff703e3508c67ea1bd2a3d75e7ff687afdd66d50ff1e77ffc11a730cc10","ssdeep":"12288:QJ1v4h+F8B8YNxAlvcGoQA+QQ0YJBKe6yD8EFMMNtlC2ovZBET6fKMXpR0I5:412+F8BRxW8QEQ0Y7KEpovHEpMXz0C","tlshash":"c0f4239ac2dfd96cf62af6065ce54e8c093e317c1e252ca8570926d48d0f7e9cd827b1","first_seen":"2026-02-01T09:28:34.397658Z","last_seen":"2026-08-09T10:04:14.290999Z","times_seen":8,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/fb-CAH8dHMN-cf3db360.png","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkm.9988330.icu/","date":"2026-08-09T10:03:45.961Z","timestamp":1786269825961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook-s.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:25:11 GMT","end":"Wed, 26 Aug 2026 10:25:10 GMT"},"fingerprint":{"sha1":"4B:0B:34:E8:68:AA:A4:E3:E5:11:F8:BE:7B:2C:73:40:EB:E6:32:16","sha256":"9F:4A:A3:04:FE:23:7A:DE:6E:65:6B:15:40:F8:A7:03:65:D4:39:6A:07:A0:9D:66:55:7A:1A:6C:14:05:97:3F"}}},"request":{"raw":"GET /assets/fb-CAH8dHMN-cf3db360.png HTTP/1.1\r\nHost: kkm.9988330.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kkm.9988330.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:03:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 24 May 2026 13:53:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1302c8-136a3\"\r\nexpires: Tue, 08 Sep 2026 10:03:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79523,"size_decoded":73373,"mime_type":"image/png","magic":"PNG image data, 1600 x 1600, 8-bit/color RGBA, non-interlaced","md5":"83e3cc297106767114f2c060f7f5fcbb","sha1":"24bc19ff1f7386dcc05739bfd6da7fb80c0759d2","sha256":"cf3db3607f74493fcfa248a6b1d6666c458356818777c98e3fa79c46d06305f7","sha512":"9f07e10dc5fee72ef0e7cd0cf4fafadc462917127b83c19b6ac7ef79e239634f986e497836aba75eae10bdf3cf98c6175695c5ea8c281fc1c0c2fbfc55518e55","ssdeep":"1536:rEx3cHa8y5AGPfZuIIcfQ8EwOXSmemPZbZ/xXWZKgsJqOG:rm8y538IH/SSuPxhxf9qOG","tlshash":"0c73f1db8c6b9df4dc56b57892bc0f413765d07652182f2b03789e684dca289e70f8c9","first_seen":"2024-10-11T08:27:21.635671Z","last_seen":"2026-08-09T10:04:14.29518Z","times_seen":21,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/index-1f065c20.js","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kkm.9988330.icu/","date":"2026-08-09T10:03:44.411Z","timestamp":1786269824411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook-s.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:25:11 GMT","end":"Wed, 26 Aug 2026 10:25:10 GMT"},"fingerprint":{"sha1":"4B:0B:34:E8:68:AA:A4:E3:E5:11:F8:BE:7B:2C:73:40:EB:E6:32:16","sha256":"9F:4A:A3:04:FE:23:7A:DE:6E:65:6B:15:40:F8:A7:03:65:D4:39:6A:07:A0:9D:66:55:7A:1A:6C:14:05:97:3F"}}},"request":{"raw":"GET /assets/index-1f065c20.js HTTP/1.1\r\nHost: kkm.9988330.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kkm.9988330.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:03:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 24 May 2026 13:53:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1302c8-8cc\"\r\nexpires: Sun, 09 Aug 2026 22:03:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2252,"size_decoded":1442,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2251)","md5":"ac67d28ba8d7156d66d27be22edb1e9b","sha1":"23a2eb1a00bc78d7fa3d048e0306ba53ff00e266","sha256":"caa9fb07b0a863cb01938864230d225e1e63e0aa45a98848ab9313d4e3ee4be3","sha512":"cd9ec0fd57257aa42ca75119ded03dcd60f592062ee1fa7d5697417dd10f9c7efbf0fe8e705a0c1f0b3f4f98ce79bb96c59276b6f5d2ae984941a8c79c12098e","ssdeep":"","tlshash":"e24188d525d09029035d0e9bb1b7d394faf825427c8ad0c2d12c5eaccb3adc094b9e8e","first_seen":"2026-08-09T01:53:40.754058Z","last_seen":"2026-08-09T10:04:14.297393Z","times_seen":3,"resource_available":true,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/runtime-core.esm-bundler-1ff860c3.js","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kkm.9988330.icu/","date":"2026-08-09T10:03:45.288Z","timestamp":1786269825288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook-s.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:25:11 GMT","end":"Wed, 26 Aug 2026 10:25:10 GMT"},"fingerprint":{"sha1":"4B:0B:34:E8:68:AA:A4:E3:E5:11:F8:BE:7B:2C:73:40:EB:E6:32:16","sha256":"9F:4A:A3:04:FE:23:7A:DE:6E:65:6B:15:40:F8:A7:03:65:D4:39:6A:07:A0:9D:66:55:7A:1A:6C:14:05:97:3F"}}},"request":{"raw":"GET /assets/runtime-core.esm-bundler-1ff860c3.js HTTP/1.1\r\nHost: kkm.9988330.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kkm.9988330.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:03:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 24 May 2026 13:53:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1302c9-151c8\"\r\nexpires: Sun, 09 Aug 2026 22:03:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86472,"size_decoded":34552,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43564)","md5":"ae471f8a2fe477624a96bec1cdc7ea9f","sha1":"bf49e212eb5e29b347c64c065fcb110f3a7374cb","sha256":"87f53f6b676f3f5f23b05949c1b2cd3464bc08b84d7420884603ed2d674186dd","sha512":"46d2da6cc429f823b5074096e45b928e2dd11451d4c9a86722c1d6ef3842f3967313160c0ec5aec2e23ca227d9d90fd06fe0ad08ae083d4d1a2937690ba20231","ssdeep":"1536:CahZWKGjpCtDlg+4yh+dWdu7dO6vMxLotrt:BWjItJgG+AidO6UxsVt","tlshash":"408327e43092b17253ea0ce640770006f36e2c1a384ec5d8b55daddb3a7a45591bbfbe","first_seen":"2026-08-09T01:53:40.746883Z","last_seen":"2026-08-09T10:04:14.301176Z","times_seen":3,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/favicon.ico","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkm.9988330.icu/","date":"2026-08-09T10:03:45.702Z","timestamp":1786269825702,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook-s.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:25:11 GMT","end":"Wed, 26 Aug 2026 10:25:10 GMT"},"fingerprint":{"sha1":"4B:0B:34:E8:68:AA:A4:E3:E5:11:F8:BE:7B:2C:73:40:EB:E6:32:16","sha256":"9F:4A:A3:04:FE:23:7A:DE:6E:65:6B:15:40:F8:A7:03:65:D4:39:6A:07:A0:9D:66:55:7A:1A:6C:14:05:97:3F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kkm.9988330.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kkm.9988330.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:03:45 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 79523\r\nlast-modified: Sun, 24 May 2026 13:53:07 GMT\r\netag: \"6a1302c3-136a3\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79523,"size_decoded":79798,"mime_type":"image/x-icon","magic":"PNG image data, 1600 x 1600, 8-bit/color RGBA, non-interlaced","md5":"83e3cc297106767114f2c060f7f5fcbb","sha1":"24bc19ff1f7386dcc05739bfd6da7fb80c0759d2","sha256":"cf3db3607f74493fcfa248a6b1d6666c458356818777c98e3fa79c46d06305f7","sha512":"9f07e10dc5fee72ef0e7cd0cf4fafadc462917127b83c19b6ac7ef79e239634f986e497836aba75eae10bdf3cf98c6175695c5ea8c281fc1c0c2fbfc55518e55","ssdeep":"1536:rEx3cHa8y5AGPfZuIIcfQ8EwOXSmemPZbZ/xXWZKgsJqOG:rm8y538IH/SSuPxhxf9qOG","tlshash":"0c73f1db8c6b9df4dc56b57892bc0f413765d07652182f2b03789e684dca289e70f8c9","first_seen":"2024-10-11T08:27:21.635671Z","last_seen":"2026-08-09T10:04:14.29518Z","times_seen":21,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":407,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/polyfills-e08be946.js","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kkm.9988330.icu/","date":"2026-08-09T10:03:44.410Z","timestamp":1786269824410,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook-s.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:25:11 GMT","end":"Wed, 26 Aug 2026 10:25:10 GMT"},"fingerprint":{"sha1":"4B:0B:34:E8:68:AA:A4:E3:E5:11:F8:BE:7B:2C:73:40:EB:E6:32:16","sha256":"9F:4A:A3:04:FE:23:7A:DE:6E:65:6B:15:40:F8:A7:03:65:D4:39:6A:07:A0:9D:66:55:7A:1A:6C:14:05:97:3F"}}},"request":{"raw":"GET /assets/polyfills-e08be946.js HTTP/1.1\r\nHost: kkm.9988330.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kkm.9988330.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:03:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 24 May 2026 13:53:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1302c9-1cd32\"\r\nexpires: Sun, 09 Aug 2026 22:03:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":118066,"size_decoded":47867,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45771), with NEL line terminators","md5":"e7a503e5503f191b45d01f37526325e6","sha1":"a5b73f5c2b4172fb60fd2b5ec392ba1d95248080","sha256":"3108c46ff734d5ba065d2c0874e118f4dca995b1f428429b36e23b7d36011b63","sha512":"7c90dae6bd1e31ea3efa8c805ac54b39c11344a2e2b57e21087ae0e057836fe77b99b9214261224332d738bceae72be74dc0d81e2e105c31e7b306949523cfc6","ssdeep":"768:udlbsP6J0TxccHWmsa14/SdxnClxfXfXMjzimPjrD6ZpIele64S2wLDRVLmwQKrd:MWv83fXkX7PjrDewu3qW2RlgO18MlUH","tlshash":"66b3e489f6c6f0a146e774a4402f100bf23b6d15b80e8190e766d1e17cb9a8bd13bf6d","first_seen":"2026-08-09T01:53:40.758572Z","last_seen":"2026-08-09T10:04:14.308746Z","times_seen":3,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/App-1cfdfd52.js","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kkm.9988330.icu/","date":"2026-08-09T10:03:45.290Z","timestamp":1786269825290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook-s.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:25:11 GMT","end":"Wed, 26 Aug 2026 10:25:10 GMT"},"fingerprint":{"sha1":"4B:0B:34:E8:68:AA:A4:E3:E5:11:F8:BE:7B:2C:73:40:EB:E6:32:16","sha256":"9F:4A:A3:04:FE:23:7A:DE:6E:65:6B:15:40:F8:A7:03:65:D4:39:6A:07:A0:9D:66:55:7A:1A:6C:14:05:97:3F"}}},"request":{"raw":"GET /assets/App-1cfdfd52.js HTTP/1.1\r\nHost: kkm.9988330.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kkm.9988330.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:03:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 24 May 2026 13:53:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1302c7-2fcf1\"\r\nexpires: Sun, 09 Aug 2026 22:03:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":195825,"size_decoded":132289,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65357), with no line terminators","md5":"84860509c9c9599e4bae2ae622d4c1d5","sha1":"dd05d0c1355d57d20dce7198a0adc3b8e5bc4bc6","sha256":"d701de9a286d9244e7a5ed68e377c2d8d7a9d0559ca56bc11ff147fe02662925","sha512":"a3ca8f7b3402ef0f2c63778fec1bcb5ec333f7b04dde75d3f7ef2308a8502a69dd952a0ff2526af7e263bb424cac5190b4bb18ec0deac4f24541fefa82f98e53","ssdeep":"3072:u7mJMT0ZAXivKCKZ1jB4oH7AjYTwEXU4Wi2pSX90S4pWWzeg2B+vGo/cr+XoT:u7sMT0eXii7Fj7JwETxSSX90dNagA+uT","tlshash":"4e14e10d614c0f3932d4494cf58eccb50e4868697c988576bffa8f6b1907ef42ba9638","first_seen":"2026-08-09T01:53:40.755999Z","last_seen":"2026-08-09T10:04:14.311388Z","times_seen":3,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/fb-Byq8jwV--e1aa5f59.svg","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkm.9988330.icu/","date":"2026-08-09T10:03:45.952Z","timestamp":1786269825952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook-s.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:25:11 GMT","end":"Wed, 26 Aug 2026 10:25:10 GMT"},"fingerprint":{"sha1":"4B:0B:34:E8:68:AA:A4:E3:E5:11:F8:BE:7B:2C:73:40:EB:E6:32:16","sha256":"9F:4A:A3:04:FE:23:7A:DE:6E:65:6B:15:40:F8:A7:03:65:D4:39:6A:07:A0:9D:66:55:7A:1A:6C:14:05:97:3F"}}},"request":{"raw":"GET /assets/fb-Byq8jwV--e1aa5f59.svg HTTP/1.1\r\nHost: kkm.9988330.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kkm.9988330.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:03:46 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 24 May 2026 13:53:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1302c7-7c6d\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31853,"size_decoded":14720,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f107ab2126e1042941515bb97c980e43","sha1":"d93e489c292a118da82f0f33387d31eb7da9f97b","sha256":"e1aa5f592cd14edc3b94b9c5a5622af9363e9757c095b131958a00454e1dd00f","sha512":"2c366bfd18af2013e61b2fc10bc119b7b0f228e5ef60fc31a9861e0f6d41e571fd730c10484e696657850bd4e6a4b3ab87ac237bd104be9b1a6393dca8e0021d","ssdeep":"768:pnu3bzS2PN2A0fsSUEUbmKGEZZXTQ00pEs0k38kYo:hCFN2AaJReDQ00d0+vYo","tlshash":"ffe2e7dae300def4ee8fc7ec5d36add42c1620bf3a16b468c3187ac615222695d19c9d","first_seen":"2026-02-01T09:28:34.396559Z","last_seen":"2026-08-09T10:04:14.313251Z","times_seen":8,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/app-store-badge-fd4126fb.svg","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkm.9988330.icu/","date":"2026-08-09T10:03:45.962Z","timestamp":1786269825962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook-s.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:25:11 GMT","end":"Wed, 26 Aug 2026 10:25:10 GMT"},"fingerprint":{"sha1":"4B:0B:34:E8:68:AA:A4:E3:E5:11:F8:BE:7B:2C:73:40:EB:E6:32:16","sha256":"9F:4A:A3:04:FE:23:7A:DE:6E:65:6B:15:40:F8:A7:03:65:D4:39:6A:07:A0:9D:66:55:7A:1A:6C:14:05:97:3F"}}},"request":{"raw":"GET /assets/app-store-badge-fd4126fb.svg HTTP/1.1\r\nHost: kkm.9988330.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kkm.9988330.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:03:46 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 948\r\nlast-modified: Sun, 24 May 2026 13:53:11 GMT\r\netag: \"6a1302c7-3b4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":948,"size_decoded":1220,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bb924068c8e99733228b4240b7677fa0","sha1":"3eb2520dcb306bf7eb0b85132ad80dde0db65a4c","sha256":"fd4126fbbd236fcc10a0a33dd4bdc87335e33a76862afee1abf6b5279ac7eb86","sha512":"2064353117a35b3954e5b821a31aa9f7c79933987745b59aea3fd0dd1216c54d0a17b35f20e647bec0bad054f1bda904123660151fa27d34727167be45a48816","ssdeep":"","tlshash":"8b11dc35924cd216ea0008488f1ff1e6f0ce40dd55e0c7117285945168a68e7f19feca","first_seen":"2026-08-09T01:53:40.757492Z","last_seen":"2026-08-09T10:04:14.314271Z","times_seen":3,"resource_available":false,"data":null}},"time_used":948,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":359,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/google-play-badge-05c0eb01.svg","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkm.9988330.icu/","date":"2026-08-09T10:03:45.963Z","timestamp":1786269825963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook-s.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:25:11 GMT","end":"Wed, 26 Aug 2026 10:25:10 GMT"},"fingerprint":{"sha1":"4B:0B:34:E8:68:AA:A4:E3:E5:11:F8:BE:7B:2C:73:40:EB:E6:32:16","sha256":"9F:4A:A3:04:FE:23:7A:DE:6E:65:6B:15:40:F8:A7:03:65:D4:39:6A:07:A0:9D:66:55:7A:1A:6C:14:05:97:3F"}}},"request":{"raw":"GET /assets/google-play-badge-05c0eb01.svg HTTP/1.1\r\nHost: kkm.9988330.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kkm.9988330.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:03:46 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 24 May 2026 13:53:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1302c8-6a0\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1696,"size_decoded":947,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"80ae27cd579b6a510544c5702ce9355c","sha1":"0ce48dd2f75bcdde07eccb04c62b2b349b00f5fa","sha256":"05c0eb010080b1511536b8bf985f49d75f3fdfa6540fe2b1662032ec71597d3e","sha512":"383800b6c4f7b76e3f082d60716bce48ff4ec03578c3c1c7ecf143891b5c4ab161321cfbe4d94b96f755367afc2a32fc2b6cbfacf38fc8e2dd0aca8a83801ea2","ssdeep":"","tlshash":"2b31cc26d4bd8527f204d2a5ef49f5707d5c41e7a680c622b29c8f9e2f248c7058fae8","first_seen":"2026-08-09T01:53:40.753121Z","last_seen":"2026-08-09T10:04:14.315334Z","times_seen":3,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-09T10:03:43.365Z","timestamp":1786269823365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook-s.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:25:11 GMT","end":"Wed, 26 Aug 2026 10:25:10 GMT"},"fingerprint":{"sha1":"4B:0B:34:E8:68:AA:A4:E3:E5:11:F8:BE:7B:2C:73:40:EB:E6:32:16","sha256":"9F:4A:A3:04:FE:23:7A:DE:6E:65:6B:15:40:F8:A7:03:65:D4:39:6A:07:A0:9D:66:55:7A:1A:6C:14:05:97:3F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kkm.9988330.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:03:44 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 24 May 2026 13:53:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1302c3-1415\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5141,"size_decoded":2717,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (435)","md5":"ac8315a6ef4814c355b0734a54caec40","sha1":"be4946ef978ad9133d4c82ba605b40e1dbab3399","sha256":"e9d5bde31a29212434b9e242ddcd67922797295e9273b94ba657af484eef2f48","sha512":"ebbbc943dac470b4043fda51305c4845934d7a468d0944e86e58e2c0fb7ef708aaa7f3ec10c0f74be7fc1091345937ae3d5347ec65b64789f407f81375d2d242","ssdeep":"96:zrQpQ2QiMa6FbPNkebdJwGr6DCZydHRH/XQnOvdy2PUevg1tqFchy+uB1niH1iHd:zrQvUKYJwyZCxfAnOFxPUevg1tTuB1nl","tlshash":"a5b1e84f59f1c4ea4a7b14a7a76ab7183d910e83880fdc5078ed169cef14d898ac3958","first_seen":"2026-08-09T01:53:40.743509Z","last_seen":"2026-08-09T10:04:14.318844Z","times_seen":3,"resource_available":false,"data":null}},"time_used":855,"timings":{"blocked":-1,"dns":43,"connect":265,"send":0,"wait":271,"receive":0,"ssl":277},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/3-DIVymwoV-e0dff35a.png","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkm.9988330.icu/","date":"2026-08-09T10:03:45.956Z","timestamp":1786269825956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook-s.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:25:11 GMT","end":"Wed, 26 Aug 2026 10:25:10 GMT"},"fingerprint":{"sha1":"4B:0B:34:E8:68:AA:A4:E3:E5:11:F8:BE:7B:2C:73:40:EB:E6:32:16","sha256":"9F:4A:A3:04:FE:23:7A:DE:6E:65:6B:15:40:F8:A7:03:65:D4:39:6A:07:A0:9D:66:55:7A:1A:6C:14:05:97:3F"}}},"request":{"raw":"GET /assets/3-DIVymwoV-e0dff35a.png HTTP/1.1\r\nHost: kkm.9988330.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kkm.9988330.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:03:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 24 May 2026 13:53:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1302c5-86552\"\r\nexpires: Tue, 08 Sep 2026 10:03:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":550226,"size_decoded":550469,"mime_type":"image/png","magic":"PNG image data, 698 x 698, 8-bit/color RGBA, non-interlaced","md5":"baf4ec5ef4589e93f518be7797aec44e","sha1":"4f18dd85a93073bede36dc2d69b099e7481239c6","sha256":"e0dff35a86789292cfb9a6d869b4fdbb742b0822026691f69069f08f235dbbc1","sha512":"2d10d8014fc5a7b057e73fe79646a2f9d063d74ff8fe62012df2c4b1c66e2f359290c065d5938eea977d8fd80831902fde94fec9feba7d65200a2ff155fda2bf","ssdeep":"12288:uuIwmtWZhcMe3DWWkoKaev6Ym1yfkRMT8GSN6MOU2u6jsENlhR0U+dMm83:wwm4vc5WuQ4OUo8GS569l1Jm83","tlshash":"2ac423857fce11166c4fd2858b5836d5aed4f3225f391dc6f280ea1a862858e39cd0ef","first_seen":"2026-02-01T09:28:34.38441Z","last_seen":"2026-08-09T10:04:14.320442Z","times_seen":8,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/6-DLEUK-Nb-29801b93.png","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkm.9988330.icu/","date":"2026-08-09T10:03:45.957Z","timestamp":1786269825957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook-s.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:25:11 GMT","end":"Wed, 26 Aug 2026 10:25:10 GMT"},"fingerprint":{"sha1":"4B:0B:34:E8:68:AA:A4:E3:E5:11:F8:BE:7B:2C:73:40:EB:E6:32:16","sha256":"9F:4A:A3:04:FE:23:7A:DE:6E:65:6B:15:40:F8:A7:03:65:D4:39:6A:07:A0:9D:66:55:7A:1A:6C:14:05:97:3F"}}},"request":{"raw":"GET /assets/6-DLEUK-Nb-29801b93.png HTTP/1.1\r\nHost: kkm.9988330.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kkm.9988330.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:03:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 24 May 2026 13:53:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1302c6-70ed7\"\r\nexpires: Tue, 08 Sep 2026 10:03:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":462551,"size_decoded":462278,"mime_type":"image/png","magic":"PNG image data, 696 x 870, 8-bit/color RGBA, non-interlaced","md5":"54e5f9483dc8408ad438d56f9e849e88","sha1":"64cd177f7b9d28d3ab9c14e683a5ce95aac53dea","sha256":"29801b936a3d34731ee7931bb1045fa14f23a942a9f06e6bbbfb26c8ddea6a0d","sha512":"e09970d15e3c57f7cdff46dbd88fb63eeabca37204fb43ed4c693bbc81087c76e3e09d05afa16f127d009f150affeb8992ff13862ecf7a6b51df84c909d41818","ssdeep":"6144:cJjdE0e4P8h2RpXD+c8xoGta1GOjfsm3a7o7RSKam5V0IMrZ/UwfBFFAq/YZyGlU:abaUvXDUOjPD7RdaM0jZU+TVGjNpFSmA","tlshash":"39a42381bad6aa3448a93df354c2c56e3813e4677796c39e4310cff869ce1590afa335","first_seen":"2026-02-01T09:28:34.398977Z","last_seen":"2026-08-09T10:04:14.323205Z","times_seen":8,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/4-BqtnRliL-f9239ce4.png","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkm.9988330.icu/","date":"2026-08-09T10:03:45.958Z","timestamp":1786269825958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook-s.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:25:11 GMT","end":"Wed, 26 Aug 2026 10:25:10 GMT"},"fingerprint":{"sha1":"4B:0B:34:E8:68:AA:A4:E3:E5:11:F8:BE:7B:2C:73:40:EB:E6:32:16","sha256":"9F:4A:A3:04:FE:23:7A:DE:6E:65:6B:15:40:F8:A7:03:65:D4:39:6A:07:A0:9D:66:55:7A:1A:6C:14:05:97:3F"}}},"request":{"raw":"GET /assets/4-BqtnRliL-f9239ce4.png HTTP/1.1\r\nHost: kkm.9988330.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kkm.9988330.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:03:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 24 May 2026 13:53:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1302c5-6a68e\"\r\nexpires: Tue, 08 Sep 2026 10:03:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":435854,"size_decoded":435897,"mime_type":"image/png","magic":"PNG image data, 688 x 688, 8-bit/color RGBA, non-interlaced","md5":"d66af48edddf237c7774055cb793b00a","sha1":"8ea1034f14cfd886d342f498da93f65d9dc6ea22","sha256":"f9239ce4a454fe81ef6d670b4bdb71a211ea3cb57e83bd6b7045c5d66daf2839","sha512":"5c303e4261a6f4ef15ab3cd941024f6f3748e7f350adac0deed1a7c001078e01f5bc6491ac119c197061df6a93c18b0a0c13361500801290f2d2c691b9930c97","ssdeep":"12288:l/8THir2Nh7LEqWYmDszc0lvmhyTidHhdGWDvvBMh/4K5a0fm:ariKLLFNO+Llvmh0ObP7vBG/Ra0u","tlshash":"9794238757ad8150f33347216793ba42f60732771a685fb92a0eb2846deb09c52fb61c","first_seen":"2026-02-01T09:28:34.38614Z","last_seen":"2026-08-09T10:04:14.324825Z","times_seen":8,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/5-DXQUhONz-2c66009e.png","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkm.9988330.icu/","date":"2026-08-09T10:03:45.959Z","timestamp":1786269825959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook-s.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:25:11 GMT","end":"Wed, 26 Aug 2026 10:25:10 GMT"},"fingerprint":{"sha1":"4B:0B:34:E8:68:AA:A4:E3:E5:11:F8:BE:7B:2C:73:40:EB:E6:32:16","sha256":"9F:4A:A3:04:FE:23:7A:DE:6E:65:6B:15:40:F8:A7:03:65:D4:39:6A:07:A0:9D:66:55:7A:1A:6C:14:05:97:3F"}}},"request":{"raw":"GET /assets/5-DXQUhONz-2c66009e.png HTTP/1.1\r\nHost: kkm.9988330.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kkm.9988330.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:03:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 24 May 2026 13:53:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1302c6-436c2\"\r\nexpires: Tue, 08 Sep 2026 10:03:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":276162,"size_decoded":275280,"mime_type":"image/png","magic":"PNG image data, 692 x 692, 8-bit/color RGBA, non-interlaced","md5":"30f0e3f5a363b9ae3809088443993933","sha1":"de7d0bed603318064b24471e03d44f4c7d20521a","sha256":"2c66009eee1a91139728fd7fa9a5878b02acbd5458379a70d0c1ce9b892310d3","sha512":"797dadc8dbfdd3d5d7e5bad2e50ed387130fb7c73285a5d37a2fa968dd5faa9d12633e1f44daac685dbd31966b12e56cef2bd74a70e5ece3a44fcbe2d70bba62","ssdeep":"6144:f0tnJFtkHPvkixWu5KHFtKPPPGTypOuQQHFGY27ZrAa:f0t/WHHNcu5LPGgQQlGxtl","tlshash":"a94423f6d17d4ba29a90ad28d6bd2cc11d2c741201b253f2c5c2ffa175ef60e02217a7","first_seen":"2026-02-01T09:28:34.391393Z","last_seen":"2026-08-09T10:04:14.32561Z","times_seen":8,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":592,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/7-D1SR6Gik-dc9447de.png","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kkm.9988330.icu/","date":"2026-08-09T10:03:45.960Z","timestamp":1786269825960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook-s.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:25:11 GMT","end":"Wed, 26 Aug 2026 10:25:10 GMT"},"fingerprint":{"sha1":"4B:0B:34:E8:68:AA:A4:E3:E5:11:F8:BE:7B:2C:73:40:EB:E6:32:16","sha256":"9F:4A:A3:04:FE:23:7A:DE:6E:65:6B:15:40:F8:A7:03:65:D4:39:6A:07:A0:9D:66:55:7A:1A:6C:14:05:97:3F"}}},"request":{"raw":"GET /assets/7-D1SR6Gik-dc9447de.png HTTP/1.1\r\nHost: kkm.9988330.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kkm.9988330.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:03:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 24 May 2026 13:53:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1302c6-4ea10\"\r\nexpires: Tue, 08 Sep 2026 10:03:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":322064,"size_decoded":321857,"mime_type":"image/png","magic":"PNG image data, 690 x 572, 8-bit/color RGBA, non-interlaced","md5":"dc9250629cb0b3b7528783d19f967f63","sha1":"6a0834a2118e781da7c277ec486668a1223484be","sha256":"dc9447de21d67c381a07468f569e2e8108c576a9d70b9d1c407c04049aabf230","sha512":"a14c3928282958dbf8282583dd6a8d1b522fae2f313ffc4684ff65233ee9e7f78cda4c20d5252cced497cfed6d466f6aba359f351e46d54336697f073aab3ee6","ssdeep":"6144:hPRjhtZEotZLk5ZYlXHO0o4e1Pz75oI3pBVbzLlAwSFgmMX/VicYBsWZq:xtD45mROCwzTpBVXLBQgJX/ViVBsWM","tlshash":"006423c2b08512c3af975c7abe39f75db1c08084d3a51cd2e70aba5fc8769b2a5457d0","first_seen":"2026-02-01T09:28:34.400091Z","last_seen":"2026-08-09T10:04:14.326437Z","times_seen":8,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kkm.9988330.icu/assets/index-a745f375.css","fqdn":"kkm.9988330.icu","domain":"9988330.icu","tld":"icu"},"ip":{"addr":"192.253.231.208","port":443,"asn":152194,"as":"CTG Server Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kkm.9988330.icu/","date":"2026-08-09T10:03:44.413Z","timestamp":1786269824413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"facebook-s.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 10:25:11 GMT","end":"Wed, 26 Aug 2026 10:25:10 GMT"},"fingerprint":{"sha1":"4B:0B:34:E8:68:AA:A4:E3:E5:11:F8:BE:7B:2C:73:40:EB:E6:32:16","sha256":"9F:4A:A3:04:FE:23:7A:DE:6E:65:6B:15:40:F8:A7:03:65:D4:39:6A:07:A0:9D:66:55:7A:1A:6C:14:05:97:3F"}}},"request":{"raw":"GET /assets/index-a745f375.css HTTP/1.1\r\nHost: kkm.9988330.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kkm.9988330.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:03:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 24 May 2026 13:53:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1302c8-1a30\"\r\nexpires: Sun, 09 Aug 2026 22:03:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6704,"size_decoded":2611,"mime_type":"text/css","magic":"ASCII text, with very long lines (6703)","md5":"e560e65695155938b7714783b89e8f8e","sha1":"08484a7c7446ad4604f7726ae237bdb1a37ff2ea","sha256":"a745f375738be9ba03890306079f2dc273e53ae29b2f4aca5398ad973acdad8f","sha512":"3eb36fae1c9cca4f14717396e154817fea262f575cc7cd7e8fdcffd9fc7f90d2aa622a3944576bbc81813f7c68d2aa4ded0ab8a471fa1e0c2b2798b2b797dc91","ssdeep":"96:cAMb1bCqpXo9r8GydeLbIC5VzVyexLLpSkpeTDN2CgK2zKRn:XQ1T5o27deLbIC5VzVyexLLIkoUCgK5","tlshash":"30d17621a641262cf07fc6a1f8c275cdf250d012f75716f4dab561adaad90b61b3128f","first_seen":"2026-08-09T01:53:40.754928Z","last_seen":"2026-08-09T10:04:14.330023Z","times_seen":3,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":813,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-09","alert":"Phishing Block","trigger":"kkm.9988330.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"kkm.9988330.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}