{"report_id":"6b572430-2313-4516-9689-28ada32b3638","version":6,"status":"done","tags":[],"date":"2025-07-21T13:34:12Z","url":{"schema":"http","addr":"qfoqo.knfqgmqk.com/7w7bq2lc","fqdn":"qfoqo.knfqgmqk.com","domain":"knfqgmqk.com","tld":"com"},"ip":{"addr":"45.207.202.73","port":0,"asn":8796,"as":"FD-298-8796","country":"Mauritius","country_code":"MU"},"final":{"url":{"schema":"https","addr":"qfoqo.knfqgmqk.com/7w7bq2lc","fqdn":"qfoqo.knfqgmqk.com","domain":"knfqgmqk.com","tld":"com"},"title":"qfoqo.knfqgmqk.com/7w7bq2lc"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-08-25T13:34:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"qfoqo.knfqgmqk.com","ip":{"addr":"13.250.120.6","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"2025-07-17","domain_rank":0,"first_seen":"2025-07-21T13:34:12.62748Z","last_seen":"2025-07-21T13:34:12.627481Z","alert_count":1,"request_count":4,"received_data":1204138,"sent_data":1845,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2025-07-21","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"qfoqo.knfqgmqk.com/static/js/app.79b5551c.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2025-07-21","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"javascript.script.md5:410d93aaf6f20db0f2d782d960306cee","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}]},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"qfoqo.knfqgmqk.com/static/js/app.79b5551c.js","fqdn":"qfoqo.knfqgmqk.com","domain":"knfqgmqk.com","tld":"com"},"ip":{"addr":"13.250.120.6","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"410d93aaf6f20db0f2d782d960306cee","sha1":"41e74ffe21edd55d47f76dab4fb6acc09f350407","sha256":"7811685812ab1ce5b13112e88040c9aaecc7c117793a10df5feb263f3ec876ae","sha512":"65f81e918856397a1ff368bc78b7c6fb2b12c829ba085b15dd59df60b03dfe73c603cba4595919d0cfb646c1edca9e34e4d101418a722d517f6d628aa49b57f2","ssdeep":"12288:PhXMlDqbvSqdgtFqXOgYIB2prpUr9C7EvHtbysqs1f7gGO5IHH+9yr3o1kSKvVw:hESbqs85YG1kSK9w","tlshash":"d8152e80b3807c8e35578ee7630be6f4e64a19ed39c4488d94c4aaf03f9d627d594eb4","size":956011,"data":"","first_seen":"2025-07-03T07:56:41.192574Z","last_seen":"2025-08-11T16:20:33.025398Z","times_seen":35,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2025-07-21","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"javascript.script.md5:410d93aaf6f20db0f2d782d960306cee","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"qfoqo.knfqgmqk.com/7w7bq2lc","fqdn":"qfoqo.knfqgmqk.com","domain":"knfqgmqk.com","tld":"com"},"ip":{"addr":"13.250.120.6","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"eef4c1cdacbd18e42c3e6281a8ec9b46","sha1":"a98c989c3efbc63b09915b77a48f3e9f46e3bd0a","sha256":"e235ea259fb0fefcdd245c424590adba7c8f97bc520dbb0429cdccbdf4275d47","sha512":"24ca25410ee886bb3ddcf79982df0f92b36029617430bc38ee4ccdd98acf9f7732be748b1e2caf8f3e83774a2e6d6ee32a40638b0efdfe768cb2ba599ac0b1da","ssdeep":"","tlshash":"28e0f190500920338afe1805fb441c80211c7c6317b9a49a320036bba585cfd3ec655f","size":401,"data":"","first_seen":"2025-04-07T12:34:43.668801Z","last_seen":"2025-11-12T07:38:37.40466Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"qfoqo.knfqgmqk.com/static/js/app.79b5551c.js","fqdn":"qfoqo.knfqgmqk.com","domain":"knfqgmqk.com","tld":"com"},"ip":{"addr":"13.250.120.6","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"","requested_by":"https://qfoqo.knfqgmqk.com/7w7bq2lc","date":"2025-07-21T13:33:51.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.knfqgmqk.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 05:58:47 GMT","end":"Wed, 15 Oct 2025 05:58:46 GMT"},"fingerprint":{"sha1":"22:C5:2F:70:0C:07:BC:92:C1:25:AF:7C:F1:25:80:AF:44:2C:DA:E8","sha256":"87:03:62:FF:4C:9A:4C:E8:5E:1D:7C:96:85:DD:0B:29:61:F3:30:D1:DA:8F:10:5C:53:F7:9C:5B:DA:FB:2E:8B"}}},"request":{"raw":"GET /static/js/app.79b5551c.js HTTP/1.1\r\nHost: qfoqo.knfqgmqk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfoqo.knfqgmqk.com/7w7bq2lc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Thu, 03 Jul 2025 11:22:20 GMT\r\nEtag: W/\"685a3662-e98b1\"\r\nExpires: Tue, 22 Jul 2025 13:33:51 GMT\r\nLast-Modified: Thu, 03 Jul 2025 11:22:20 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":956593,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (48395), with no line terminators","md5":"d3b1a3a6eeeccbd10ac49c2b12286a1f","sha1":"c8bb4bbff59f65e32078fe9bf37a976a9ba64e1d","sha256":"ed17a9b6224c40d44a29962d9f083a86dc3fd733815fd381e6b5d5411c2c8f46","sha512":"af3cdeeaa42564afb8ac8a0f0360139cea71c658c1a0b32f22d4e32e489d7b4335c5829cd88af28bb05375c1e089e33a738b60fd5dc926beb556f31838514b43","ssdeep":"12288:PhXMlDqEyljB5tFqXOg0Q4prpUr9C7EvHtbysqs1f7gGO5IHH+9yr3o1kSKvVw:OKPmbqs85YG1kSK9w","tlshash":"d2255f80b3903e4e35976ee3670be7f4ea4a09dd35c4484e94d4aaf03f9d6269590ef0","first_seen":"2025-07-21T13:34:15.956325Z","last_seen":"2025-07-21T13:34:15.956325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":1019,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2025-07-21","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"qfoqo.knfqgmqk.com/static/js/app.79b5551c.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"qfoqo.knfqgmqk.com/favicon.ico","fqdn":"qfoqo.knfqgmqk.com","domain":"knfqgmqk.com","tld":"com"},"ip":{"addr":"13.250.120.6","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"","requested_by":"https://qfoqo.knfqgmqk.com/7w7bq2lc","date":"2025-07-21T13:33:52.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.knfqgmqk.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 05:58:47 GMT","end":"Wed, 15 Oct 2025 05:58:46 GMT"},"fingerprint":{"sha1":"22:C5:2F:70:0C:07:BC:92:C1:25:AF:7C:F1:25:80:AF:44:2C:DA:E8","sha256":"87:03:62:FF:4C:9A:4C:E8:5E:1D:7C:96:85:DD:0B:29:61:F3:30:D1:DA:8F:10:5C:53:F7:9C:5B:DA:FB:2E:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: qfoqo.knfqgmqk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfoqo.knfqgmqk.com/7w7bq2lc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Length: 724\r\nContent-Type: image/x-icon\r\nDate: Mon, 21 Jul 2025 13:31:55 GMT\r\nEtag: \"67d00c0b-2d4\"\r\nLast-Modified: Mon, 21 Jul 2025 13:31:55 GMT\r\nServer: nginx\r\nX-Cache: HIT, policy, disk\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":724,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"1600ed3fe515cea27e17c41a8e657b22","sha1":"e57ff00cf4e081b00a56310a321d78960907e650","sha256":"6b44fd0ad9cd5673bec883cfd8e7e19e81c04fabc1bbd93fe314f3ffa7b7942e","sha512":"7d6d1b3035739d0beded3a4dfa084f9285c378dca33a38ab338f73fba295adb05441ac4e4357da30d52a6acf9176821dc8c225bf2e0d2da4e23ed13e05ed4eca","ssdeep":"","tlshash":"8c0194de02926c97cb7a09b5e05ebbf2b02a7db433302c9e009cf0920d1b5012408b00","first_seen":"2025-04-07T12:34:43.664668Z","last_seen":"2026-06-13T03:58:15.697165Z","times_seen":240,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":1,"connect":147,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfoqo.knfqgmqk.com/static/js/chunk-b7f9d520.ef6533d2.js","fqdn":"qfoqo.knfqgmqk.com","domain":"knfqgmqk.com","tld":"com"},"ip":{"addr":"13.250.120.6","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"","requested_by":"https://qfoqo.knfqgmqk.com/7w7bq2lc","date":"2025-07-21T13:33:52.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.knfqgmqk.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 05:58:47 GMT","end":"Wed, 15 Oct 2025 05:58:46 GMT"},"fingerprint":{"sha1":"22:C5:2F:70:0C:07:BC:92:C1:25:AF:7C:F1:25:80:AF:44:2C:DA:E8","sha256":"87:03:62:FF:4C:9A:4C:E8:5E:1D:7C:96:85:DD:0B:29:61:F3:30:D1:DA:8F:10:5C:53:F7:9C:5B:DA:FB:2E:8B"}}},"request":{"raw":"GET /static/js/chunk-b7f9d520.ef6533d2.js HTTP/1.1\r\nHost: qfoqo.knfqgmqk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfoqo.knfqgmqk.com/7w7bq2lc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Encoding: gzip\r\nContent-Type: application/javascript\r\nDate: Thu, 03 Jul 2025 11:22:21 GMT\r\nEtag: W/\"685a3662-3bc81\"\r\nExpires: Tue, 22 Jul 2025 13:33:52 GMT\r\nLast-Modified: Thu, 03 Jul 2025 11:22:21 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: HIT, policy, disk\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":244865,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58090)","md5":"17eb6d4f2df4207d017e9337fe8c4a23","sha1":"e5fd37b661efbc93fef48f117a71e60f1882111d","sha256":"332e0185770ec8c9f3b813eacd06d7de6f55a1792d4f24af1bd496e7f9ca20a1","sha512":"235bed07ff48322627751fd1585e6a0beced70ffb88dcd315fae519decfb8a16046dc2d7d2f597f9b3082c28afb5dd81a58939d614b44437f7a68b9f479e51a0","ssdeep":"6144:WPTZppS/cLY6jcsZjc46nrO95rysAU7Zg:WPA/cLqU5WsAU7Zg","tlshash":"db343c89b1d6b0a557a774f0042f380af13a5d24250ed4c5f261e9c2adb9a9f423bf3d","first_seen":"2025-06-24T14:16:43.79695Z","last_seen":"2025-08-11T16:20:33.011618Z","times_seen":49,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfoqo.knfqgmqk.com/7w7bq2lc","fqdn":"qfoqo.knfqgmqk.com","domain":"knfqgmqk.com","tld":"com"},"ip":{"addr":"13.250.120.6","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-21T13:33:49.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.knfqgmqk.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Jul 2025 05:58:47 GMT","end":"Wed, 15 Oct 2025 05:58:46 GMT"},"fingerprint":{"sha1":"22:C5:2F:70:0C:07:BC:92:C1:25:AF:7C:F1:25:80:AF:44:2C:DA:E8","sha256":"87:03:62:FF:4C:9A:4C:E8:5E:1D:7C:96:85:DD:0B:29:61:F3:30:D1:DA:8F:10:5C:53:F7:9C:5B:DA:FB:2E:8B"}}},"request":{"raw":"GET /7w7bq2lc HTTP/1.1\r\nHost: qfoqo.knfqgmqk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Length: 846\r\nContent-Type: text/html\r\nDate: Mon, 21 Jul 2025 13:33:50 GMT\r\nEtag: \"685a3662-34e\"\r\nLast-Modified: Tue, 24 Jun 2025 05:23:46 GMT\r\nServer: nginx\r\nX-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":846,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (846), with no line terminators","md5":"b7d2929a8690752de41f3c9ccf83725c","sha1":"de7a7e1c98fbf2e5c63a502b197f4b123e2b0d44","sha256":"850c47c194cf4d37e7989866c99593a3bc3b988a9a3c1965d613fc91d9aeef5a","sha512":"47b4b1010074df43ba9bd31adc5a7c2ac8f523289c3a391afa7879d2c0be4a8b469fd8580ab1f5165ad200c2dd44e2cd9ef4935bbc0e78d6c2ba6bf4aa5a211e","ssdeep":"","tlshash":"99015ed25c54e02a8a710918b9b0a10d050dbcaf2b61dcd0728032ee4d90eec7ee389e","first_seen":"2025-06-24T14:16:43.796134Z","last_seen":"2025-08-11T16:20:32.932139Z","times_seen":76,"resource_available":false,"data":null}},"time_used":2165,"timings":{"blocked":918,"dns":402,"connect":251,"send":0,"wait":329,"receive":0,"ssl":261},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}