{"report_id":"6b90e7e5-1dc6-44f3-bf81-e1e932a1a4ea","version":0,"status":"done","tags":["dyndns"],"date":"2026-06-09T13:48:58Z","url":{"schema":"http","addr":"kleankelp.duckdns.org/","fqdn":"kleankelp.duckdns.org","domain":"kleankelp.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"62.60.226.105","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","fqdn":"kleankelp.duckdns.org","domain":"kleankelp.duckdns.org","tld":"duckdns.org"},"title":"Sign In","dom":{"size":13053,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11043)","md5":"f3ee2396907a00fda0413511ad82bccb","sha1":"228d0217fc55e72e0ca16bb0a091e60dcdc8fcae","sha256":"54a4c6af92135fb10b779986ba4af8f90571661ecd971d3761aa1bab93ae4142","sha512":"dd3d2bb6ea168b0d6f2f0762287c29ba313906c55e5acda7a6e7a63bc3743a4e4213b42e8142d067529ca0a61401dedea4ce1258068f6dee3380dfcbea638544","ssdeep":"384:OlhKBNZCxqQXBoUS6vC3dF3RixhcKc7mtsk0ftQ0dh09l9u33rRiYd4ZfSNtIJZD:OlhkNQxqQXBoUS6K3dF3RiYp7mtUa0dk","tlshash":"2142bc368b5452677f8e4b912c29ad4c7ad2b6edc9c7840c6cb49fc38b83a7d9b110d4","dom_hash":"domhash18d05dadef3c1088acefbacce53a41ad","first_seen":"2026-06-09T13:49:06.81242Z","last_seen":"2026-06-09T13:49:06.81242Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kleankelp.duckdns.org/","fqdn":"kleankelp.duckdns.org","domain":"kleankelp.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"62.60.226.105","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-14T13:48:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"kleankelp.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"kleankelp.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]},"summary":[{"fqdn":"community.steamstatic.com","ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":243965,"first_seen":"2022-08-16T00:22:56Z","last_seen":"2026-06-06T13:34:43.725087Z","alert_count":0,"request_count":3,"received_data":8851,"sent_data":1571,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"kleankelp.duckdns.org","ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"domain_registered":"2013-04-12","domain_rank":0,"first_seen":"2026-05-25T23:03:56.073084Z","last_seen":"2026-05-25T23:03:56.073084Z","alert_count":21,"request_count":7,"received_data":392112,"sent_data":7081,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-07T22:44:32.204356Z","alert_count":0,"request_count":2,"received_data":144843,"sent_data":958,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"steamcommunity.com","ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2006-05-28","domain_rank":533,"first_seen":"2014-03-11T13:45:34Z","last_seen":"2026-06-05T10:49:25.479313Z","alert_count":0,"request_count":1,"received_data":38823,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"community.akamai.steamstatic.com","ip":{"addr":"23.36.76.130","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-07","domain_rank":177446,"first_seen":"2021-01-05T18:54:34Z","last_seen":"2026-06-08T01:57:04.39976Z","alert_count":0,"request_count":3,"received_data":139872,"sent_data":1696,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-03","domain_rank":50661,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2026-06-04T10:57:58.958845Z","alert_count":0,"request_count":4,"received_data":150124,"sent_data":2250,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"community.cloudflare.steamstatic.com","ip":{"addr":"23.36.77.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-07","domain_rank":246409,"first_seen":"2020-06-24T00:28:43Z","last_seen":"2026-06-08T23:50:08.675317Z","alert_count":0,"request_count":3,"received_data":995,"sent_data":1700,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react-dom@18.2.0/umd/react-dom.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64141792105ea4861f9f33294d65ab81","sha1":"506d9100caa070005a890bd496de64c437d6d008","sha256":"21758ed084cd0e37e735722ee4f3957ea960628a29dfa6c3ce1a1d47a2d6e4f7","sha512":"30e0a9aa84688ac093c09f2f41089c899bf4a9ca5138289d7a4dc64c54ba293936fb2ee6ba724894a09590509863ea7712b6055c28e61639df4d34520b538759","ssdeep":"1536:XtTqru1xouE1ZTnPrMiY6WRdA2qZpXnBnK3xsVdFE7zptEvp62kdS6F:JmuWl7ndK3xsVdKEd56F","tlshash":"ebd308e87996f6426ab202ab10ef1443737c992b784c4cb1e540fddd64b8069a17ff8d","size":131882,"data":"","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-08-12T05:48:08.230634Z","times_seen":17469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleankelp.duckdns.org/221a7c037a00540a0c53524b157d00054e01021904.js","fqdn":"kleankelp.duckdns.org","domain":"kleankelp.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c098b8cea37eb49733457647f090c6ed","sha1":"650d240add0e30c90b43115e820c515b42564292","sha256":"e5ab71545e59e696d06e2a189c78a4199b3a424e0461b415c79293d635a9c7ee","sha512":"0d3e95ba99d8e1cc0ad638ec063b95b011f3a02eb6a13ed79a94d49148ba5a3086447dfc833e5385b1929c10375a4e05c114735541b20db8c354a766a78d5e8f","ssdeep":"6144:BUwOwCb8r8ZHHtWIiCtM9/sN6bfVBXHRbH0kZIaG9ITb6f1x5WAEMssz/3ue6/I0:BUwOdbo84Vffxk2XwEV+/3ue6/It+Tsk","tlshash":"f0647d45b230ea7e704a1a4274b73806b0395d79b191eccce73c5b5279f1b8e95332ae","size":327917,"data":"","first_seen":"2026-05-03T14:38:27.82305Z","last_seen":"2026-08-12T05:05:57.494977Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react@18.2.0/umd/react.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d86dcdbfed4c273c4742744941259902","sha1":"98089a33d0cf2fa4b3e1ba9b7eeb9b8ba0ac82a7","sha256":"4b4969fa4ef3594324da2c6d78ce8766fbbc2fd121fff395aedf997db0a99a06","sha512":"f10e98f579d36ce13e24dbe3050c09d87f12f94578b80ea1891ca485db48c83619d93a6b74d99639468a746cce872af8742ca4dbcece7a36cfbf097b96b7eaad","ssdeep":"96:DIxuZlZJFupWXpi0pGZBnXQd2q7s0ZiZmdUYe3egbwZqw8+mwoChzSBmqZTZ+Z33:kEXdMAFJdUTTE77tYHD4egFj2MFpKHc","tlshash":"6e22d5e4b952f0448a7338f1117f540f727eaea9b88c8d70a196d9d43db44ad9127f0e","size":10737,"data":"","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-08-12T11:46:58.797699Z","times_seen":17593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Checkingmap[actor:server1.conn0.watcher14.process7//obj57 class:Window extensible:true frozen:false isError:false ownPropertyLength:956 preview:map[kind:ObjectWithURL url:https://kleankelp.duckdns.org/] sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj58 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[href:map[configurable:true enumerable:true value:https://kleankelp.duckdns.org/ writable:true] isInternal:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://kleankelp.duckdns.org/221a7c037a00540a0c53524b.js","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj85 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[fbPixelInit:map[configurable:true enumerable:true value:false writable:true] linkData:map[configurable:true enumerable:true value:map[type:undefined] writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://kleankelp.duckdns.org/221a7c037a00540a0c53524b157d00054e01021904.js","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj86 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[needCheckConf:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://kleankelp.duckdns.org/221a7c037a00540a0c53524b157d00054e01021904.js","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj87 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[fbPixelInit:map[configurable:true enumerable:true value:false writable:true] linkData:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj88 class:Object extensible:true frozen:false isError:false ownPropertyLength:9 sealed:false type:object] writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://kleankelp.duckdns.org/221a7c037a00540a0c53524b157d00054e01021904.js","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"community.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1","fqdn":"community.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","date":"2026-06-09T13:48:42.633Z","timestamp":1781012922633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 07:27:56 GMT","end":"Fri, 24 Jul 2026 07:27:55 GMT"},"fingerprint":{"sha1":"C3:FA:02:01:D7:F9:D6:50:6C:61:2B:B6:B1:27:31:4D:DE:73:42:11","sha256":"AD:79:5B:5B:A9:9E:9C:08:F6:26:B5:65:CF:F7:56:93:05:63:A7:9E:46:6A:C5:F0:BE:9F:1C:30:CB:8E:3B:42"}}},"request":{"raw":"GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1\r\nHost: community.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-123\"\r\naccept-ranges: bytes\r\ndate: Tue, 09 Jun 2026 13:48:42 GMT\r\nvia: 1.1 varnish\r\nage: 51311\r\nx-served-by: cache-bma-essb1270076-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 2177\r\nx-timer: S1781012923.670231,VS0,VE0\r\ncontent-length: 291\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":291,"size_decoded":661,"mime_type":"image/png","magic":"PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced","md5":"a2796187c58c7e948159e37d6990ecc2","sha1":"4209cd85add507247f9ce5a87a8c9095b54ee417","sha256":"23341256db7f44b1f3811880fa2bae6b7748bbf6b62c544a162e38cf0d5c5082","sha512":"5ef103b8398507495c2708df8fcd82bdb763b1d580aaaa6cacfb805614764277c19e8ece5d890a8aafc004fc8c25e3ab2e67d6fbf373c432a9a0d7c36fa0890f","ssdeep":"","tlshash":"83d0ebf3a3e86d79fb52fe97d10180e0465fcaeb6004877889c3880447a81f880f2996","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-08-12T05:05:57.499216Z","times_seen":7505,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":4,"connect":9,"send":0,"wait":9,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1","fqdn":"community.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","date":"2026-06-09T13:48:42.833Z","timestamp":1781012922833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 07:27:56 GMT","end":"Fri, 24 Jul 2026 07:27:55 GMT"},"fingerprint":{"sha1":"C3:FA:02:01:D7:F9:D6:50:6C:61:2B:B6:B1:27:31:4D:DE:73:42:11","sha256":"AD:79:5B:5B:A9:9E:9C:08:F6:26:B5:65:CF:F7:56:93:05:63:A7:9E:46:6A:C5:F0:BE:9F:1C:30:CB:8E:3B:42"}}},"request":{"raw":"GET /public/images/skin_1/footerLogo_valve.png?v=1 HTTP/1.1\r\nHost: community.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-e99\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 09 Jun 2026 13:48:42 GMT\r\nvia: 1.1 varnish\r\nage: 22323\r\nx-served-by: cache-bma-essb1270076-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 2\r\nx-timer: S1781012923.833262,VS0,VE0\r\ncontent-length: 3737\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3737,"size_decoded":4137,"mime_type":"image/png","magic":"PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced","md5":"1626f52addb7c56fe3679d82108c62e9","sha1":"2b414092d66ecff528950093a655f755c3c7f3b5","sha256":"ae9f6c61e25d15882bf57bde193d10d375bd315c9741cabda11d700fd1bb7dd1","sha512":"05548831477cc421556c404f3411f581e98a84ff2e699882cb4f5dca17d1c5f77b55ed2b8211eec32d0a4317be1c4ebc636277f840262491b753415f6f198276","ssdeep":"","tlshash":"0e718e669660b49e18cd70910dce2581eb543268c5673b3865d236cea8a1d179f2d071","first_seen":"2023-04-16T19:19:52Z","last_seen":"2026-08-12T05:05:57.50984Z","times_seen":3346,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","fqdn":"kleankelp.duckdns.org","domain":"kleankelp.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-09T13:48:35.624Z","timestamp":1781012915624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleankelp.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 08:36:48 GMT","end":"Sat, 01 Aug 2026 08:36:47 GMT"},"fingerprint":{"sha1":"45:67:67:C5:9F:F7:7F:68:61:9D:25:F4:2B:AB:93:D0:5B:93:A6:84","sha256":"34:01:63:22:79:3B:79:82:F7:3C:0E:97:82:02:F8:7B:34:5D:C2:3C:66:AD:1C:4D:7C:04:67:19:ED:F8:12:8D"}}},"request":{"raw":"GET /221a7c037a005405035c527f575e510f64570404 HTTP/1.1\r\nHost: kleankelp.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.t3QzB-KDCEHHFJZRMWKM69Ku5PwDxF1W.UxJDLnWVh9c7Nj8n.CbL8vHApYcL8hiXRPoXgDLXTwxpSy29F03MOSHusaf4ZWFGTDM2x_QeMlyOIj4l-WhLEljp22D5UPBAoht01eH7s2gH5lxk_u66Y3hjKNrmfYk1tvI9CRzC8yI4EiW5b8Wt4F1Fxp9y09B3Hyyz38wIn5B1F6r2ZNovuzAIqLwgEjn4FWo-ObSgtWPcSS-QPgkltS2HA6mIDDpszRpRf-t7GrF3ssgkBgmoUw-su1HR9BjfSMh_e669YI4cX3XogGN9kH24iIit2bsOh_E1tnwR0.YZYXYaqCAiPBEWEzzSfaVA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTIwOCwic2VjcmV0IjoiZmMyYjcxN2NiNzczODk4YTQ2Y2EyMTNjMTVlMGVkOGUiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.XO6uZN7egPXZyX9AGvEbJhKk1htMR_7aTFShj5MFEuU\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 13:48:35 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-disposition: inline\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nlast-modified: Sat, 09 May 2026 11:51:36 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2024,"size_decoded":1644,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (433)","md5":"ca99459122c001035a5f6631be9f444d","sha1":"412d3273f19aa5a9e34f8a3f3a8dcc566d07b874","sha256":"69295589acbfd982d81dfc9ef6116996a0f7e05b63b7a9b701f22bf2236cb6bd","sha512":"ef7f5026a3e5d8e4c0643dbf1b23e416e9c7edabf9f2e1bfa725ca884bae116dc25fbeae82055aa5f47886ac64f56f211b77a92544c84cfbb776b910dd8f1490","ssdeep":"","tlshash":"0e417547fdf4d8b60a86094f743af80c7cd26a55895dd88019ef80f59c20f954e22884","first_seen":"2026-06-09T13:49:06.82666Z","last_seen":"2026-06-09T13:49:06.82666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"kleankelp.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"kleankelp.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react@18.2.0/umd/react.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","date":"2026-06-09T13:48:35.866Z","timestamp":1781012915866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/react@18.2.0/umd/react.production.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://kleankelp.duckdns.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 13:48:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 4382\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 18.2.0\r\nx-jsd-version-type: version\r\netag: W/\"29f1-mAiaM9DPL6Sz4bqbfuubi6Csgqc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220149-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2290662\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EqFRh710ieGIv9Zxfe7RsMkxKzioftDYMWEFdN0v7aSFhRKpIESu16QotTVMryRPztimF%2F6Z3hhjnqjfE2reORGsiTFDmJVyFpfINHHSLMFyowShZ4Tc1f0Whe4En1Ic6bY%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a090986d888bb50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10737,"size_decoded":5493,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (630)","md5":"d86dcdbfed4c273c4742744941259902","sha1":"98089a33d0cf2fa4b3e1ba9b7eeb9b8ba0ac82a7","sha256":"4b4969fa4ef3594324da2c6d78ce8766fbbc2fd121fff395aedf997db0a99a06","sha512":"f10e98f579d36ce13e24dbe3050c09d87f12f94578b80ea1891ca485db48c83619d93a6b74d99639468a746cce872af8742ca4dbcece7a36cfbf097b96b7eaad","ssdeep":"96:DIxuZlZJFupWXpi0pGZBnXQd2q7s0ZiZmdUYe3egbwZqw8+mwoChzSBmqZTZ+Z33:kEXdMAFJdUTTE77tYHD4egFj2MFpKHc","tlshash":"6e22d5e4b952f0448a7338f1117f540f727eaea9b88c8d70a196d9d43db44ad9127f0e","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-08-12T11:46:58.797699Z","times_seen":17593,"resource_available":true,"data":null}},"time_used":6639,"timings":{"blocked":-1,"dns":2,"connect":2,"send":0,"wait":13,"receive":0,"ssl":6621},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamcommunity.com/favicon.ico","fqdn":"steamcommunity.com","domain":"steamcommunity.com","tld":"com"},"ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","date":"2026-06-09T13:48:37.781Z","timestamp":1781012917781,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steampowered.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:66:D7:D2:99:D6:A1:56:A5:A6:D9:94:5C:88:56:DD:5C:41:8E:49","sha256":"C5:81:A7:0E:F1:39:43:B6:7A:5C:E3:67:B5:C9:6C:8C:D4:AD:B1:96:E3:F0:6B:88:9F:83:D4:2D:94:97:36:7C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: steamcommunity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/x-icon\r\nCache-Control: public,max-age=86400\r\nExpires: Mon, 08 Jun 2026 11:22:42 GMT\r\nLast-Modified: Fri, 22 Nov 2024 18:31:38 GMT\r\nDate: Tue, 09 Jun 2026 13:48:42 GMT\r\nContent-Length: 38554\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38554,"size_decoded":38823,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"231913fdebabcbe65f4b0052372bde56","sha1":"553909d080e4f210b64dc73292f3a111d5a0781f","sha256":"9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad","sha512":"7b11b709968c5a52b9b60189fb534f5df56912417243820e9d1c00c97f4bd6d0835f2cdf574d0c36ecb32dbbf5fc397324df54f7fdf9e1b062b5dbda2c02e919","ssdeep":"768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh","tlshash":"70038de82e4917aee9e2cf324adb6716237b4f88c0bc169742b07f193175a51c6d78c1","first_seen":"2023-04-05T07:02:49Z","last_seen":"2026-08-12T05:05:57.500822Z","times_seen":6892,"resource_available":false,"data":null}},"time_used":4736,"timings":{"blocked":4711,"dns":0,"connect":1,"send":0,"wait":11,"receive":2,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.130","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","date":"2026-06-09T13:48:42.573Z","timestamp":1781012922573,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 3777\r\nLast-Modified: Fri, 22 Nov 2024 18:31:38 GMT\r\nETag: \"6740ce0a-ec1\"\r\nAccept-Ranges: bytes\r\nDate: Tue, 09 Jun 2026 13:48:42 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3777,"size_decoded":4009,"mime_type":"image/png","magic":"PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced","md5":"eabc76eb57feae44add7faead028521e","sha1":"4e3e53938fad15661d2d046a868338841a95db19","sha256":"fc9e6260a2706ae146282d77e67bc1b74688435f8912ab4c1932641eec28bffa","sha512":"5c6da6eeefddf321c2bc7e39a134e0a3140a9f93ad1560b2e102ef60ec218c29aae14ed344c79e25cc5493cd15551040d8c909de28dcab02034d787563104e07","ssdeep":"","tlshash":"eb717ce7323e5456e1f056c6015b52f69eb1a1080d2b4e09f224b77831ac63be38333d","first_seen":"2023-04-05T21:31:08Z","last_seen":"2026-08-12T05:05:57.506203Z","times_seen":7571,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":11,"connect":1,"send":0,"wait":4,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/61286/MotivaSansExtraBold.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","date":"2026-06-09T13:48:42.593Z","timestamp":1781012922593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 13:10:42 GMT","end":"Sat, 01 Aug 2026 14:08:22 GMT"},"fingerprint":{"sha1":"EF:14:45:48:B1:9A:C9:A7:28:6B:C0:1D:0E:B0:E6:38:74:C4:7E:91","sha256":"01:F2:AE:FC:05:A5:B3:D3:60:65:B9:ED:2B:F8:58:97:9E:78:7E:12:13:FD:FD:28:67:E7:56:8A:AC:9D:07:A1"}}},"request":{"raw":"GET /s/61286/MotivaSansExtraBold.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kleankelp.duckdns.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/css/motiva-sans?styles=101373,102902,102901,103845\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 09 Jun 2026 13:48:42 GMT\r\ncontent-type: font/woff\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 05 Feb 2022 02:00:55 GMT\r\netag: \"f88c-5d73bbcdc080a\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bgTJZJmSVBfPcsOiBv1SaOSm9GL69iXwSQ2pF9t5IMwoZxDuV4zAj%2B6RYLsAdAMd6F%2F99p5JNL4M5DvNufkPof1yoWJd9uR%2Fx22fPN9EPYX9%2F5iRQOJLz0usToskPv8b2Xmomq4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 63628\r\ncf-ray: a090986e2c49b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63628,"size_decoded":64366,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 63628, version 0.0","md5":"e704d909203f0e6a4ac8624c1e1b6536","sha1":"061607c6a57e63580fc7a46658763ff36cdd926d","sha256":"54b3bf2e12e41641dee7690b6e0eccf778d341713cb957aff9012f41d923cbe2","sha512":"c92aa2ac2ca0c75ebc5edd5008579692c120f05b33bbbce2f7f835b9cecddc3f1064647aa0543b93e17770422d4105227b32d0300d37b92e5a66610ec9fc8036","ssdeep":"1536:uacKl4quxZGi4XBHTXzU+9kZq7F1Tkd4wC5IryvbDz:rBl4qqGiO1TXYBI1YdCIryPz","tlshash":"b0530135d8e5e518b941937f20b19a33ba4e3080b51fc9e5124ce2c5af1ae7bb0bd489","first_seen":"2024-08-17T14:39:17Z","last_seen":"2026-08-12T05:05:57.504216Z","times_seen":79,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.steamstatic.com/public/shared/images/header/logo_steam.svg","fqdn":"community.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","date":"2026-06-09T13:48:42.834Z","timestamp":1781012922834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 07:27:56 GMT","end":"Fri, 24 Jul 2026 07:27:55 GMT"},"fingerprint":{"sha1":"C3:FA:02:01:D7:F9:D6:50:6C:61:2B:B6:B1:27:31:4D:DE:73:42:11","sha256":"AD:79:5B:5B:A9:9E:9C:08:F6:26:B5:65:CF:F7:56:93:05:63:A7:9E:46:6A:C5:F0:BE:9F:1C:30:CB:8E:3B:42"}}},"request":{"raw":"GET /public/shared/images/header/logo_steam.svg HTTP/1.1\r\nHost: community.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-e3e\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 09 Jun 2026 13:48:42 GMT\r\nvia: 1.1 varnish\r\nage: 48765\r\nx-served-by: cache-bma-essb1270076-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1299\r\nx-timer: S1781012923.834522,VS0,VE0\r\ncontent-length: 3646\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3646,"size_decoded":4053,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31aabe1e01f27b3b9b47d7265807afc2","sha1":"a430f5a8a81145215c41c3ba80929627e570d81e","sha256":"3a4d08139646d567a612f75b8179641c570d490f8013478d131266ed21f3d453","sha512":"60dfb140295124b3f6b57592504ca6006c22988bba82bf63c5559fa7f8da2aab7e163265abb2a312034875f95fa850bbacb620ecca6c56ea8e79689963cd31c4","ssdeep":"","tlshash":"f971b4cc17338be06595c27e1e7476d223b365a9e8b001e8a3920c202c0bfe69a64d75","first_seen":"2023-10-31T01:09:47Z","last_seen":"2026-08-05T15:58:46.233668Z","times_seen":2982,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleankelp.duckdns.org/221a7c037a00540a0c53524b157d00054e01021904.js","fqdn":"kleankelp.duckdns.org","domain":"kleankelp.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","date":"2026-06-09T13:48:35.870Z","timestamp":1781012915870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleankelp.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 08:36:48 GMT","end":"Sat, 01 Aug 2026 08:36:47 GMT"},"fingerprint":{"sha1":"45:67:67:C5:9F:F7:7F:68:61:9D:25:F4:2B:AB:93:D0:5B:93:A6:84","sha256":"34:01:63:22:79:3B:79:82:F7:3C:0E:97:82:02:F8:7B:34:5D:C2:3C:66:AD:1C:4D:7C:04:67:19:ED:F8:12:8D"}}},"request":{"raw":"GET /221a7c037a00540a0c53524b157d00054e01021904.js HTTP/1.1\r\nHost: kleankelp.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.t3QzB-KDCEHHFJZRMWKM69Ku5PwDxF1W.UxJDLnWVh9c7Nj8n.CbL8vHApYcL8hiXRPoXgDLXTwxpSy29F03MOSHusaf4ZWFGTDM2x_QeMlyOIj4l-WhLEljp22D5UPBAoht01eH7s2gH5lxk_u66Y3hjKNrmfYk1tvI9CRzC8yI4EiW5b8Wt4F1Fxp9y09B3Hyyz38wIn5B1F6r2ZNovuzAIqLwgEjn4FWo-ObSgtWPcSS-QPgkltS2HA6mIDDpszRpRf-t7GrF3ssgkBgmoUw-su1HR9BjfSMh_e669YI4cX3XogGN9kH24iIit2bsOh_E1tnwR0.YZYXYaqCAiPBEWEzzSfaVA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTIwOCwic2VjcmV0IjoiZmMyYjcxN2NiNzczODk4YTQ2Y2EyMTNjMTVlMGVkOGUiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.XO6uZN7egPXZyX9AGvEbJhKk1htMR_7aTFShj5MFEuU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 13:48:35 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncontent-disposition: inline\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nlast-modified: Sat, 09 May 2026 11:51:36 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":327917,"size_decoded":108785,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64178)","md5":"c098b8cea37eb49733457647f090c6ed","sha1":"650d240add0e30c90b43115e820c515b42564292","sha256":"e5ab71545e59e696d06e2a189c78a4199b3a424e0461b415c79293d635a9c7ee","sha512":"0d3e95ba99d8e1cc0ad638ec063b95b011f3a02eb6a13ed79a94d49148ba5a3086447dfc833e5385b1929c10375a4e05c114735541b20db8c354a766a78d5e8f","ssdeep":"6144:BUwOwCb8r8ZHHtWIiCtM9/sN6bfVBXHRbH0kZIaG9ITb6f1x5WAEMssz/3ue6/I0:BUwOdbo84Vffxk2XwEV+/3ue6/It+Tsk","tlshash":"f0647d45b230ea7e704a1a4274b73806b0395d79b191eccce73c5b5279f1b8e95332ae","first_seen":"2026-05-03T14:38:27.82305Z","last_seen":"2026-08-12T05:05:57.494977Z","times_seen":29,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"kleankelp.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"kleankelp.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"kleankelp.duckdns.org/221a7c037a005402114452474b1c0a275d5807044a1c772272671f752c5d.css","fqdn":"kleankelp.duckdns.org","domain":"kleankelp.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","date":"2026-06-09T13:48:35.872Z","timestamp":1781012915872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleankelp.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 08:36:48 GMT","end":"Sat, 01 Aug 2026 08:36:47 GMT"},"fingerprint":{"sha1":"45:67:67:C5:9F:F7:7F:68:61:9D:25:F4:2B:AB:93:D0:5B:93:A6:84","sha256":"34:01:63:22:79:3B:79:82:F7:3C:0E:97:82:02:F8:7B:34:5D:C2:3C:66:AD:1C:4D:7C:04:67:19:ED:F8:12:8D"}}},"request":{"raw":"GET /221a7c037a005402114452474b1c0a275d5807044a1c772272671f752c5d.css HTTP/1.1\r\nHost: kleankelp.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.t3QzB-KDCEHHFJZRMWKM69Ku5PwDxF1W.UxJDLnWVh9c7Nj8n.CbL8vHApYcL8hiXRPoXgDLXTwxpSy29F03MOSHusaf4ZWFGTDM2x_QeMlyOIj4l-WhLEljp22D5UPBAoht01eH7s2gH5lxk_u66Y3hjKNrmfYk1tvI9CRzC8yI4EiW5b8Wt4F1Fxp9y09B3Hyyz38wIn5B1F6r2ZNovuzAIqLwgEjn4FWo-ObSgtWPcSS-QPgkltS2HA6mIDDpszRpRf-t7GrF3ssgkBgmoUw-su1HR9BjfSMh_e669YI4cX3XogGN9kH24iIit2bsOh_E1tnwR0.YZYXYaqCAiPBEWEzzSfaVA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTIwOCwic2VjcmV0IjoiZmMyYjcxN2NiNzczODk4YTQ2Y2EyMTNjMTVlMGVkOGUiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.XO6uZN7egPXZyX9AGvEbJhKk1htMR_7aTFShj5MFEuU\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 13:48:35 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\ncontent-disposition: inline\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nlast-modified: Sat, 09 May 2026 11:51:36 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24830,"size_decoded":6928,"mime_type":"text/css","magic":"ASCII text, with very long lines (24829)","md5":"6d85d611f609ae2030ac157ec5f5f07f","sha1":"13337042e8fd252d2c0074e36622085559a126e6","sha256":"583e3e859643c1c9fffb20286c12a1df80ac6a470cfb5d195f56013d9447e4e7","sha512":"b22c9362c3e26d19b9f14f8099d807bbad20e9181acb81b094b8e65437b2a75ee79b51d6a32f24783289751a4bfb0d656f46525511e5906afaf1aa8973ce2369","ssdeep":"768:+lMQqMdSi0vqDrXKtTrCdwahYX87/yne5L8:2xSPqDmtTrCdwahYX87/ynr","tlshash":"b5b2963297613239711b8a253cc2a9859031bc4695ffdabdfa711c2f86490930fe72f6","first_seen":"2025-08-24T16:19:12.380926Z","last_seen":"2026-08-12T05:05:57.513769Z","times_seen":60,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"kleankelp.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"kleankelp.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.130","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","date":"2026-06-09T13:48:42.575Z","timestamp":1781012922575,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/images/responsive/header_logo.png HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 10863\r\nLast-Modified: Fri, 22 Nov 2024 18:31:38 GMT\r\nETag: \"6740ce0a-2a6f\"\r\nAccept-Ranges: bytes\r\nDate: Tue, 09 Jun 2026 13:48:42 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10863,"size_decoded":11097,"mime_type":"image/png","magic":"PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced","md5":"a4e79c73ee13cb25b60fc4b0ba1f690c","sha1":"b690c31b2eb1b0eb085e91aaae7e79f03debe7c1","sha256":"6cb869df089146c12efb5e9c968e911c314842624ba6f052a11346ac734cadc8","sha512":"aad423119f410a655f0aa475d2fe692087d7262c3986ce71347981c5b60f6a10031d7050bf9b9aee4e7d84d814f0b8883c964028fcbe14ed3464602f3ba6cec3","ssdeep":"192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM","tlshash":"4722c06cfcc0c875958352ba3e27fb7043f93e10c44b86b86960e5a5365c8f4959d137","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-08-12T05:05:57.50715Z","times_seen":7538,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":9,"connect":1,"send":0,"wait":3,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1","fqdn":"community.cloudflare.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.77.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","date":"2026-06-09T13:48:42.576Z","timestamp":1781012922576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 12:34:34 GMT","end":"Mon, 27 Jul 2026 12:34:33 GMT"},"fingerprint":{"sha1":"86:90:F9:A6:06:CC:49:42:66:07:1C:23:99:F4:25:FC:AD:99:4E:DB","sha256":"FF:42:FC:CD:04:A3:7D:7E:69:61:34:B6:F5:C8:E4:CA:03:D3:73:8E:70:6C:93:76:2A:33:E6:CB:78:B5:07:31"}}},"request":{"raw":"GET /public/images/skin_1/footerLogo_valve.png?v=1 HTTP/1.1\r\nHost: community.cloudflare.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: nginx\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://community.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1\r\ndate: Tue, 09 Jun 2026 13:48:42 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nakamai-grn: 0.5f4d2417.1781012922.2bc5b5ae\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T13:40:47.774503Z","times_seen":17856059,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":21,"connect":1,"send":0,"wait":4,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.cloudflare.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1","fqdn":"community.cloudflare.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.77.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","date":"2026-06-09T13:48:42.578Z","timestamp":1781012922578,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 12:34:34 GMT","end":"Mon, 27 Jul 2026 12:34:33 GMT"},"fingerprint":{"sha1":"86:90:F9:A6:06:CC:49:42:66:07:1C:23:99:F4:25:FC:AD:99:4E:DB","sha256":"FF:42:FC:CD:04:A3:7D:7E:69:61:34:B6:F5:C8:E4:CA:03:D3:73:8E:70:6C:93:76:2A:33:E6:CB:78:B5:07:31"}}},"request":{"raw":"GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1\r\nHost: community.cloudflare.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://community.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1\r\ndate: Tue, 09 Jun 2026 13:48:42 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-grn: 0.5f4d2417.1781012922.2bc5b56d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T13:40:47.774503Z","times_seen":17856059,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":19,"connect":1,"send":0,"wait":3,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleankelp.duckdns.org/favicon.ico","fqdn":"kleankelp.duckdns.org","domain":"kleankelp.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kleankelp.duckdns.org/","date":"2026-06-09T13:48:35.356Z","timestamp":1781012915356,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kleankelp.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.t3QzB-KDCEHHFJZRMWKM69Ku5PwDxF1W.UxJDLnWVh9c7Nj8n.CbL8vHApYcL8hiXRPoXgDLXTwxpSy29F03MOSHusaf4ZWFGTDM2x_QeMlyOIj4l-WhLEljp22D5UPBAoht01eH7s2gH5lxk_u66Y3hjKNrmfYk1tvI9CRzC8yI4EiW5b8Wt4F1Fxp9y09B3Hyyz38wIn5B1F6r2ZNovuzAIqLwgEjn4FWo-ObSgtWPcSS-QPgkltS2HA6mIDDpszRpRf-t7GrF3ssgkBgmoUw-su1HR9BjfSMh_e669YI4cX3XogGN9kH24iIit2bsOh_E1tnwR0.YZYXYaqCAiPBEWEzzSfaVA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTIwOCwic2VjcmV0IjoiZmMyYjcxN2NiNzczODk4YTQ2Y2EyMTNjMTVlMGVkOGUiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.XO6uZN7egPXZyX9AGvEbJhKk1htMR_7aTFShj5MFEuU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T13:40:47.774503Z","times_seen":17856059,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"kleankelp.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"kleankelp.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/motiva-sans?styles=101373,102902,102901,103845","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","date":"2026-06-09T13:48:35.926Z","timestamp":1781012915926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 13:10:42 GMT","end":"Sat, 01 Aug 2026 14:08:22 GMT"},"fingerprint":{"sha1":"EF:14:45:48:B1:9A:C9:A7:28:6B:C0:1D:0E:B0:E6:38:74:C4:7E:91","sha256":"01:F2:AE:FC:05:A5:B3:D3:60:65:B9:ED:2B:F8:58:97:9E:78:7E:12:13:FD:FD:28:67:E7:56:8A:AC:9D:07:A1"}}},"request":{"raw":"GET /css/motiva-sans?styles=101373,102902,102901,103845 HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 09 Jun 2026 13:48:35 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 421235\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 04 Jun 2026 16:48:00 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2BdYuhlFmPcJ4bv7o0lP%2BcXuzXvePKOwd6nsL%2BsQxdSlrMcwywvpjNZ1NhtHNJOhnzUUvYj%2FsYIP73Cr3GMADBL%2BxqbWOKaHa7J4lelROYENTiZpPsu8cX%2FFvDYvqPUYOklTz6A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0909844acfe4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":835,"size_decoded":915,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"f50ae0a6dc077a902b1ff78ad77cd89c","sha1":"1b25fa4f53b3c2cd927308fd4b8c54d25f8d11bb","sha256":"97e20f5c23acaf3c3334139a10003d96188e35e3d9d28ac231a7376ab163af03","sha512":"defe2f26f8f8f1b6df8429b6c283969ad316dde99e1b9f416a98e5d442d90fa69bc12544b71e4dd842d88d42bab04359523130fa9b175d2a28c393eb05a89d44","ssdeep":"","tlshash":"8b01a16125bfb55875340c8af35f35180d9b342b611dc625be792e448fba42d02b17ae","first_seen":"2024-11-20T13:09:05.413516Z","last_seen":"2026-08-12T05:05:57.496624Z","times_seen":69,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":3,"connect":14,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/61286/MotivaSansRegular.woff.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","date":"2026-06-09T13:48:42.537Z","timestamp":1781012922537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 13:10:42 GMT","end":"Sat, 01 Aug 2026 14:08:22 GMT"},"fingerprint":{"sha1":"EF:14:45:48:B1:9A:C9:A7:28:6B:C0:1D:0E:B0:E6:38:74:C4:7E:91","sha256":"01:F2:AE:FC:05:A5:B3:D3:60:65:B9:ED:2B:F8:58:97:9E:78:7E:12:13:FD:FD:28:67:E7:56:8A:AC:9D:07:A1"}}},"request":{"raw":"GET /s/61286/MotivaSansRegular.woff.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kleankelp.duckdns.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/css/motiva-sans?styles=101373,102902,102901,103845\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 09 Jun 2026 13:48:43 GMT\r\ncontent-type: font/woff\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 05 Feb 2022 02:00:55 GMT\r\netag: \"a1d0-5d73bbcdc080a\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z6%2FRge%2BAoy6Iel1lTOuSVzLTGHttl8lsLeHIkSu6NF2vjNvKQdyFJxF%2F7Fn0WYXOASyCSRvl3gybbAVUXRsBwIoJGZcs0KcQ9nyTCX8Atn1MiISFwXmgt0eZi8HzFWXro7PssPw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 41424\r\ncf-ray: a090986dec42b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41424,"size_decoded":42160,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 41424, version 0.0","md5":"57bd6f5c2a7c3c90763fbf2744699879","sha1":"27a5cafffebd1d150c6a6b3f7987045482c507c9","sha256":"a472df8bf74a611c4136f892221d4832010988461b4cd9d68058896f1f25a512","sha512":"a7647198a5902e16ea4272b4d7f435b4c7a7e2d9a3ce86d9fce8be790627a738eaa87011864637e8248a2eedc809a7fd73ab250b21a35c0ef6060525611c81fd","ssdeep":"768:K+F7LEi09DTJ0yWQeu29lsoKyaYopWadPez4bw7VQbywb4AIb3+wEL5i+:ZF6RGVQn2PKboadPU42Qb4AIb9Etj","tlshash":"d313f279c9f2d623e1fcde4423d94249c415520ba7a24bc03567f98f3bbe399e6a160c","first_seen":"2023-11-04T01:38:20Z","last_seen":"2026-08-12T05:05:57.503146Z","times_seen":135,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":0,"dns":0,"connect":8,"send":0,"wait":644,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg","fqdn":"community.cloudflare.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.77.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","date":"2026-06-09T13:48:42.572Z","timestamp":1781012922572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 12:34:34 GMT","end":"Mon, 27 Jul 2026 12:34:33 GMT"},"fingerprint":{"sha1":"86:90:F9:A6:06:CC:49:42:66:07:1C:23:99:F4:25:FC:AD:99:4E:DB","sha256":"FF:42:FC:CD:04:A3:7D:7E:69:61:34:B6:F5:C8:E4:CA:03:D3:73:8E:70:6C:93:76:2A:33:E6:CB:78:B5:07:31"}}},"request":{"raw":"GET /public/shared/images/header/logo_steam.svg HTTP/1.1\r\nHost: community.cloudflare.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: nginx\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://community.steamstatic.com/public/shared/images/header/logo_steam.svg\r\ndate: Tue, 09 Jun 2026 13:48:42 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nakamai-grn: 0.5f4d2417.1781012922.2bc5b5af\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T13:40:47.774503Z","times_seen":17856059,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":26,"connect":2,"send":0,"wait":4,"receive":0,"ssl":219},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/61286/MotivaSansMedium.woff.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","date":"2026-06-09T13:48:42.592Z","timestamp":1781012922592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 13:10:42 GMT","end":"Sat, 01 Aug 2026 14:08:22 GMT"},"fingerprint":{"sha1":"EF:14:45:48:B1:9A:C9:A7:28:6B:C0:1D:0E:B0:E6:38:74:C4:7E:91","sha256":"01:F2:AE:FC:05:A5:B3:D3:60:65:B9:ED:2B:F8:58:97:9E:78:7E:12:13:FD:FD:28:67:E7:56:8A:AC:9D:07:A1"}}},"request":{"raw":"GET /s/61286/MotivaSansMedium.woff.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kleankelp.duckdns.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/css/motiva-sans?styles=101373,102902,102901,103845\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 09 Jun 2026 13:48:42 GMT\r\ncontent-type: font/woff\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 05 Feb 2022 02:00:55 GMT\r\netag: \"a144-5d73bbcdc080a\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rjhv89CTGracwakgeAIQ2P%2FYLQNPC%2Fhzyqhrs%2B7%2BXu4HNLHBj90XNl8wMP7gLchkMTZYDSnXubR8PEgx9fiiNEN0S4IgNo%2Fja0TxwNltjlBX94pNHQ8RQbQrWUQ7zGB1hpmk7uY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 41284\r\ncf-ray: a090986e2c47b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41284,"size_decoded":42024,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 41284, version 0.0","md5":"6a3575348afb953addea554183438636","sha1":"bb136d68b07e69ab4272d098f522e2c740b668a7","sha256":"dee2f7d9132cbdf82ac50b78835902a6000d29876f467f43bc0a8df21bfd9dbd","sha512":"4401b4814cf15b10e832e64fff3431a36bcc5a244b1f723556e6cdc5bfbd93beb5b40365b2ee26bba1930dc4e4751282f16b483a653c3b5a6c35c98748da3670","ssdeep":"768:6bvd2M/P1Exmz4SXIT1d0QDS/LH400ZT9O1HCL8TXAo3+woBHIL:6bvXSw4wIF+/F0ZT9OI2X9oBoL","tlshash":"9d03f13bad025e9ae9f9b183937a07e54a12c11f31c2d7b4a227c87c6edc705ca9154e","first_seen":"2023-11-04T01:38:20Z","last_seen":"2026-08-12T05:05:57.508059Z","times_seen":132,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleankelp.duckdns.org/221a7c037a0054101652565e1d0b7e175d450a15","fqdn":"kleankelp.duckdns.org","domain":"kleankelp.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","date":"2026-06-09T13:48:42.598Z","timestamp":1781012922598,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleankelp.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 08:36:48 GMT","end":"Sat, 01 Aug 2026 08:36:47 GMT"},"fingerprint":{"sha1":"45:67:67:C5:9F:F7:7F:68:61:9D:25:F4:2B:AB:93:D0:5B:93:A6:84","sha256":"34:01:63:22:79:3B:79:82:F7:3C:0E:97:82:02:F8:7B:34:5D:C2:3C:66:AD:1C:4D:7C:04:67:19:ED:F8:12:8D"}}},"request":{"raw":"POST /221a7c037a0054101652565e1d0b7e175d450a15 HTTP/1.1\r\nHost: kleankelp.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 14\r\nOrigin: https://kleankelp.duckdns.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.t3QzB-KDCEHHFJZRMWKM69Ku5PwDxF1W.UxJDLnWVh9c7Nj8n.CbL8vHApYcL8hiXRPoXgDLXTwxpSy29F03MOSHusaf4ZWFGTDM2x_QeMlyOIj4l-WhLEljp22D5UPBAoht01eH7s2gH5lxk_u66Y3hjKNrmfYk1tvI9CRzC8yI4EiW5b8Wt4F1Fxp9y09B3Hyyz38wIn5B1F6r2ZNovuzAIqLwgEjn4FWo-ObSgtWPcSS-QPgkltS2HA6mIDDpszRpRf-t7GrF3ssgkBgmoUw-su1HR9BjfSMh_e669YI4cX3XogGN9kH24iIit2bsOh_E1tnwR0.YZYXYaqCAiPBEWEzzSfaVA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTIwOCwic2VjcmV0IjoiZmMyYjcxN2NiNzczODk4YTQ2Y2EyMTNjMTVlMGVkOGUiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.XO6uZN7egPXZyX9AGvEbJhKk1htMR_7aTFShj5MFEuU\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 201 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 13:48:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 194\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"c2-JCRnbe04gltUN/+9B4gaO/rSah4\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":194,"size_decoded":822,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5f08b69ac4e009be5a244e882c6572ea","sha1":"2424676ded38825b5437ffbd07881a3bfad26a1e","sha256":"fdf937958a1c8da47d27d2fb12978c092c0eb80296431768cc27a723ae91b863","sha512":"9c0effd1cab22ea5219871c1e44c4fb40583da4977ec2142df7df8cc0b0821088ea737c31010b4dd828c0e17d5ee8abc33bcb0af9d38d71f1054c9e69c8cc209","ssdeep":"","tlshash":"03c0224c090c043e84124209ac426f18071800923064ae4cf26c2b0638e3283c4f090b","first_seen":"2026-05-25T23:03:58.693261Z","last_seen":"2026-06-09T13:49:06.846498Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"kleankelp.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"kleankelp.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"kleankelp.duckdns.org/","fqdn":"kleankelp.duckdns.org","domain":"kleankelp.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-09T13:48:34.830Z","timestamp":1781012914830,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleankelp.duckdns.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 08:36:48 GMT","end":"Sat, 01 Aug 2026 08:36:47 GMT"},"fingerprint":{"sha1":"45:67:67:C5:9F:F7:7F:68:61:9D:25:F4:2B:AB:93:D0:5B:93:A6:84","sha256":"34:01:63:22:79:3B:79:82:F7:3C:0E:97:82:02:F8:7B:34:5D:C2:3C:66:AD:1C:4D:7C:04:67:19:ED:F8:12:8D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kleankelp.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 13:48:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=60, s-maxage=60, stale-while-revalidate=30\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"8113-MHTvJATOBUtAt7uO5dcUOJI7h6c\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nset-cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.t3QzB-KDCEHHFJZRMWKM69Ku5PwDxF1W.UxJDLnWVh9c7Nj8n.CbL8vHApYcL8hiXRPoXgDLXTwxpSy29F03MOSHusaf4ZWFGTDM2x_QeMlyOIj4l-WhLEljp22D5UPBAoht01eH7s2gH5lxk_u66Y3hjKNrmfYk1tvI9CRzC8yI4EiW5b8Wt4F1Fxp9y09B3Hyyz38wIn5B1F6r2ZNovuzAIqLwgEjn4FWo-ObSgtWPcSS-QPgkltS2HA6mIDDpszRpRf-t7GrF3ssgkBgmoUw-su1HR9BjfSMh_e669YI4cX3XogGN9kH24iIit2bsOh_E1tnwR0.YZYXYaqCAiPBEWEzzSfaVA; Max-Age=21600; Path=/; Expires=Tue, 09 Jun 2026 19:48:35 GMT; SameSite=Lax\ntoken=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTIwOCwic2VjcmV0IjoiZmMyYjcxN2NiNzczODk4YTQ2Y2EyMTNjMTVlMGVkOGUiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.XO6uZN7egPXZyX9AGvEbJhKk1htMR_7aTFShj5MFEuU; Max-Age=21600; Path=/; Expires=Tue, 09 Jun 2026 19:48:35 GMT; SameSite=Lax\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33043,"size_decoded":13151,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (32573)","md5":"bb9b4e4095f1f12e22ca5ee5d77b4904","sha1":"0cea2d4128fe44960539dba838b6fae0e12a5cea","sha256":"be4da295f3ea0e7ffe76ad8d4e47d173356c3fdac85c952aaebaea87ffba30e2","sha512":"a777ec054573a1114ef0c062be9d27ac094ce90fcf620f7bc3a0fc5f5305589ea200ce42ebcddb1245bd0734b587797e7f4bd52019a7d65b6bf16e037fdd97b1","ssdeep":"768:cjU6T0UPuWZ48OmWbDLPV+iagSVfcsIg717hEUfNn1NJekGR13aDf17Pp+k5T:c46XuWZ4vmWbDLPVtagucw717WUfN1Nz","tlshash":"38e210a8b543a86493f26030790ffa0f8652d40d074c57d8fad3e4d23adc682adde676","first_seen":"2026-05-25T23:03:58.690041Z","last_seen":"2026-06-16T01:43:45.885456Z","times_seen":3,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":125,"connect":29,"send":0,"wait":58,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"kleankelp.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"kleankelp.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"kleankelp.duckdns.org/221a7c037a0054","fqdn":"kleankelp.duckdns.org","domain":"kleankelp.duckdns.org","tld":"duckdns.org"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kleankelp.duckdns.org/","date":"2026-06-09T13:48:35.352Z","timestamp":1781012915352,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"POST /221a7c037a0054 HTTP/1.1\r\nHost: kleankelp.duckdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 51\r\nOrigin: null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.t3QzB-KDCEHHFJZRMWKM69Ku5PwDxF1W.UxJDLnWVh9c7Nj8n.CbL8vHApYcL8hiXRPoXgDLXTwxpSy29F03MOSHusaf4ZWFGTDM2x_QeMlyOIj4l-WhLEljp22D5UPBAoht01eH7s2gH5lxk_u66Y3hjKNrmfYk1tvI9CRzC8yI4EiW5b8Wt4F1Fxp9y09B3Hyyz38wIn5B1F6r2ZNovuzAIqLwgEjn4FWo-ObSgtWPcSS-QPgkltS2HA6mIDDpszRpRf-t7GrF3ssgkBgmoUw-su1HR9BjfSMh_e669YI4cX3XogGN9kH24iIit2bsOh_E1tnwR0.YZYXYaqCAiPBEWEzzSfaVA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTIwOCwic2VjcmV0IjoiZmMyYjcxN2NiNzczODk4YTQ2Y2EyMTNjMTVlMGVkOGUiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.XO6uZN7egPXZyX9AGvEbJhKk1htMR_7aTFShj5MFEuU\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T13:40:47.774503Z","times_seen":17856059,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-09","alert":"Phishing Block","trigger":"kleankelp.duckdns.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"kleankelp.duckdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react-dom@18.2.0/umd/react-dom.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","date":"2026-06-09T13:48:35.869Z","timestamp":1781012915869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/react-dom@18.2.0/umd/react-dom.production.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://kleankelp.duckdns.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 13:48:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 43516\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 18.2.0\r\nx-jsd-version-type: version\r\netag: W/\"2032a-UG2RAMqgcABaiQvUlt5kxDfW0Ag\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220089-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 1260224\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VBSEa0RfUn00Clrs3XcwmyOe305USIFQHPiE1zRTnTUkz8IIsfBW8XJLE4XK5NMgdw1YIVWXWy3tw4g6L0hsRHcjQhL%2Bs6Y3N6vYlr0STKv8CESLX7wVirAXASLGD2IYd74%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a090986c0e6bb50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131882,"size_decoded":44629,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (945)","md5":"64141792105ea4861f9f33294d65ab81","sha1":"506d9100caa070005a890bd496de64c437d6d008","sha256":"21758ed084cd0e37e735722ee4f3957ea960628a29dfa6c3ce1a1d47a2d6e4f7","sha512":"30e0a9aa84688ac093c09f2f41089c899bf4a9ca5138289d7a4dc64c54ba293936fb2ee6ba724894a09590509863ea7712b6055c28e61639df4d34520b538759","ssdeep":"1536:XtTqru1xouE1ZTnPrMiY6WRdA2qZpXnBnK3xsVdFE7zptEvp62kdS6F:JmuWl7ndK3xsVdKEd56F","tlshash":"ebd308e87996f6426ab202ab10ef1443737c992b784c4cb1e540fddd64b8069a17ff8d","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-08-12T05:48:08.230634Z","times_seen":17469,"resource_available":true,"data":null}},"time_used":6391,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":11,"receive":1,"ssl":6377},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.130","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kleankelp.duckdns.org/221a7c037a005405035c527f575e510f64570404","date":"2026-06-09T13:48:42.580Z","timestamp":1781012922580,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/images/joinsteam/new_login_bg_strong_mask.jpg HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/jpeg\r\nContent-Length: 124529\r\nLast-Modified: Fri, 22 Nov 2024 18:31:38 GMT\r\nETag: \"6740ce0a-1e671\"\r\nAccept-Ranges: bytes\r\nDate: Tue, 09 Jun 2026 13:48:42 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124529,"size_decoded":124766,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3","md5":"48b805d8fa321668db4ce8dfd96db5b9","sha1":"e0ded2606559c8100ef544c1f1c704e878a29b92","sha256":"9a75f8cc40bbe9c9499e7b2d3bab98a447685a361489357a111479517005c954","sha512":"95da761ca3f99f7808a0148cfa2416b8c03d90859bff65b396061ada5a4394fb50e2a4b82986caab07bc1fcd73980fe9b08e804b3ce897762a17d2e44935076d","ssdeep":"3072:R24zCBv0a8Oz/fxlnI0Nc49J7g3HOHQZP:R2GCea8OzHfjO85ygs","tlshash":"0bc3125bef39536bcc044b3328b74b000f79886a6c063d2a477155293a1a3b47df6a9f","first_seen":"2023-05-06T11:11:12Z","last_seen":"2026-08-12T05:05:57.514672Z","times_seen":916,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":5,"connect":2,"send":0,"wait":3,"receive":3,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}