{"report_id":"6e4207ff-c705-4727-97c3-762d10aa097a","version":0,"status":"done","tags":["microsoft","phishing"],"date":"2026-08-02T12:57:54Z","url":{"schema":"http","addr":"klrkbi.com/w/d/s/89952","fqdn":"klrkbi.com","domain":"klrkbi.com","tld":"com"},"ip":{"addr":"88.80.17.227","port":0,"asn":33837,"as":"Fredrik Holmqvist","country":"Sweden","country_code":"SE"},"final":{"url":{"schema":"http","addr":"klrkbi.com/w/CYH96S5T64bWmdzDTH~8gOKVUDHT8hrZ6H7PHc*2SY3-rgxXb9E0acvNH3%5EtqAHtz6dQ3g0W91qmpdfsw8S~aAn0I~o=DYr*XDsD","fqdn":"klrkbi.com","domain":"klrkbi.com","tld":"com"},"title":"Sign in to your account","dom":{"size":34559,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (15755)","md5":"8ce2b4f685d966b071ecf61c11a46d96","sha1":"7f3a4f46a1e58f77b559d985ed482fc24dd6075d","sha256":"3e50d315014f7184d3e6dcc834f707468dea5fea1e9920aa05c371fbcb0ac0e5","sha512":"b5d3b30f0240a66821372ca76592f0945d8608ee68167e2e335c73617df63677e712d9600ecf4b77a9fb52ec4e4075832a7ceb19a64bfac9cd1dc282f9096d27","ssdeep":"768:hPAKIMlffhmvXV+9/+/bQn1GtFjtgOeUVQBVxI:hsMdZiXVrwtI","tlshash":"21f22aa03a50c12d2a17cba7d77b7bcee336434af8410748a48ee55416c9e67d1debb0","dom_hash":"domhash4742896a025fce37ef9eac7ea026177f","first_seen":"2026-08-02T12:57:58.911227Z","last_seen":"2026-08-02T12:57:58.911227Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"klrkbi.com/w/d/s/89952","fqdn":"klrkbi.com","domain":"klrkbi.com","tld":"com"},"ip":{"addr":"88.80.17.227","port":0,"asn":33837,"as":"Fredrik Holmqvist","country":"Sweden","country_code":"SE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-06T12:57:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"klrkbi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"summary":[{"fqdn":"aadcdn.msftauth.net","ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2018-10-25","domain_rank":5262,"first_seen":"2018-11-19T10:50:32Z","last_seen":"2026-07-27T14:44:31.890464Z","alert_count":0,"request_count":1,"received_data":17833,"sent_data":587,"comment":"","tags":null,"fingerprints":null},{"fqdn":"js.hcaptcha.com","ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":44433,"first_seen":"2021-07-30T11:51:37Z","last_seen":"2026-07-31T07:29:30.056986Z","alert_count":0,"request_count":1,"received_data":328736,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-07-26T22:43:30.214545Z","alert_count":0,"request_count":1,"received_data":90667,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.hcaptcha.com","ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":28177,"first_seen":"2021-07-31T14:27:15Z","last_seen":"2026-07-30T04:45:28.083131Z","alert_count":0,"request_count":1,"received_data":1418,"sent_data":902,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"klrkbi.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-10-29","domain_rank":0,"first_seen":"2025-12-17T14:42:58.828071Z","last_seen":"2025-12-17T14:42:58.828071Z","alert_count":6,"request_count":3,"received_data":31609,"sent_data":1303,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"hCaptcha:1","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"00a33d08bbd3.w.hcaptcha.com","ip":{"addr":"104.18.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":0,"first_seen":"2026-08-02T12:57:56.85806Z","last_seen":"2026-08-02T12:57:56.85806Z","alert_count":0,"request_count":1,"received_data":3314,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"7be87bb7df2d.w.hcaptcha.com","ip":{"addr":"104.18.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":0,"first_seen":"2026-08-02T12:57:56.863925Z","last_seen":"2026-08-02T12:57:56.863925Z","alert_count":0,"request_count":1,"received_data":3314,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"newassets.hcaptcha.com","ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":29228,"first_seen":"2021-03-22T10:55:22Z","last_seen":"2026-07-29T20:11:55.791733Z","alert_count":0,"request_count":3,"received_data":2170660,"sent_data":2507,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/ba51eebd89b14a66403a111ab152e1fb2a5041dd/static/hcaptcha.html#frame=challenge\u0026id=0isvtmho7748\u0026host=klrkbi.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=408c622e-4fb8-4110-951e-2a2804a43cb2\u0026theme=dark\u0026size=normal\u0026origin=http%3A%2F%2Fklrkbi.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"57caa2466f228b440d0b002cd5571a7f","sha1":"3ec5e7ab035cff9b9980f5d76725292ed8f2c970","sha256":"2a3a206da015d06d08afe53b6e4c07ef984568def245e68a8a6545425c1242a9","sha512":"4d12fe5650450d9184404db716fdbc00f6f015d7c154e6c389c526e8ce1fb92fcacc1bde969a53bbc528700d2d2b7e680ffcd473c54a185ac3fc7a51958252cd","ssdeep":"","tlshash":"4e9004d570c75400cfd3135c10571cc5547c4c7035444fd44070d5511f55030511545d","size":40,"data":"","first_seen":"2023-04-14T01:04:24Z","last_seen":"2026-08-05T09:06:33.754226Z","times_seen":65027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/ba51eebd89b14a66403a111ab152e1fb2a5041dd/static/hcaptcha.html#frame=challenge\u0026id=0isvtmho7748\u0026host=klrkbi.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=408c622e-4fb8-4110-951e-2a2804a43cb2\u0026theme=dark\u0026size=normal\u0026origin=http%3A%2F%2Fklrkbi.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-05T09:04:48.496679Z","times_seen":374950,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/ba51eebd89b14a66403a111ab152e1fb2a5041dd/static/hcaptcha.html#frame=checkbox\u0026id=0isvtmho7748\u0026host=klrkbi.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=408c622e-4fb8-4110-951e-2a2804a43cb2\u0026theme=dark\u0026size=normal\u0026origin=http%3A%2F%2Fklrkbi.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ab089808b00e8147fe0732c406d00cb","sha1":"5e7c1cf6ddf08b5e67ab0539364c940cee74bd69","sha256":"06eddef2408ff0828b980deba787c4883d46d9759e37a09f50f888752f9ac3a3","sha512":"b40186a3b4aa91b369f21490174415bf0721ed113e67781292861dbbbe08a7de8cf278e5ec129290dc1a90e6ad15ade484842d8a546e149f644880b314eb9547","ssdeep":"6144:awUInLcadaXORnWToaZx1QSfNP+B6iFjaoUu6kWvlq9cqoIGMVU2:iILTaXOYK6i1Uda","tlshash":"32c409792311703e96d527e090de210fa3b6e87b34656068f735dcddac6c8ca113abb9","size":596077,"data":"","first_seen":"2026-07-30T16:35:49.004244Z","last_seen":"2026-08-05T08:22:43.759608Z","times_seen":280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.hcaptcha.com/1/api.js?onload=onloadHcaptchaCallback\u0026render=explicit","fqdn":"js.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b11f86ededdceb27239012dbea678541","sha1":"fb9a92b6bf4483a910e3ba6907372ea545580d98","sha256":"1ff9d955d61046086ea9d084a344f3e4652dfa995a86d1644525fb9c6176d736","sha512":"d1b730445f15210c27529e24b98ce3743d80415d003649c9bff82f960eaaa4f642c491b00462f9812e4c7bafc14481c87aed1a47e5bae51c321da62c0533e78b","ssdeep":"6144:EwyRelqiA2fu4qpahGDwwB4mme523ZDgBZZ:auuMZq","tlshash":"c964647a1312a53fdae42be090d9210fa3f6e87734783064f736acddac1d9c641356a6","size":327870,"data":"","first_seen":"2026-07-30T16:35:48.996556Z","last_seen":"2026-08-05T08:40:17.483589Z","times_seen":343,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/ba51eebd89b14a66403a111ab152e1fb2a5041dd/static/hcaptcha.html#frame=challenge\u0026id=0isvtmho7748\u0026host=klrkbi.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=408c622e-4fb8-4110-951e-2a2804a43cb2\u0026theme=dark\u0026size=normal\u0026origin=http%3A%2F%2Fklrkbi.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7df22b1a05fbf93eea23a0f998a5ce5b","sha1":"23687e27df2f3d2753a9206cd4a77c1e04600ffd","sha256":"3165b72c1b09a822a4e395b85adcda0748797e0c56c5ff4433b6ebf3734cbfee","sha512":"6e397541208e52483e633463c6a4412ba8254b2e75a66ae2cb204f3cdfdd96bb0d962d3f967223a470eb577b649826dfe9353c136deb54e2f7b432b8595aa5c6","ssdeep":"","tlshash":"c2a024d454d7d01003fd011410157441f4fcc4731344cd704030c4330f7403103444cd","size":74,"data":"","first_seen":"2025-01-09T03:11:45.291974Z","last_seen":"2026-08-05T08:22:43.755635Z","times_seen":60383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/c/fbac71bc3a1ef5485e3c700cd6212779167c75d3cf707d6e41ad656587fbbb45/hsw.js","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c4c85677906b6f6d7591c4bb27dbc7c","sha1":"642262fd57e0adffdae178b2c3fa237e181b3afa","sha256":"cc57d5fc618f00adb7dd1d7870ee909f2cd78ce470f7bf0dfe5754ddfef8da2f","sha512":"a088d7708047c7861dccae8d62c6ba30951d2814219dbfa5fd401d81bf88b7593ea12b9d3e15c0338782479db1bfe7dcf306929b223a18ba9ea9b7485a1926e8","ssdeep":"24576:RlYIRtitIfLWGXgJ4ylWtq8wtBO/JDYL8F1CH51jni:2m34uas","tlshash":"f6254abf83115d6eefb259fd551b2903bc8a84db4215dea09f0ec8b3a8940af185d1dc","size":973188,"data":"","first_seen":"2026-06-05T23:05:33.798087Z","last_seen":"2026-08-02T12:58:04.989035Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89664,"data":"","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-08-05T08:52:36.058834Z","times_seen":34112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/ba51eebd89b14a66403a111ab152e1fb2a5041dd/static/hcaptcha.html#frame=challenge\u0026id=0isvtmho7748\u0026host=klrkbi.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=408c622e-4fb8-4110-951e-2a2804a43cb2\u0026theme=dark\u0026size=normal\u0026origin=http%3A%2F%2Fklrkbi.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"43d643e449b4ea13394fe737b1d6a447","sha1":"1c03d56d955fd266d7659379e63d5711bd5382db","sha256":"4817661f6ac7d2e1691bc3aeb9966e66012891ccda569ff872dc0932010c540d","sha512":"5e7353c42119793fd3ff6b548f7604c3385c91c8243b8f66e926f8cdb0121ef2f39f63584047df346e3970d46de6355045676a16c01625b9c4581cba99337ad8","ssdeep":"","tlshash":"2390029a32d2940447a755580096188890284c6928455d414490dd91d8550225b1557e","size":48,"data":"","first_seen":"2023-04-11T22:45:29Z","last_seen":"2026-08-05T09:06:33.775549Z","times_seen":61998,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"klrkbi.com/w/d/s/89952/","fqdn":"klrkbi.com","domain":"klrkbi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"922d091cdf777a07815d090a73e34f5e","sha1":"4ecd87b773c5e305e863a4ca3e741660751c8020","sha256":"b45be5cad04051901c90ca67c54679c500bf973d96f8e51147fce3773251c03b","sha512":"9762f5e88bab5744bb265d02d0c04a1aead9c3807510017f6a5a17632aeb610fa31c7b7bb59db0b34a023ef19611f56a9a39ac8dcfac378e3edec5ff2a54779a","ssdeep":"192:amuEO/HeADUSenQ/fqs+AeSY6sOfNU3pblzvNjCYgP062m+VeZ:aN/+/bQnj20cbtFjCYg6VeZ","tlshash":"686244583e48d54d2b1b8e67533b75cdd2221b4e68844b87d802fc519cd4b27e2deb38","size":14525,"data":"","first_seen":"2026-08-02T12:57:58.926155Z","last_seen":"2026-08-02T12:58:05.000962Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/ba51eebd89b14a66403a111ab152e1fb2a5041dd/static/hcaptcha.html#frame=challenge\u0026id=0isvtmho7748\u0026host=klrkbi.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=408c622e-4fb8-4110-951e-2a2804a43cb2\u0026theme=dark\u0026size=normal\u0026origin=http%3A%2F%2Fklrkbi.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ab089808b00e8147fe0732c406d00cb","sha1":"5e7c1cf6ddf08b5e67ab0539364c940cee74bd69","sha256":"06eddef2408ff0828b980deba787c4883d46d9759e37a09f50f888752f9ac3a3","sha512":"b40186a3b4aa91b369f21490174415bf0721ed113e67781292861dbbbe08a7de8cf278e5ec129290dc1a90e6ad15ade484842d8a546e149f644880b314eb9547","ssdeep":"6144:awUInLcadaXORnWToaZx1QSfNP+B6iFjaoUu6kWvlq9cqoIGMVU2:iILTaXOYK6i1Uda","tlshash":"32c409792311703e96d527e090de210fa3b6e87b34656068f735dcddac6c8ca113abb9","size":596077,"data":"","first_seen":"2026-07-30T16:35:49.004244Z","last_seen":"2026-08-05T08:22:43.759608Z","times_seen":280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"js.hcaptcha.com/1/api.js?onload=onloadHcaptchaCallback\u0026render=explicit","fqdn":"js.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://klrkbi.com/w/d/s/89952/","date":"2026-08-02T12:57:26.423Z","timestamp":1785675446423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 23:06:23 GMT","end":"Thu, 17 Sep 2026 00:06:07 GMT"},"fingerprint":{"sha1":"15:37:06:F3:1E:27:70:C4:DE:28:0F:C3:2E:84:8F:88:07:F5:54:29","sha256":"00:23:56:31:31:AF:1E:2D:04:17:AB:10:CB:0A:1A:79:60:A1:73:B8:6F:B7:5E:58:AD:BD:06:60:41:42:6D:64"}}},"request":{"raw":"GET /1/api.js?onload=onloadHcaptchaCallback\u0026render=explicit HTTP/1.1\r\nHost: js.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://klrkbi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 02 Aug 2026 12:57:26 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a24d3f944a8b712d-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=8zLZDYTN8vqbfBNqrRkEFTrcfw_yqrakIqscqxZ7MOs-1785675446.4466438-1.0.1.1-NIDHrLo_gI2javBVwPaKV7KsoErwGrH.sfLJKRUuPcWScQrBYuUp3MJ5X60E7pWXmsKBsUeDeS9sIOR72JNqysHE1FgfYuwAshgO0FslHfshmcEl_2xijDbpgCXPNHIQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Sun, 02 Aug 2026 13:27:26 GMT\r\ncache-control: max-age=300\r\netag: W/\"a0f8cf73f68f26545079c18f7598340e\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":327870,"size_decoded":95828,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41132)","md5":"b11f86ededdceb27239012dbea678541","sha1":"fb9a92b6bf4483a910e3ba6907372ea545580d98","sha256":"1ff9d955d61046086ea9d084a344f3e4652dfa995a86d1644525fb9c6176d736","sha512":"d1b730445f15210c27529e24b98ce3743d80415d003649c9bff82f960eaaa4f642c491b00462f9812e4c7bafc14481c87aed1a47e5bae51c321da62c0533e78b","ssdeep":"6144:EwyRelqiA2fu4qpahGDwwB4mme523ZDgBZZ:auuMZq","tlshash":"c964647a1312a53fdae42be090d9210fa3f6e87734783064f736acddac1d9c641356a6","first_seen":"2026-07-30T16:35:48.996556Z","last_seen":"2026-08-05T08:40:17.483589Z","times_seen":343,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":3,"connect":18,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://klrkbi.com/w/d/s/89952/","date":"2026-08-02T12:57:26.426Z","timestamp":1785675446426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://klrkbi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 02 Aug 2026 12:57:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27990\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 26 Aug 2022 18:34:13 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jHBztwpgk7SD4lNNoDIQrZmTr43nwZ9%2BAadBCN7rtdC0Q9xdSVxVoETAvmpSWoNZiGSd4V2YDFfla00IvtUE%2BmctgjujsGDmB5Pg7SGAUhWONJj2DJXzkAJyqLkF2Ryu5f0Ee9Eo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a24d3f944d5232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89664,"size_decoded":28993,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-08-05T08:52:36.058834Z","times_seen":34112,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":4,"connect":18,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"7be87bb7df2d.w.hcaptcha.com/logo.png","fqdn":"7be87bb7df2d.w.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.18.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://klrkbi.com/w/d/s/89952/","date":"2026-08-02T12:57:26.705Z","timestamp":1785675446705,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.hcaptcha.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 22:12:08 GMT","end":"Fri, 18 Sep 2026 22:12:07 GMT"},"fingerprint":{"sha1":"A3:83:3A:BE:7F:86:83:A3:24:4C:18:2D:88:18:75:B2:29:38:CA:E2","sha256":"B2:11:2F:62:A2:20:A9:9D:B5:32:8A:D8:8F:A7:A5:6A:7E:39:3D:15:DA:CD:07:AB:9D:70:E3:C3:68:1B:12:4E"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: 7be87bb7df2d.w.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://klrkbi.com/\r\nOrigin: http://klrkbi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 02 Aug 2026 12:57:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 2593\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: 0\r\nVary: *\r\nPragma: no-cache\r\nTiming-Allow-Origin: *\r\ncf-bgj: imgq:15\r\ncf-polished: qual=15, origSize=85005\r\nset-cookie: __cf_bm=gCV5eQ.Sz0VX50YKfq73XkHoYDndgr_FByvwH5wcbw4-1785675446.7361765-1.0.1.1-MZAqhe4D6A096t4bo8qq.rqi85LhLbgWtqS6wtbrufP6vf_2sglFzs10_qeBiAklS.dKaqkwFSAOhhxHUTaOTJQGihUKzLw38YUxxl.YdVy4nORC3hX3.WmdsDs7HgrB; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Sun, 02 Aug 2026 13:27:26 GMT\r\nServer: cloudflare\r\nCF-RAY: a24d3f961a8356c6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2593,"size_decoded":3314,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"b70978538c50739a6446d45a11ebe56c","sha1":"5017a163fbadef695e78f4f34ec9d2db76922bef","sha256":"edc86524f035726b7967529c7325db293075d6eca1066b3e1733054c7c50543d","sha512":"62f65c163684bb8e6e14ed2e72f90dc0c8631aa9efcf7a71d85e42ee57d79b43a54bf664ffa17a54aae46b39b2f92d19f23c7bfc557c83de449b8dc6ed2512d8","ssdeep":"","tlshash":"de5130460b09428ef01e0f7252714f1af372d725372ca39bb818b472fae63d7682b245","first_seen":"2026-08-02T12:57:58.914937Z","last_seen":"2026-08-02T12:57:58.914937Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":9,"connect":1,"send":0,"wait":10,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hcaptcha.com/checksiteconfig?v=ba51eebd89b14a66403a111ab152e1fb2a5041dd\u0026host=klrkbi.com\u0026sitekey=408c622e-4fb8-4110-951e-2a2804a43cb2\u0026sc=1\u0026swa=1\u0026spst=0","fqdn":"api.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://newassets.hcaptcha.com/captcha/v1/ba51eebd89b14a66403a111ab152e1fb2a5041dd/static/hcaptcha.html#frame=challenge\u0026id=0isvtmho7748\u0026host=klrkbi.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=408c622e-4fb8-4110-951e-2a2804a43cb2\u0026theme=dark\u0026size=normal\u0026origin=http%3A%2F%2Fklrkbi.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-08-02T12:57:27.128Z","timestamp":1785675447128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 23:06:23 GMT","end":"Thu, 17 Sep 2026 00:06:07 GMT"},"fingerprint":{"sha1":"15:37:06:F3:1E:27:70:C4:DE:28:0F:C3:2E:84:8F:88:07:F5:54:29","sha256":"00:23:56:31:31:AF:1E:2D:04:17:AB:10:CB:0A:1A:79:60:A1:73:B8:6F:B7:5E:58:AD:BD:06:60:41:42:6D:64"}}},"request":{"raw":"POST /checksiteconfig?v=ba51eebd89b14a66403a111ab152e1fb2a5041dd\u0026host=klrkbi.com\u0026sitekey=408c622e-4fb8-4110-951e-2a2804a43cb2\u0026sc=1\u0026swa=1\u0026spst=0 HTTP/1.1\r\nHost: api.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://newassets.hcaptcha.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newassets.hcaptcha.com/\r\nCookie: __cf_bm=8zLZDYTN8vqbfBNqrRkEFTrcfw_yqrakIqscqxZ7MOs-1785675446.4466438-1.0.1.1-NIDHrLo_gI2javBVwPaKV7KsoErwGrH.sfLJKRUuPcWScQrBYuUp3MJ5X60E7pWXmsKBsUeDeS9sIOR72JNqysHE1FgfYuwAshgO0FslHfshmcEl_2xijDbpgCXPNHIQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 02 Aug 2026 12:57:27 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://newassets.hcaptcha.com\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a24d3f988e29712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":808,"size_decoded":1240,"mime_type":"application/json","magic":"JSON text data","md5":"60bf487fd9e6c28ed8276a16fbe72665","sha1":"8d2df50acef2b7cf69378a39bfd2e62ab073f0b0","sha256":"1b471cb9cd5235ec6766ce612e34118c9f10d138f58a406768c49bc1ae9d01a9","sha512":"9a3d2ce4edad2f9af8ffc523784a9edff5597f9654726a6019df86f7179ea603d7af8a87843c71ae3535bb085eefe5ee8b4e949e191d9b0b391a1c4d8a81fa78","ssdeep":"","tlshash":"4701c5d422ac38cdd2424d6e0b8c273d2b06636e87833ebd8446f9325b2e09c680351f","first_seen":"2026-08-02T12:57:58.916059Z","last_seen":"2026-08-02T12:57:58.916059Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":3,"dns":3,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/c/fbac71bc3a1ef5485e3c700cd6212779167c75d3cf707d6e41ad656587fbbb45/hsw.js","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://newassets.hcaptcha.com/captcha/v1/ba51eebd89b14a66403a111ab152e1fb2a5041dd/static/hcaptcha.html#frame=challenge\u0026id=0isvtmho7748\u0026host=klrkbi.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=408c622e-4fb8-4110-951e-2a2804a43cb2\u0026theme=dark\u0026size=normal\u0026origin=http%3A%2F%2Fklrkbi.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-08-02T12:57:27.168Z","timestamp":1785675447168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 23:06:23 GMT","end":"Thu, 17 Sep 2026 00:06:07 GMT"},"fingerprint":{"sha1":"15:37:06:F3:1E:27:70:C4:DE:28:0F:C3:2E:84:8F:88:07:F5:54:29","sha256":"00:23:56:31:31:AF:1E:2D:04:17:AB:10:CB:0A:1A:79:60:A1:73:B8:6F:B7:5E:58:AD:BD:06:60:41:42:6D:64"}}},"request":{"raw":"GET /c/fbac71bc3a1ef5485e3c700cd6212779167c75d3cf707d6e41ad656587fbbb45/hsw.js HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newassets.hcaptcha.com/captcha/v1/ba51eebd89b14a66403a111ab152e1fb2a5041dd/static/hcaptcha.html\r\nCookie: __cf_bm=8zLZDYTN8vqbfBNqrRkEFTrcfw_yqrakIqscqxZ7MOs-1785675446.4466438-1.0.1.1-NIDHrLo_gI2javBVwPaKV7KsoErwGrH.sfLJKRUuPcWScQrBYuUp3MJ5X60E7pWXmsKBsUeDeS9sIOR72JNqysHE1FgfYuwAshgO0FslHfshmcEl_2xijDbpgCXPNHIQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 02 Aug 2026 12:57:27 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: max-age=3024000\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\netag: W/\"7c4c85677906b6f6d7591c4bb27dbc7c\"\r\nvary: Accept-Encoding, Origin\r\ncf-cache-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: a24d3f98ce61712d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":973188,"size_decoded":407359,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65395)","md5":"7c4c85677906b6f6d7591c4bb27dbc7c","sha1":"642262fd57e0adffdae178b2c3fa237e181b3afa","sha256":"cc57d5fc618f00adb7dd1d7870ee909f2cd78ce470f7bf0dfe5754ddfef8da2f","sha512":"a088d7708047c7861dccae8d62c6ba30951d2814219dbfa5fd401d81bf88b7593ea12b9d3e15c0338782479db1bfe7dcf306929b223a18ba9ea9b7485a1926e8","ssdeep":"24576:RlYIRtitIfLWGXgJ4ylWtq8wtBO/JDYL8F1CH51jni:2m34uas","tlshash":"f6254abf83115d6eefb259fd551b2903bc8a84db4215dea09f0ec8b3a8940af185d1dc","first_seen":"2026-06-05T23:05:33.798087Z","last_seen":"2026-08-02T12:58:04.989035Z","times_seen":42,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"klrkbi.com/w/d/s/89952","fqdn":"klrkbi.com","domain":"klrkbi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-02T12:57:25.671Z","timestamp":1785675445671,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /w/d/s/89952 HTTP/1.1\r\nHost: klrkbi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T08:58:02.3248Z","times_seen":17721835,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"klrkbi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico","fqdn":"aadcdn.msftauth.net","domain":"msftauth.net","tld":"net"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://klrkbi.com/w/d/s/89952/","date":"2026-08-02T12:57:26.636Z","timestamp":1785675446636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idnaakamaicdn.msftauth.net","organization":""},"issuer":{"commonName":"Microsoft TLS G2 ECC CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 10 Feb 2026 18:29:15 GMT","end":"Fri, 05 Feb 2027 18:29:15 GMT"},"fingerprint":{"sha1":"11:6E:B1:51:6A:18:5E:8A:A2:FA:F0:B4:38:78:7E:52:0D:55:06:B5","sha256":"26:06:65:FC:25:8B:05:0E:C1:76:C6:E2:3C:FF:76:A2:A3:52:4E:8D:FC:2D:48:D0:74:7E:6E:33:DA:49:4A:3D"}}},"request":{"raw":"GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1\r\nHost: aadcdn.msftauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://klrkbi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/x-icon\r\ncontent-md5: EuPayFgGHQiAI7K9SOL6lg==\r\nlast-modified: Thu, 05 Dec 2024 00:02:51 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DD14C0292CD581\"\r\nx-ms-request-id: 1e97ca3e-001e-004d-46a7-669b22000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: Accept-Ranges,Cache-Control,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-length: 540\r\ncache-control: public, max-age=21390121\r\ndate: Sun, 02 Aug 2026 12:57:26 GMT\r\nvary: Accept-Encoding\r\nakamai-grn: 0.4d772117.1785675446.fdd2122\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":17174,"size_decoded":1199,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors","md5":"12e3dac858061d088023b2bd48e2fa96","sha1":"e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5","sha256":"90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21","sha512":"c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01","ssdeep":"24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO","tlshash":"b772e35b1f5f4981ec4b0db80b125e80c5e49c973854dffbdb76b62888b0364ab845eb","first_seen":"2023-04-05T03:19:57Z","last_seen":"2026-08-05T09:16:58.509962Z","times_seen":170760,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":16,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/ba51eebd89b14a66403a111ab152e1fb2a5041dd/static/hcaptcha.html#frame=challenge\u0026id=0isvtmho7748\u0026host=klrkbi.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=408c622e-4fb8-4110-951e-2a2804a43cb2\u0026theme=dark\u0026size=normal\u0026origin=http%3A%2F%2Fklrkbi.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://klrkbi.com/w/d/s/89952/","date":"2026-08-02T12:57:26.718Z","timestamp":1785675446718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 23:06:23 GMT","end":"Thu, 17 Sep 2026 00:06:07 GMT"},"fingerprint":{"sha1":"15:37:06:F3:1E:27:70:C4:DE:28:0F:C3:2E:84:8F:88:07:F5:54:29","sha256":"00:23:56:31:31:AF:1E:2D:04:17:AB:10:CB:0A:1A:79:60:A1:73:B8:6F:B7:5E:58:AD:BD:06:60:41:42:6D:64"}}},"request":{"raw":"GET /captcha/v1/ba51eebd89b14a66403a111ab152e1fb2a5041dd/static/hcaptcha.html HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://klrkbi.com/\r\nCookie: __cf_bm=8zLZDYTN8vqbfBNqrRkEFTrcfw_yqrakIqscqxZ7MOs-1785675446.4466438-1.0.1.1-NIDHrLo_gI2javBVwPaKV7KsoErwGrH.sfLJKRUuPcWScQrBYuUp3MJ5X60E7pWXmsKBsUeDeS9sIOR72JNqysHE1FgfYuwAshgO0FslHfshmcEl_2xijDbpgCXPNHIQ\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 02 Aug 2026 12:57:26 GMT\r\ncontent-type: text/html\r\ncf-ray: a24d3f95fbbf712d-OSL\r\ncf-cache-status: HIT\r\ncache-control: max-age=3600\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\ncontent-security-policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4\u0026sentry_environment=prod\u0026sentry_release=csp1;\r\ncross-origin-embedder-policy: require-corp\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":597829,"size_decoded":183511,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39407)","md5":"004a6a3b93c21e146ef69c4a4fd35528","sha1":"ba0cd61f1d665fda8c1d3784567f2627801bbf41","sha256":"a29b8d67c0ff40ee06946966b2101ed9645fb9f4ae22bc9639c3c8099f72d878","sha512":"ce47ffc5171b11540740de9d870766e25d10c781e0b1fb0704906b1bfd09b045b585ac294cc48e6efeba9a44e25334759f47ecb13910e7d8682bfb53d1d8caa0","ssdeep":"6144:uwUInLcadaXORnWToaZx1QSfNP+B6iFjaoUu6kWvlq9cqoIGMVUZ:eILTaXOYK6i1Udt","tlshash":"bad409792311703e96d527e090de210fa3b6e87b34656068f735dcddac6c8ca113abb9","first_seen":"2026-07-30T16:35:48.993202Z","last_seen":"2026-08-05T08:22:43.737193Z","times_seen":279,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":1,"dns":2,"connect":0,"send":0,"wait":17,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/ba51eebd89b14a66403a111ab152e1fb2a5041dd/static/hcaptcha.html#frame=checkbox\u0026id=0isvtmho7748\u0026host=klrkbi.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=408c622e-4fb8-4110-951e-2a2804a43cb2\u0026theme=dark\u0026size=normal\u0026origin=http%3A%2F%2Fklrkbi.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://klrkbi.com/w/d/s/89952/","date":"2026-08-02T12:57:26.720Z","timestamp":1785675446720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 23:06:23 GMT","end":"Thu, 17 Sep 2026 00:06:07 GMT"},"fingerprint":{"sha1":"15:37:06:F3:1E:27:70:C4:DE:28:0F:C3:2E:84:8F:88:07:F5:54:29","sha256":"00:23:56:31:31:AF:1E:2D:04:17:AB:10:CB:0A:1A:79:60:A1:73:B8:6F:B7:5E:58:AD:BD:06:60:41:42:6D:64"}}},"request":{"raw":"GET /captcha/v1/ba51eebd89b14a66403a111ab152e1fb2a5041dd/static/hcaptcha.html HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://klrkbi.com/\r\nCookie: __cf_bm=8zLZDYTN8vqbfBNqrRkEFTrcfw_yqrakIqscqxZ7MOs-1785675446.4466438-1.0.1.1-NIDHrLo_gI2javBVwPaKV7KsoErwGrH.sfLJKRUuPcWScQrBYuUp3MJ5X60E7pWXmsKBsUeDeS9sIOR72JNqysHE1FgfYuwAshgO0FslHfshmcEl_2xijDbpgCXPNHIQ\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 02 Aug 2026 12:57:26 GMT\r\ncontent-type: text/html\r\ncf-ray: a24d3f95fbc2712d-OSL\r\ncf-cache-status: HIT\r\ncache-control: max-age=3600\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\ncontent-security-policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4\u0026sentry_environment=prod\u0026sentry_release=csp1;\r\ncross-origin-embedder-policy: require-corp\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":597829,"size_decoded":183622,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39407)","md5":"004a6a3b93c21e146ef69c4a4fd35528","sha1":"ba0cd61f1d665fda8c1d3784567f2627801bbf41","sha256":"a29b8d67c0ff40ee06946966b2101ed9645fb9f4ae22bc9639c3c8099f72d878","sha512":"ce47ffc5171b11540740de9d870766e25d10c781e0b1fb0704906b1bfd09b045b585ac294cc48e6efeba9a44e25334759f47ecb13910e7d8682bfb53d1d8caa0","ssdeep":"6144:uwUInLcadaXORnWToaZx1QSfNP+B6iFjaoUu6kWvlq9cqoIGMVUZ:eILTaXOYK6i1Udt","tlshash":"bad409792311703e96d527e090de210fa3b6e87b34656068f735dcddac6c8ca113abb9","first_seen":"2026-07-30T16:35:48.993202Z","last_seen":"2026-08-05T08:22:43.737193Z","times_seen":279,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":18,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"klrkbi.com/w/d/s/89952","fqdn":"klrkbi.com","domain":"klrkbi.com","tld":"com"},"ip":{"addr":"88.80.17.227","port":80,"asn":33837,"as":"Fredrik Holmqvist","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-02T12:57:25.798Z","timestamp":1785675445798,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /w/d/s/89952 HTTP/1.1\r\nHost: klrkbi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 02 Aug 2026 12:57:25 GMT\r\nServer: Apache\r\nLocation: http://klrkbi.com/w/d/s/89952/\r\nContent-Length: 298\r\nConnection: close\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T08:58:02.3248Z","times_seen":17721835,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":3,"connect":24,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"klrkbi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"00a33d08bbd3.w.hcaptcha.com/logo.png","fqdn":"00a33d08bbd3.w.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.18.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://newassets.hcaptcha.com/captcha/v1/ba51eebd89b14a66403a111ab152e1fb2a5041dd/static/hcaptcha.html#frame=challenge\u0026id=0isvtmho7748\u0026host=klrkbi.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=408c622e-4fb8-4110-951e-2a2804a43cb2\u0026theme=dark\u0026size=normal\u0026origin=http%3A%2F%2Fklrkbi.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-08-02T12:57:26.933Z","timestamp":1785675446933,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.hcaptcha.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 22:12:08 GMT","end":"Fri, 18 Sep 2026 22:12:07 GMT"},"fingerprint":{"sha1":"A3:83:3A:BE:7F:86:83:A3:24:4C:18:2D:88:18:75:B2:29:38:CA:E2","sha256":"B2:11:2F:62:A2:20:A9:9D:B5:32:8A:D8:8F:A7:A5:6A:7E:39:3D:15:DA:CD:07:AB:9D:70:E3:C3:68:1B:12:4E"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: 00a33d08bbd3.w.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://newassets.hcaptcha.com/\r\nOrigin: https://newassets.hcaptcha.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 02 Aug 2026 12:57:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 2593\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: 0\r\nVary: *\r\nPragma: no-cache\r\nTiming-Allow-Origin: *\r\ncf-bgj: imgq:15\r\ncf-polished: qual=15, origSize=85005\r\nset-cookie: __cf_bm=4YdRq57Em0wCqwYCCwVxSTWNC5co1TDpxmPcIwixpEg-1785675446.9510345-1.0.1.1-bLQ0HKCm0.jnnl2rSO_UrWYmDJg6klf91OAXyZbgdQ5cetiBuT9IEW1eZcN3uad6kJM4Ct20am0aDhb2WjZtcR.dRYpZiz841.4wcJfYkXQ7kaoL6bEyRVn1ZxA_6N9f; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Sun, 02 Aug 2026 13:27:26 GMT\r\nServer: cloudflare\r\nCF-RAY: a24d3f97789f569b-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2593,"size_decoded":3314,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"e97d76f922b9e8f3e070800801bdb97f","sha1":"772beffe730ca93e8a62329973a7eff0e671f656","sha256":"6a21d44cca3891d4ab0640278ff4a38b272c93aa7918ddf691970ab6300cd219","sha512":"036726af46a9c1a0342db6baa4ed99f978f02d27bc48833bb186fa9baae72a023bbc2fa0a189ce691f92af487097a31fcfc065d349b0018b8a0485fa25b987d3","ssdeep":"","tlshash":"a151764baf188186d56e0e3015f24f15b266ef75372ea38b68383624ffb23e758052d5","first_seen":"2026-08-02T12:57:58.92025Z","last_seen":"2026-08-02T12:57:58.92025Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":10,"connect":1,"send":0,"wait":11,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"klrkbi.com/w/d/s/89952/","fqdn":"klrkbi.com","domain":"klrkbi.com","tld":"com"},"ip":{"addr":"88.80.17.227","port":80,"asn":33837,"as":"Fredrik Holmqvist","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-02T12:57:25.932Z","timestamp":1785675445932,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /w/d/s/89952/ HTTP/1.1\r\nHost: klrkbi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 02 Aug 2026 12:57:25 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: keep-alive, close\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 9871\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"hCaptcha:1","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":31170,"size_decoded":10096,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (14545)","md5":"fa62fa8e2a1ab0e0770412bb437f9a78","sha1":"5d4321afb934221a8f591cddb2fb493ae46e4855","sha256":"e78339f50b30fcbcdf7cf2e8e4034418102e113844d8476c0f5e6dd5b5466916","sha512":"4b0080d53b084fbb5395043967226926b21c729b66c316aa9e9b3219e8a528f4e1d5ebfa036bec3feca051083385bc908378be8c5c366ac729ba24928386b4c9","ssdeep":"768:8PAKIOlffhmvwd8T/+/bQn1GtFjtgOezkP+Qu:8sOdZiwdXrC","tlshash":"6ee219602a80c12d2b17cba7977bb3cee23a434ea8410749b54df55417c5e27e2debb4","first_seen":"2026-08-02T12:57:58.922104Z","last_seen":"2026-08-02T12:57:58.922104Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":24,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"klrkbi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}}]}