{"report_id":"70b42aa4-7bd7-4e3d-93f4-e73fb7bdfff4","version":0,"status":"done","tags":[],"date":"2026-09-22T20:51:08Z","url":{"schema":"http","addr":"kikishairshoplook.com/feder.php","fqdn":"kikishairshoplook.com","domain":"kikishairshoplook.com","tld":"com"},"ip":{"addr":"62.60.226.175","port":0,"asn":214351,"as":"Femo It Solutions Limited","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"kikishairshoplook.com/feder.php","fqdn":"kikishairshoplook.com","domain":"kikishairshoplook.com","tld":"com"},"title":"Navy Federal Credit Union - Our Members are the Mission®","dom":{"size":112203,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (25465)","md5":"258c2156d06cbcbc2c751f7f097e757a","sha1":"a1d1d725c8962478d1a69379fa187017442c5390","sha256":"1e2f553974d5ee2148e9ba5c2f87ada2c7ef678e74d35716f5fa416a2d8ce60f","sha512":"2c8c5ced8116f34a58537d4ed13fced6ac49e3dfec9144c7f3ebf38bbeb6a07db8b7d0fe80c41197d09e6ea83cbbbf92f138f213df121902f85d2dc0fcf255c4","ssdeep":"1536:T+mSmOmSm8mSmRmSmxmSmImSmUmSmtMZetHU9+F2VGq7QHXSRyH7cmvyHvC0Sf50:ydNyb2PCxcsLozx4wN","tlshash":"75b3e9e671f0117c48030396dbdf1aa8373cd06be1528d9472be05659f92eeca6cb728","dom_hash":"domhashdac79186c965f843b1a06bdfb6855261","first_seen":"2026-08-12T13:42:14.50702Z","last_seen":"2026-09-22T20:51:13.158433Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kikishairshoplook.com/feder.php","fqdn":"kikishairshoplook.com","domain":"kikishairshoplook.com","tld":"com"},"ip":{"addr":"62.60.226.175","port":0,"asn":214351,"as":"Femo It Solutions Limited","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T20:51:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"kikishairshoplook.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kikishairshoplook.com","ip":{"addr":"62.60.226.175","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"domain_registered":"2026-06-14","domain_rank":0,"first_seen":"2026-09-22T00:29:28.707929Z","last_seen":"2026-09-22T00:29:28.707929Z","alert_count":27,"request_count":9,"received_data":527284,"sent_data":5020,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"digitalapps.navyfederal.org","ip":{"addr":"184.25.10.9","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1997-03-24","domain_rank":93913,"first_seen":"2020-08-13T16:50:55Z","last_seen":"2026-09-22T00:29:30.114703Z","alert_count":0,"request_count":1,"received_data":1253,"sent_data":571,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Akamai","description":"Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.","website":"https://akamai.com","common_platform_enumeration":"","icon":"Akamai.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kikishairshoplook.com/nfcu-icons.afccd6e734f094bc811f.woff","fqdn":"kikishairshoplook.com","domain":"kikishairshoplook.com","tld":"com"},"ip":{"addr":"62.60.226.175","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kikishairshoplook.com/feder.php","date":"2026-09-22T20:50:39.705Z","timestamp":1790110239705,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kikishairshoplook.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 09:28:09 GMT","end":"Tue, 10 Nov 2026 09:28:08 GMT"},"fingerprint":{"sha1":"E4:77:BE:F6:B3:60:CD:CD:4D:25:81:D8:3E:DC:24:7E:08:4F:DE:55","sha256":"8F:AA:07:6B:5A:5B:2A:23:AF:2A:E8:4E:54:3A:E3:6B:38:22:2A:10:A8:C9:D5:70:B0:12:EF:5B:37:A9:79:BC"}}},"request":{"raw":"GET /nfcu-icons.afccd6e734f094bc811f.woff HTTP/1.1\r\nHost: kikishairshoplook.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kikishairshoplook.com/main.310ec6c7.css\r\nCookie: smile=%F0%9F%91%BD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Tue, 22 Sep 2026 20:50:39 GMT\r\nContent-Type: font/woff\r\nContent-Length: 82048\r\nLast-Modified: Thu, 09 Jul 2026 18:11:00 GMT\r\nConnection: keep-alive\r\nETag: \"6a4fe434-14080\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82048,"size_decoded":82290,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 82048, version 1.0","md5":"26c884b9e5c56db40d45d3e5e2e32f88","sha1":"c9ae88582f087df6ad2e0e01aea6a13212061dd7","sha256":"1fa934880a173f877c7e90f95fca2ade66544e05daa88707d0866b6f903a9c05","sha512":"d0fa5d15ffd38acc5c679c02b97ff1c232133700c1b81958c244a51a10150828ce07cb7866d609cac543eb31dc0faea2aec95f9eb3649db217fbbc9eb8d50b99","ssdeep":"1536:iqLSlpkI3vE580OGsrMhnh7EuUyIKvORrLPlIw9B/9YMuL1m/BLOMJCiBZ5:iqLSlGIfE580OGsohnh7EuUyIKvO1Bj5","tlshash":"6e835b0ba70ececbe412a4624c61501f4dd6d91c8f3957636bcebe14c119be48e267be","first_seen":"2023-05-26T10:54:25Z","last_seen":"2026-09-22T20:51:13.160195Z","times_seen":187,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":31,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"kikishairshoplook.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"digitalapps.navyfederal.org/signin/apple-touch-icon.png","fqdn":"digitalapps.navyfederal.org","domain":"navyfederal.org","tld":"org"},"ip":{"addr":"184.25.10.9","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kikishairshoplook.com/feder.php","date":"2026-09-22T20:50:40.066Z","timestamp":1790110240066,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /signin/apple-touch-icon.png HTTP/1.1\r\nHost: digitalapps.navyfederal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kikishairshoplook.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: application/json\r\ncontent-length: 54\r\nx-edgeconnect-midmile-rtt: 82\r\nx-edgeconnect-origin-mex-latency: 12\r\ncache-control: max-age=86400\r\nexpires: Wed, 23 Sep 2026 20:50:40 GMT\r\ndate: Tue, 22 Sep 2026 20:50:40 GMT\r\nset-cookie: ApplicationGatewayAffinityCORS=0fe1eb12cb825d0abe4ecd3aa94b5eec; Path=/; SameSite=None; Secure\nApplicationGatewayAffinity=0fe1eb12cb825d0abe4ecd3aa94b5eec; Path=/\nakaalb_Digital_ALB=~op=~rv=87~m=~os=~id=e594f862b2b4fc988617bc86107ce4c0; path=/; Secure; SameSite=None\nak_bmsc=9E7BE0E22010ADBF349871B02DE09815~000000000000000000000000000000~YAAQJ08kF3vWMcWgAQAAvY/iygGQ1qLM3eP+4WTV4ewzuCuHhw5ZFmoWlAnc+cFhoZwRx1Wylz7Wp8PcLtC5fBjOZtxSHOo2sXznGMdaC0/XZerlQ29YwRcK3gkH9Z5Crvhb8D/H8vnwtMdDsHEzAwM4rf1ruR/Ho7MvHeFKZyjou/jRxDRyVFaseGTy4//IyLC+f2CTHBlUBHK+amPxRvtLtTPBzN7g7gBIy+4w4k+oQFJfMTuEIK/Y+MNjJbYHu9wLEcOkInd1MK/u9p3QZWwU5B/3BE4+aCaEKtHmX0co0e4p/JBDWlgiIWcFIchqq8BO+aWkPubveLDI9ycFxN1iLHdawSsvcTAjwnmBhm9EZGTkIsmFeXcC2L0V7ezbKN6AYv4mrbQePLpQuewyCA29nqE2CjJUrQ==; Domain=.navyfederal.org; Path=/; Expires=Tue, 22 Sep 2026 22:50:40 GMT; Max-Age=7200; SameSite=None; Secure; HttpOnly\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains ; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"ApplicationGatewayAffinityCORS","value":"0fe1eb12cb825d0abe4ecd3aa94b5eec","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"ApplicationGatewayAffinityCORS=0fe1eb12cb825d0abe4ecd3aa94b5eec; Path=/; SameSite=None; Secure"},{"name":"ApplicationGatewayAffinity","value":"0fe1eb12cb825d0abe4ecd3aa94b5eec","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"ApplicationGatewayAffinity=0fe1eb12cb825d0abe4ecd3aa94b5eec; Path=/"},{"name":"akaalb_Digital_ALB","value":"~op=~rv=87~m=~os=~id=e594f862b2b4fc988617bc86107ce4c0","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"akaalb_Digital_ALB=~op=~rv=87~m=~os=~id=e594f862b2b4fc988617bc86107ce4c0; path=/; Secure; SameSite=None"},{"name":"ak_bmsc","value":"9E7BE0E22010ADBF349871B02DE09815~000000000000000000000000000000~YAAQJ08kF3vWMcWgAQAAvY/iygGQ1qLM3eP+4WTV4ewzuCuHhw5ZFmoWlAnc+cFhoZwRx1Wylz7Wp8PcLtC5fBjOZtxSHOo2sXznGMdaC0/XZerlQ29YwRcK3gkH9Z5Crvhb8D/H8vnwtMdDsHEzAwM4rf1ruR/Ho7MvHeFKZyjou/jRxDRyVFaseGTy4//IyLC+f2CTHBlUBHK+amPxRvtLtTPBzN7g7gBIy+4w4k+oQFJfMTuEIK/Y+MNjJbYHu9wLEcOkInd1MK/u9p3QZWwU5B/3BE4+aCaEKtHmX0co0e4p/JBDWlgiIWcFIchqq8BO+aWkPubveLDI9ycFxN1iLHdawSsvcTAjwnmBhm9EZGTkIsmFeXcC2L0V7ezbKN6AYv4mrbQePLpQuewyCA29nqE2CjJUrQ==","quoted":false,"path":"/","domain":".navyfederal.org","expires":"2026-09-22T22:50:40Z","raw_expires":"Tue, 22 Sep 2026 22:50:40 GMT","max_age":7200,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"ak_bmsc=9E7BE0E22010ADBF349871B02DE09815~000000000000000000000000000000~YAAQJ08kF3vWMcWgAQAAvY/iygGQ1qLM3eP+4WTV4ewzuCuHhw5ZFmoWlAnc+cFhoZwRx1Wylz7Wp8PcLtC5fBjOZtxSHOo2sXznGMdaC0/XZerlQ29YwRcK3gkH9Z5Crvhb8D/H8vnwtMdDsHEzAwM4rf1ruR/Ho7MvHeFKZyjou/jRxDRyVFaseGTy4//IyLC+f2CTHBlUBHK+amPxRvtLtTPBzN7g7gBIy+4w4k+oQFJfMTuEIK/Y+MNjJbYHu9wLEcOkInd1MK/u9p3QZWwU5B/3BE4+aCaEKtHmX0co0e4p/JBDWlgiIWcFIchqq8BO+aWkPubveLDI9ycFxN1iLHdawSsvcTAjwnmBhm9EZGTkIsmFeXcC2L0V7ezbKN6AYv4mrbQePLpQuewyCA29nqE2CjJUrQ==; Domain=.navyfederal.org; Path=/; Expires=Tue, 22 Sep 2026 22:50:40 GMT; Max-Age=7200; SameSite=None; Secure; HttpOnly"}],"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Akamai","description":"Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.","website":"https://akamai.com","common_platform_enumeration":"","icon":"Akamai.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T22:48:26.020574Z","times_seen":18607473,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kikishairshoplook.com/main.310ec6c7.css","fqdn":"kikishairshoplook.com","domain":"kikishairshoplook.com","tld":"com"},"ip":{"addr":"62.60.226.175","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kikishairshoplook.com/feder.php","date":"2026-09-22T20:50:39.565Z","timestamp":1790110239565,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kikishairshoplook.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 09:28:09 GMT","end":"Tue, 10 Nov 2026 09:28:08 GMT"},"fingerprint":{"sha1":"E4:77:BE:F6:B3:60:CD:CD:4D:25:81:D8:3E:DC:24:7E:08:4F:DE:55","sha256":"8F:AA:07:6B:5A:5B:2A:23:AF:2A:E8:4E:54:3A:E3:6B:38:22:2A:10:A8:C9:D5:70:B0:12:EF:5B:37:A9:79:BC"}}},"request":{"raw":"GET /main.310ec6c7.css HTTP/1.1\r\nHost: kikishairshoplook.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kikishairshoplook.com/feder.php\r\nCookie: smile=%F0%9F%91%BD\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Tue, 22 Sep 2026 20:50:39 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 09 Jul 2026 18:10:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a4fe42a-2e3e7\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":189415,"size_decoded":39679,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (58043)","md5":"1e397fa9f0989ba15737115a8118bab1","sha1":"0d701080561b1f35f6f9748f531b0c7812e68f10","sha256":"30feaa4c8cf09f51552a4b620fbb666fb3cf81eda2f544ec7eea10e1c7099f3d","sha512":"aaffbf19dfe5bc766e318acf71609faf9a90862bb5f66e726074232b8a752c76680381618028bcfdaf8a3e47cc4e0c1492baeddc3697e2de4ce152aa7e045ae7","ssdeep":"1536:I/AzOLRea0IJIAWgAER38dQcgNEEcO40PPFc3SYiRENM6HN26R/4IMpLiI:I/KOLp4S9c3SYiRENM6HN26R/4ImiI","tlshash":"1104c8a6f5a0356cf6a7c119b0c0babd192f9111d7624efbf4277b64c6c92c60663e0c","first_seen":"2025-06-16T10:11:41.864203Z","last_seen":"2026-09-22T20:51:13.162013Z","times_seen":28,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"kikishairshoplook.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kikishairshoplook.com/img-BecomeAMember.64255d0d02ef64234628.jpg","fqdn":"kikishairshoplook.com","domain":"kikishairshoplook.com","tld":"com"},"ip":{"addr":"62.60.226.175","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kikishairshoplook.com/feder.php","date":"2026-09-22T20:50:39.572Z","timestamp":1790110239572,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kikishairshoplook.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 09:28:09 GMT","end":"Tue, 10 Nov 2026 09:28:08 GMT"},"fingerprint":{"sha1":"E4:77:BE:F6:B3:60:CD:CD:4D:25:81:D8:3E:DC:24:7E:08:4F:DE:55","sha256":"8F:AA:07:6B:5A:5B:2A:23:AF:2A:E8:4E:54:3A:E3:6B:38:22:2A:10:A8:C9:D5:70:B0:12:EF:5B:37:A9:79:BC"}}},"request":{"raw":"GET /img-BecomeAMember.64255d0d02ef64234628.jpg HTTP/1.1\r\nHost: kikishairshoplook.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kikishairshoplook.com/feder.php\r\nCookie: smile=%F0%9F%91%BD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Tue, 22 Sep 2026 20:50:39 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 09 Jul 2026 18:10:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a4fe428-10643\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67139,"size_decoded":67244,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 900x600, components 3","md5":"c78327e5f9181f685acbefde7c68d31a","sha1":"acc1d88a223b75db13f8b4fc6c70fc20e8db45d8","sha256":"e0281f2df196096e82e299b0804ddf9553c1c008616fa21f3dfbc39478f77e78","sha512":"d233bc18ff65d8cac8c46baf2bf0faf5feb1d8602d1f5c731ffd34f6cd9c90810c111499cade9ec059b2b8ba9b43db774a9974605689cf2fce57ec27e8599d42","ssdeep":"1536:uE1bBhrA0hEghsvgvrPbe5DiwNlGVIc0pWSySc3kdh42gH0L:53rKghsvPLOVIgSc3FkL","tlshash":"1e6302346a45eb37e8a836741def3fd1ebe3519460860eb98640f33e927680f40e2957","first_seen":"2023-05-30T13:26:03Z","last_seen":"2026-09-22T20:51:13.163714Z","times_seen":134,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":50,"dns":0,"connect":30,"send":0,"wait":31,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"kikishairshoplook.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kikishairshoplook.com/sourcesanspro-regular-webfont.2eb3df099f7206cd9fd8.woff","fqdn":"kikishairshoplook.com","domain":"kikishairshoplook.com","tld":"com"},"ip":{"addr":"62.60.226.175","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kikishairshoplook.com/feder.php","date":"2026-09-22T20:50:39.701Z","timestamp":1790110239701,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kikishairshoplook.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 09:28:09 GMT","end":"Tue, 10 Nov 2026 09:28:08 GMT"},"fingerprint":{"sha1":"E4:77:BE:F6:B3:60:CD:CD:4D:25:81:D8:3E:DC:24:7E:08:4F:DE:55","sha256":"8F:AA:07:6B:5A:5B:2A:23:AF:2A:E8:4E:54:3A:E3:6B:38:22:2A:10:A8:C9:D5:70:B0:12:EF:5B:37:A9:79:BC"}}},"request":{"raw":"GET /sourcesanspro-regular-webfont.2eb3df099f7206cd9fd8.woff HTTP/1.1\r\nHost: kikishairshoplook.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kikishairshoplook.com/main.310ec6c7.css\r\nCookie: smile=%F0%9F%91%BD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Tue, 22 Sep 2026 20:50:39 GMT\r\nContent-Type: font/woff\r\nContent-Length: 29840\r\nLast-Modified: Thu, 09 Jul 2026 18:10:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a4fe42c-7490\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29840,"size_decoded":30081,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 29840, version 1.0","md5":"82ef0fcf088704236bd138bf6d1ecf09","sha1":"ff6c5c71cd0da967746ca2622647a35fd8c83584","sha256":"a013af9f2e74ca2ba4cce61114b44fa5bd304d849e85fd41d269c835dc6f0db1","sha512":"2d46414c0c75bd5ef4163560e1b3d6b2c594758d93561ec672ecfcc4804d6d5b195158fe78fc8c196c0bafbaa8a680fb30c9a4e705fed43b1cca76a0a12fe733","ssdeep":"768:Egt3yIYKK9HI6X+ENgDS1iyxz6KvMzAy3sp6ngad:PCKKHImyDBy9vMzL3K6npd","tlshash":"23d2e1261f2af8dce29464f4359055f0910a206bd20f2853e3d4f6666fdea1cefb4527","first_seen":"2023-05-30T13:26:03Z","last_seen":"2026-09-22T20:51:13.164839Z","times_seen":31,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"kikishairshoplook.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kikishairshoplook.com/favicon-16x16.png","fqdn":"kikishairshoplook.com","domain":"kikishairshoplook.com","tld":"com"},"ip":{"addr":"62.60.226.175","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kikishairshoplook.com/feder.php","date":"2026-09-22T20:50:40.068Z","timestamp":1790110240068,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kikishairshoplook.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 09:28:09 GMT","end":"Tue, 10 Nov 2026 09:28:08 GMT"},"fingerprint":{"sha1":"E4:77:BE:F6:B3:60:CD:CD:4D:25:81:D8:3E:DC:24:7E:08:4F:DE:55","sha256":"8F:AA:07:6B:5A:5B:2A:23:AF:2A:E8:4E:54:3A:E3:6B:38:22:2A:10:A8:C9:D5:70:B0:12:EF:5B:37:A9:79:BC"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: kikishairshoplook.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kikishairshoplook.com/feder.php\r\nCookie: smile=%F0%9F%91%BD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Tue, 22 Sep 2026 20:50:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Thu, 09 Jul 2026 18:10:52 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a4fe42c-4b9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1209,"size_decoded":1466,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"68de213052ad2118cd9e397f61a423a0","sha1":"3e30206919939a7d8433aa8b8b08ddbdc9f0ddf5","sha256":"e61d1b3dfb9eff3b97d8da6b1ea1f36990e3d9995b59a68b72fd63c7d173ac4b","sha512":"776d356c333467e8c8d716d4ee385ea67e84f854536e5a29d5c2525c725718e019b26d9bcf776e9e5cd1df2c7084e2516b47e83b58edd4406d4f7c9ba6713fb1","ssdeep":"","tlshash":"f221b7c16724ec7fd4543327235939401eb1e94b4b470c4ce929c5194d22b48a7cf9c9","first_seen":"2025-03-19T17:38:38.887586Z","last_seen":"2026-09-22T20:51:13.166238Z","times_seen":120,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"kikishairshoplook.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kikishairshoplook.com/feder.php","fqdn":"kikishairshoplook.com","domain":"kikishairshoplook.com","tld":"com"},"ip":{"addr":"62.60.226.175","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T20:50:39.185Z","timestamp":1790110239185,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kikishairshoplook.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 09:28:09 GMT","end":"Tue, 10 Nov 2026 09:28:08 GMT"},"fingerprint":{"sha1":"E4:77:BE:F6:B3:60:CD:CD:4D:25:81:D8:3E:DC:24:7E:08:4F:DE:55","sha256":"8F:AA:07:6B:5A:5B:2A:23:AF:2A:E8:4E:54:3A:E3:6B:38:22:2A:10:A8:C9:D5:70:B0:12:EF:5B:37:A9:79:BC"}}},"request":{"raw":"GET /feder.php HTTP/1.1\r\nHost: kikishairshoplook.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Tue, 22 Sep 2026 20:50:39 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 25765\r\nConnection: keep-alive\r\nSet-Cookie: smile=%F0%9F%91%BD; expires=Thu, 22-Oct-2026 20:50:39 GMT; Max-Age=2592000; path=/\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"smile","value":"%F0%9F%91%BD","quoted":false,"path":"/","expires":"2026-10-22T20:50:39Z","raw_expires":"Thu, 22-Oct-2026 20:50:39 GMT","max_age":2592000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"smile=%F0%9F%91%BD; expires=Thu, 22-Oct-2026 20:50:39 GMT; Max-Age=2592000; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115731,"size_decoded":26073,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (25325)","md5":"91169ccb13e4bb7196dc496abe1181ef","sha1":"25f1329556282bf88ddca20b34cf1fd9e0740a5b","sha256":"a08bf6e6a3a4407935c01ee20f4528101387aad052d3111e61b5bcb7e893933f","sha512":"952cca006d65a58bb5e3056239fa70566c4a8bfd84f5b38254e732caa49f50a0f8b83fa978d22e1eb3707f9328102a8ee2658dc956c9587272e087838b8b425c","ssdeep":"1536:B+mSmOmSm8mSmRmSmxmSmImSmUmSmtMZetdU9+F2VGq7QHXSRyH7cmvyHvC0Sf56:2dNyb2PCxcsJwzx4wB","tlshash":"f9b3e9e671f011bc48070396dfdf1a68373cd06ba1528d9472be05659f92eeca6cb728","first_seen":"2026-08-12T13:42:14.509122Z","last_seen":"2026-09-22T20:51:13.167359Z","times_seen":2,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":11,"connect":30,"send":0,"wait":60,"receive":8,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"kikishairshoplook.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kikishairshoplook.com/index_1.html","fqdn":"kikishairshoplook.com","domain":"kikishairshoplook.com","tld":"com"},"ip":{"addr":"62.60.226.175","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kikishairshoplook.com/feder.php","date":"2026-09-22T20:50:39.566Z","timestamp":1790110239566,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kikishairshoplook.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 09:28:09 GMT","end":"Tue, 10 Nov 2026 09:28:08 GMT"},"fingerprint":{"sha1":"E4:77:BE:F6:B3:60:CD:CD:4D:25:81:D8:3E:DC:24:7E:08:4F:DE:55","sha256":"8F:AA:07:6B:5A:5B:2A:23:AF:2A:E8:4E:54:3A:E3:6B:38:22:2A:10:A8:C9:D5:70:B0:12:EF:5B:37:A9:79:BC"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: kikishairshoplook.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kikishairshoplook.com/feder.php\r\nCookie: smile=%F0%9F%91%BD\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.30.3\r\nDate: Tue, 22 Sep 2026 20:50:39 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 284\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284,"size_decoded":459,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4d5ef187da7c82862d00415005e2faeb","sha1":"10b6f46a31d9e9591bb138fe40cc8d254fe6fa99","sha256":"832e61e490563d0080246e672fd6235165f547660e1eaf1664fc8e8685ef1612","sha512":"5716490d43dda40e94a6e35603b5ea0becd6727c1099a5686a9e4aa5db3c53992689cc94436ad06dd20ac7bf877aecb243a7754c4fbd80dea7016ecfd9b7c283","ssdeep":"","tlshash":"f6d0e79e4043634b0411116034c110c1138c12e7a03781d83cc6d547115823dcd85acc","first_seen":"2026-09-22T20:51:13.168443Z","last_seen":"2026-09-22T20:51:13.168443Z","times_seen":1,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":34,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"kikishairshoplook.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kikishairshoplook.com/bubbles.9f2a1919448e1d79ac6b.svg","fqdn":"kikishairshoplook.com","domain":"kikishairshoplook.com","tld":"com"},"ip":{"addr":"62.60.226.175","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kikishairshoplook.com/feder.php","date":"2026-09-22T20:50:39.651Z","timestamp":1790110239651,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kikishairshoplook.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 09:28:09 GMT","end":"Tue, 10 Nov 2026 09:28:08 GMT"},"fingerprint":{"sha1":"E4:77:BE:F6:B3:60:CD:CD:4D:25:81:D8:3E:DC:24:7E:08:4F:DE:55","sha256":"8F:AA:07:6B:5A:5B:2A:23:AF:2A:E8:4E:54:3A:E3:6B:38:22:2A:10:A8:C9:D5:70:B0:12:EF:5B:37:A9:79:BC"}}},"request":{"raw":"GET /bubbles.9f2a1919448e1d79ac6b.svg HTTP/1.1\r\nHost: kikishairshoplook.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kikishairshoplook.com/main.310ec6c7.css\r\nCookie: smile=%F0%9F%91%BD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Tue, 22 Sep 2026 20:50:39 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 9500\r\nLast-Modified: Thu, 09 Jul 2026 18:10:50 GMT\r\nConnection: keep-alive\r\nETag: \"6a4fe42a-251c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9500,"size_decoded":9744,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9c19ba7a73e20a07ed9ac2eb8ed3d2ca","sha1":"f316211c37cd291e7203a1556a4e76add5e6d9d1","sha256":"314657d2f8121f4b44b50900eccfb8c7ebc336da2dc7e62182cce48c77018dd3","sha512":"2d9c2d9cf2cc455d1f683ab97a0c7c037311eb1f73fbb896788ba641250d62fc9d0ea6d7c02d57fbe10a2d567b7c9de411f42386c30ce81d2e46052f55db0f07","ssdeep":"96:0VE1ewXfwH9JjtCHZ8fPO/mjdOZFWbshbEQFrnHG0p/526uS9U/O:0EvuFKmpyGsumz0S9b","tlshash":"cf1245e126fc8cb920038282dbc25d945a3cf6ebd39216d672ac10b64f70859794f372","first_seen":"2024-06-05T19:38:43Z","last_seen":"2026-09-22T20:51:13.169452Z","times_seen":98,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"kikishairshoplook.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kikishairshoplook.com/sourcesanspro-semibold-webfont.114864cb26b396c5359c.woff","fqdn":"kikishairshoplook.com","domain":"kikishairshoplook.com","tld":"com"},"ip":{"addr":"62.60.226.175","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kikishairshoplook.com/feder.php","date":"2026-09-22T20:50:39.703Z","timestamp":1790110239703,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kikishairshoplook.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 09:28:09 GMT","end":"Tue, 10 Nov 2026 09:28:08 GMT"},"fingerprint":{"sha1":"E4:77:BE:F6:B3:60:CD:CD:4D:25:81:D8:3E:DC:24:7E:08:4F:DE:55","sha256":"8F:AA:07:6B:5A:5B:2A:23:AF:2A:E8:4E:54:3A:E3:6B:38:22:2A:10:A8:C9:D5:70:B0:12:EF:5B:37:A9:79:BC"}}},"request":{"raw":"GET /sourcesanspro-semibold-webfont.114864cb26b396c5359c.woff HTTP/1.1\r\nHost: kikishairshoplook.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kikishairshoplook.com/main.310ec6c7.css\r\nCookie: smile=%F0%9F%91%BD\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Tue, 22 Sep 2026 20:50:39 GMT\r\nContent-Type: font/woff\r\nContent-Length: 29916\r\nLast-Modified: Thu, 09 Jul 2026 18:10:59 GMT\r\nConnection: keep-alive\r\nETag: \"6a4fe433-74dc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29916,"size_decoded":30157,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 29916, version 1.0","md5":"e1c594572e459cd0a9820f72e8505990","sha1":"5162d9c651168543f2b7a3d94ee67ea0a46143dc","sha256":"e80d024dca764170eec0c890e20dadbc9013ecd2b98ac3cb30587965bc0c62b5","sha512":"cebf3de1b12cfd59bd265f4786d83c29bf1308f66020919b09c939f051acdc97ddfd5d8ea3339173147ae9ef6dd0016cff687f13d2b5084701270104d774e29f","ssdeep":"768:qPn453SnCnV5YZZSpYhiYBJmLTRg22VZaP76iWpol62m:SoPM9BBJmPRP2VZaPOiWpolVm","tlshash":"e7d2e126473a5a87480a617c33baa803752cfa72d110bfb74630e8c747e5319b8b8763","first_seen":"2023-05-30T13:26:03Z","last_seen":"2026-09-22T20:51:13.170564Z","times_seen":31,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"kikishairshoplook.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"kikishairshoplook.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}