{"report_id":"7d27b20f-dd85-4419-bc4f-74f56fb12ab8","version":0,"status":"done","tags":[],"date":"2026-09-19T08:27:59Z","url":{"schema":"http","addr":"meet-khq-google.live/","fqdn":"meet-khq-google.live","domain":"meet-khq-google.live","tld":"live"},"ip":{"addr":"78.40.194.168","port":0,"asn":216071,"as":"Servers Tech Fzco","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"meet-khq-google.live/verify.php?back=/","fqdn":"meet-khq-google.live","domain":"meet-khq-google.live","tld":"live"},"title":"Проверка доступа","dom":{"size":3490,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1484)","md5":"ef072b7890a59e481097ac85a2892448","sha1":"38ea1748b5a9688a0822e7a1b118be4f3070b5be","sha256":"d18e2160e0282884c905efc27e1c043e5b025460e4b8a2e98d10ebc3fd0ca126","sha512":"9d8806c3da0d1378d480ccb6a128456b0ea9832110a2a8befc7bfed9ef1c1e3d29eeb6253632d6ffbd3c2bbaa38b9ad05974be6ba7d4d809c27cdd6703bb4c03","ssdeep":"","tlshash":"3171667203a01464dc1743d0b960fb8d2933b31bf5c6c66579ed5760bbcd9f78452264","dom_hash":"domhash96c99188743ab3fdf0b44c51a59a4323","first_seen":"2026-09-19T08:28:05.371105Z","last_seen":"2026-09-19T08:28:05.371105Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"meet-khq-google.live/","fqdn":"meet-khq-google.live","domain":"meet-khq-google.live","tld":"live"},"ip":{"addr":"78.40.194.168","port":0,"asn":216071,"as":"Servers Tech Fzco","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T08:27:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"meet-khq-google.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-13T23:34:00.595824Z","alert_count":0,"request_count":7,"received_data":3559226,"sent_data":3723,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-13T23:01:27.934223Z","alert_count":0,"request_count":4,"received_data":76459,"sent_data":2726,"comment":"","tags":null,"fingerprints":null},{"fqdn":"meet-khq-google.live","ip":{"addr":"78.40.194.168","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-19T08:16:27.446966Z","last_seen":"2026-09-19T08:16:27.446966Z","alert_count":3,"request_count":3,"received_data":1778,"sent_data":1528,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":1,"received_data":40960,"sent_data":562,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c332c85e79e41b93beec167a4f7d38d8","sha1":"e6e7ae7e12ef45e5b49474d45efb1238cabc552f","sha256":"968b9d3d9dcfb9d38daf0913b7a310525fe9af23015cf3dbca84481ac2985c7f","sha512":"0a0ed0fde7a16492a6f8cc6512e66686bb0e86879ccdde685acd87300b5382456d09f0e948130f64a0b370cba95d3a3fa81b5565f57af0fd2344635d83e92f51","ssdeep":"","tlshash":"0e1121b71604f0354b3209e5e1fecbb5e442701cf15885e8a425dec52e6adc7ce05684","size":976,"data":"","first_seen":"2026-09-14T20:50:39.039311Z","last_seen":"2026-09-19T10:52:56.448621Z","times_seen":331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdP4oUtAAAAAJTni73zDlmagI4sqhrYiVPfd2LW\u0026co=aHR0cHM6Ly9tZWV0LWtocS1nb29nbGUubGl2ZTo0NDM.\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=zf5acrrpzigc","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-09-19T10:41:56.339525Z","times_seen":520449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdP4oUtAAAAAJTni73zDlmagI4sqhrYiVPfd2LW\u0026co=aHR0cHM6Ly9tZWV0LWtocS1nb29nbGUubGl2ZTo0NDM.\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=zf5acrrpzigc","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"24c4ba92e5a2b7721a94811f424a206d","sha1":"93d60eba8659c2722111e87f6b80f8121f121242","sha256":"1677c4180a505f83f6c470cb8cbac9899bedf44887b0b5882040581e070e322c","sha512":"ac8393ddd7e2f48ff434c4284e6ca1366cd0de6b4c6e81b79eae32039f28365b6384e526aacad2cc0e7e91a310db71325e918d334525d584f4ecc0d8919dbed8","ssdeep":"768:9jQP7ZCJ85DHKdPFzZYSgspzTN4L8VBR4pRq4OSv:VQZLKdP4Sgspzxc8x4pR1","tlshash":"5ef2ae5ddc1a74fbdeee87e26bd42788207c429a444a107d70fe04d72a225d77a8a0ec","size":36178,"data":"","first_seen":"2026-09-19T08:28:05.384555Z","last_seen":"2026-09-19T08:28:05.384555Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"599040272c12d94939ea48a5a91e7724","sha1":"aab2913be903f4d6c9e752374cd46c06b35f180e","sha256":"b5e1c42dbc11ff59dc66882df55d760cf9e7948a54abd9011eda51044ebb0ac5","sha512":"dffa6e564768b4eafd699d070f1253cbf014e6bc4c4476da2a16132386bcf861db4a2915f67a3eff292d1e97e550a6dabd1fdf2ae98522abd38fe5575843468e","ssdeep":"","tlshash":"ecb012670550cc1c0c000142e5379bace0019038fb9091f140381fe412a4673c205d40","size":102,"data":"","first_seen":"2026-09-14T19:29:34.24791Z","last_seen":"2026-09-19T10:52:56.449506Z","times_seen":1485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026k=6LdP4oUtAAAAAJTni73zDlmagI4sqhrYiVPfd2LW\u0026bft=0dAFcWeA4Px3WycKe2EMCCGOQbBc3cqqD9CEnr5ucEpyIq4wEw82TG1DtLGmM7ujBTKXPo6i1d71wQxdyoDei6U_-Va2bqhbn1TQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-09-19T10:41:56.339525Z","times_seen":520449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026k=6LdP4oUtAAAAAJTni73zDlmagI4sqhrYiVPfd2LW\u0026bft=0dAFcWeA4Px3WycKe2EMCCGOQbBc3cqqD9CEnr5ucEpyIq4wEw82TG1DtLGmM7ujBTKXPo6i1d71wQxdyoDei6U_-Va2bqhbn1TQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9993eb3829e84cb3b225f93c445c58ec","sha1":"107bdc55930e916c28fb699212b67a0e822556e3","sha256":"1364c765a0f216f1b043cec3767330c7c7b6449051d3511842baaaecf1aba662","sha512":"c1dac0e8eda3a678ad2d569527d7ae65691c0fe539521f82bafca51a9ce410fb971c2d036d04ac28b588cdd1e52004f23502c65d19b9af16f62782d32b9cd5f9","ssdeep":"","tlshash":"e7c012a363011df70d256c514925009e5d8e4d77e417c3f48ad67d06bda0e867a10a74","size":191,"data":"","first_seen":"2026-09-19T08:16:31.990609Z","last_seen":"2026-09-19T08:28:05.386222Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fac9419e0a4c4b45ec150e400a959d8c","sha1":"79ece6c0cdc5a7cad103ccd6e32aef80793211a6","sha256":"24426f449db0a1effc9a2118370b418d5de8b9fc11076a115baec2ff5250fffe","sha512":"2dbfa5289fe1b4811bb8fe4e409f229859ba27c753f1737c5e25c4b403bdded8e7d2aa11cae71cb1d49bd0d613e9bc15601ac2b0d14ef71fa75e08c4aa7ae296","ssdeep":"12288:CiPDodYZjHqv8FNaieyWjeKizB+JgK9RP9RzGhBXDAZY:nDod1Wv/z4JgK9R/zpZY","tlshash":"dc053be9b445b6f54322f5f1606b6418a33e9826d84c081f7199d9f06eb4c0eb07beb7","size":846252,"data":"","first_seen":"2026-09-14T19:29:34.285397Z","last_seen":"2026-09-19T10:31:37.527668Z","times_seen":1866,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob","date":"2026-09-19T08:27:20.634Z","timestamp":1789806440634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 353627\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:50:34 GMT\r\nexpires: Sat, 18 Sep 2027 10:50:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 02:03:12 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 77806\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":846252,"size_decoded":354513,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (575)","md5":"fac9419e0a4c4b45ec150e400a959d8c","sha1":"79ece6c0cdc5a7cad103ccd6e32aef80793211a6","sha256":"24426f449db0a1effc9a2118370b418d5de8b9fc11076a115baec2ff5250fffe","sha512":"2dbfa5289fe1b4811bb8fe4e409f229859ba27c753f1737c5e25c4b403bdded8e7d2aa11cae71cb1d49bd0d613e9bc15601ac2b0d14ef71fa75e08c4aa7ae296","ssdeep":"12288:CiPDodYZjHqv8FNaieyWjeKizB+JgK9RP9RzGhBXDAZY:nDod1Wv/z4JgK9R/zpZY","tlshash":"dc053be9b445b6f54322f5f1606b6418a33e9826d84c081f7199d9f06eb4c0eb07beb7","first_seen":"2026-09-14T19:29:34.285397Z","last_seen":"2026-09-19T10:31:37.527668Z","times_seen":1866,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meet-khq-google.live/verify.php?back=/","date":"2026-09-19T08:27:19.694Z","timestamp":1789806439694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meet-khq-google.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sat, 19 Sep 2026 08:27:19 GMT\r\ndate: Sat, 19 Sep 2026 08:27:19 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":976,"size_decoded":1287,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (976), with no line terminators","md5":"c332c85e79e41b93beec167a4f7d38d8","sha1":"e6e7ae7e12ef45e5b49474d45efb1238cabc552f","sha256":"968b9d3d9dcfb9d38daf0913b7a310525fe9af23015cf3dbca84481ac2985c7f","sha512":"0a0ed0fde7a16492a6f8cc6512e66686bb0e86879ccdde685acd87300b5382456d09f0e948130f64a0b370cba95d3a3fa81b5565f57af0fd2344635d83e92f51","ssdeep":"","tlshash":"0e1121b71604f0354b3209e5e1fecbb5e442701cf15885e8a425dec52e6adc7ce05684","first_seen":"2026-09-14T20:50:39.039311Z","last_seen":"2026-09-19T10:52:56.448621Z","times_seen":331,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":3,"connect":29,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meet-khq-google.live/favicon.ico","fqdn":"meet-khq-google.live","domain":"meet-khq-google.live","tld":"live"},"ip":{"addr":"78.40.194.168","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meet-khq-google.live/verify.php?back=/","date":"2026-09-19T08:27:19.782Z","timestamp":1789806439782,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meet-khq-google.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 13:39:46 GMT","end":"Mon, 26 Oct 2026 13:39:45 GMT"},"fingerprint":{"sha1":"58:AF:BD:F4:85:30:61:68:09:38:65:0F:23:06:C2:10:FD:7D:A4:29","sha256":"11:FF:DB:E1:44:96:24:B2:8D:60:AC:57:56:BB:48:0A:59:EC:42:7E:35:24:50:65:BC:6F:62:66:14:F2:5B:A1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: meet-khq-google.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meet-khq-google.live/verify.php?back=/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Sat, 19 Sep 2026 08:27:19 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 283\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":283,"size_decoded":458,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4ee24c6eb72983f635cff95c0b6832b4","sha1":"511f9abffd1832096d38d6752484d22d42b2333a","sha256":"642ea512924751f6c15d527ffdf6673fc23b00910cdb96a2a40862a13cc33f60","sha512":"9e75f6514ef17ffcc9a4d26302d9f20f1558b89a1955c93bf89bb0461266a21d1569bbc254f141d8111c83e0074d8e2ef53262cb97746eb91ca3c4e299b578de","ssdeep":"","tlshash":"97d02bdf9053b3874822549039c665c2668d12faa43a82a82dc6d497529857ecd9adc8","first_seen":"2026-09-19T08:16:31.981337Z","last_seen":"2026-09-19T08:28:05.375073Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"meet-khq-google.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdP4oUtAAAAAJTni73zDlmagI4sqhrYiVPfd2LW\u0026co=aHR0cHM6Ly9tZWV0LWtocS1nb29nbGUubGl2ZTo0NDM.\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=zf5acrrpzigc","date":"2026-09-19T08:27:20.596Z","timestamp":1789806440596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdP4oUtAAAAAJTni73zDlmagI4sqhrYiVPfd2LW\u0026co=aHR0cHM6Ly9tZWV0LWtocS1nb29nbGUubGl2ZTo0NDM.\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=zf5acrrpzigc\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sat, 19 Sep 2026 08:27:20 GMT\r\ndate: Sat, 19 Sep 2026 08:27:20 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":954,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"599040272c12d94939ea48a5a91e7724","sha1":"aab2913be903f4d6c9e752374cd46c06b35f180e","sha256":"b5e1c42dbc11ff59dc66882df55d760cf9e7948a54abd9011eda51044ebb0ac5","sha512":"dffa6e564768b4eafd699d070f1253cbf014e6bc4c4476da2a16132386bcf861db4a2915f67a3eff292d1e97e550a6dabd1fdf2ae98522abd38fe5575843468e","ssdeep":"","tlshash":"ecb012670550cc1c0c000142e5379bace0019038fb9091f140381fe412a4673c205d40","first_seen":"2026-09-14T19:29:34.24791Z","last_seen":"2026-09-19T10:52:56.449506Z","times_seen":1485,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026k=6LdP4oUtAAAAAJTni73zDlmagI4sqhrYiVPfd2LW\u0026bft=0dAFcWeA4Px3WycKe2EMCCGOQbBc3cqqD9CEnr5ucEpyIq4wEw82TG1DtLGmM7ujBTKXPo6i1d71wQxdyoDei6U_-Va2bqhbn1TQ","date":"2026-09-19T08:27:21.182Z","timestamp":1789806441182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 353627\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:50:34 GMT\r\nexpires: Sat, 18 Sep 2027 10:50:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 02:03:12 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 77807\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":846252,"size_decoded":354513,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (575)","md5":"fac9419e0a4c4b45ec150e400a959d8c","sha1":"79ece6c0cdc5a7cad103ccd6e32aef80793211a6","sha256":"24426f449db0a1effc9a2118370b418d5de8b9fc11076a115baec2ff5250fffe","sha512":"2dbfa5289fe1b4811bb8fe4e409f229859ba27c753f1737c5e25c4b403bdded8e7d2aa11cae71cb1d49bd0d613e9bc15601ac2b0d14ef71fa75e08c4aa7ae296","ssdeep":"12288:CiPDodYZjHqv8FNaieyWjeKizB+JgK9RP9RzGhBXDAZY:nDod1Wv/z4JgK9R/zpZY","tlshash":"dc053be9b445b6f54322f5f1606b6418a33e9826d84c081f7199d9f06eb4c0eb07beb7","first_seen":"2026-09-14T19:29:34.285397Z","last_seen":"2026-09-19T10:31:37.527668Z","times_seen":1866,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdP4oUtAAAAAJTni73zDlmagI4sqhrYiVPfd2LW\u0026co=aHR0cHM6Ly9tZWV0LWtocS1nb29nbGUubGl2ZTo0NDM.\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=zf5acrrpzigc","date":"2026-09-19T08:27:20.477Z","timestamp":1789806440477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:12:28 GMT\r\nexpires: Sat, 18 Sep 2027 10:12:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 80092\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40960,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-09-19T10:41:56.283446Z","times_seen":994022,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":3,"dns":3,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meet-khq-google.live/verify.php?back=/","fqdn":"meet-khq-google.live","domain":"meet-khq-google.live","tld":"live"},"ip":{"addr":"78.40.194.168","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T08:27:19.257Z","timestamp":1789806439257,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meet-khq-google.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 13:39:46 GMT","end":"Mon, 26 Oct 2026 13:39:45 GMT"},"fingerprint":{"sha1":"58:AF:BD:F4:85:30:61:68:09:38:65:0F:23:06:C2:10:FD:7D:A4:29","sha256":"11:FF:DB:E1:44:96:24:B2:8D:60:AC:57:56:BB:48:0A:59:EC:42:7E:35:24:50:65:BC:6F:62:66:14:F2:5B:A1"}}},"request":{"raw":"GET /verify.php?back=/ HTTP/1.1\r\nHost: meet-khq-google.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 19 Sep 2026 08:27:19 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 549\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}],"data":{"size":881,"size_decoded":759,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"fd3df5b1db206ce81f4a43df95c89822","sha1":"3c3cd71f089bdf7eb902df5c7950df5a57a0c076","sha256":"68bf875e3fa6b641bc6e1bbf8199a824ab6fa3f2525c66efffcf6c9865d4b51e","sha512":"2f318ac2937c7ee20a72ef812a8bae8659ad3566d68bac4cd30d318761d70e9f5f1d1a8b0fbf6aac5496ed5e5bd2e4ededfa0f8d09f5325d23d431a2a7e133d6","ssdeep":"","tlshash":"6a11dc33a9c018861870b1b5df52b74afd83422b9646439739dc13639ff2d9aca43b24","first_seen":"2026-09-19T08:16:31.979063Z","last_seen":"2026-09-19T08:28:05.378081Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"meet-khq-google.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdP4oUtAAAAAJTni73zDlmagI4sqhrYiVPfd2LW\u0026co=aHR0cHM6Ly9tZWV0LWtocS1nb29nbGUubGl2ZTo0NDM.\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=zf5acrrpzigc","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://meet-khq-google.live/verify.php?back=/","date":"2026-09-19T08:27:20.098Z","timestamp":1789806440098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LdP4oUtAAAAAJTni73zDlmagI4sqhrYiVPfd2LW\u0026co=aHR0cHM6Ly9tZWV0LWtocS1nb29nbGUubGl2ZTo0NDM.\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=zf5acrrpzigc HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meet-khq-google.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 19 Sep 2026 08:27:20 GMT\r\ncontent-security-policy: script-src 'nonce-4bLxVyMNPzttbEUGZ-fJdw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54707,"size_decoded":29459,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (36184)","md5":"c3066aba89fe5c25ab6ac91418b1b81f","sha1":"661754a5044d9e558033b5690efa5f483239d27b","sha256":"6b1d7956a987d6f93d12254d17381d9957f070744fcbfae19b6e372734f4ee05","sha512":"a2a8d038301fe7a0ec37327a2561017a53f83ed73ee116029cb9c2aaf1396eee4330d1b25a1c421d5eee818532a026bb4a01d7393db58e08d5fc29f19980d155","ssdeep":"768:UFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+3/QEdpORjQP7ZCJ85DHKdPFzZYSgspzT7:y+kj5RQZLKdP4Sgspzxc8x4pRc","tlshash":"d0338c5488175085dfd78de223c93f30f92e8244604680b5b7fd47abaed7c97629a3ac","first_seen":"2026-09-19T08:28:05.37902Z","last_seen":"2026-09-19T08:28:05.37902Z","times_seen":1,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdP4oUtAAAAAJTni73zDlmagI4sqhrYiVPfd2LW\u0026co=aHR0cHM6Ly9tZWV0LWtocS1nb29nbGUubGl2ZTo0NDM.\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=zf5acrrpzigc","date":"2026-09-19T08:27:20.462Z","timestamp":1789806440462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 15:10:22 GMT\r\nexpires: Thu, 24 Sep 2026 15:10:22 GMT\r\ncache-control: public, max-age=604800\r\nage: 148618\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-09-19T10:41:56.302637Z","times_seen":727711,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026k=6LdP4oUtAAAAAJTni73zDlmagI4sqhrYiVPfd2LW\u0026bft=0dAFcWeA4Px3WycKe2EMCCGOQbBc3cqqD9CEnr5ucEpyIq4wEw82TG1DtLGmM7ujBTKXPo6i1d71wQxdyoDei6U_-Va2bqhbn1TQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://meet-khq-google.live/verify.php?back=/","date":"2026-09-19T08:27:21.141Z","timestamp":1789806441141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026k=6LdP4oUtAAAAAJTni73zDlmagI4sqhrYiVPfd2LW\u0026bft=0dAFcWeA4Px3WycKe2EMCCGOQbBc3cqqD9CEnr5ucEpyIq4wEw82TG1DtLGmM7ujBTKXPo6i1d71wQxdyoDei6U_-Va2bqhbn1TQ HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meet-khq-google.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 19 Sep 2026 08:27:21 GMT\r\ncontent-security-policy: script-src 'nonce-hUC-u4B7zfAAE1Zr2JJkrw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17035,"size_decoded":3277,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"ff7b6458b9c360f3c2e98ea8c9020295","sha1":"440849d68892eef8b6475b1669843c1e8f7c92b6","sha256":"f433fc78a21b8e5f406100fe4010a390a9be1052618624cf5cfa2d40ceb40960","sha512":"1031941492321fd3105c7ee5c18b65ba331d9f92787d601857b09e169f5e801bb9953239b2ca44a2134f8931308c5f91710d75b4adc57af834173497f37fe921","ssdeep":"384:EjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/C:EFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+v","tlshash":"b6721e50041744009b835ce223ce7f30fe4e92517246d0b1abfd9b6beedbda6926939d","first_seen":"2026-09-19T08:28:05.381124Z","last_seen":"2026-09-19T08:28:05.381124Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026k=6LdP4oUtAAAAAJTni73zDlmagI4sqhrYiVPfd2LW\u0026bft=0dAFcWeA4Px3WycKe2EMCCGOQbBc3cqqD9CEnr5ucEpyIq4wEw82TG1DtLGmM7ujBTKXPo6i1d71wQxdyoDei6U_-Va2bqhbn1TQ","date":"2026-09-19T08:27:21.181Z","timestamp":1789806441181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42355\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 11:02:41 GMT\r\nexpires: Sat, 18 Sep 2027 11:02:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 02:03:12 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 77080\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82980,"size_decoded":43201,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c7a6d902a0adcd7c9223bc3457d32a41","sha1":"a8edb18d3034cd30504e947ca68ebef437c7b706","sha256":"8266c6122d4a35954f3142697506efb503322c0470d3863c9e759e2e2295e5cc","sha512":"a49bba8e98fd71591b08e158dfa5e500f0bc0b5de853ed672f9769c3be6a813dfbee5c88c5bfe8484943f4b624aa09ed07f2a41e4b4d03b9541455ce662ed4fd","ssdeep":"1536:n7Rpgh9C9ToL9gTNfWNfK4RxXnHZzhXwWx7W1bx7:n7ArC9ULiTYNC4Rv9Xi","tlshash":"85838e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-09-14T19:29:34.239267Z","last_seen":"2026-09-19T10:21:05.081568Z","times_seen":1660,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meet-khq-google.live/","fqdn":"meet-khq-google.live","domain":"meet-khq-google.live","tld":"live"},"ip":{"addr":"78.40.194.168","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T08:27:17.908Z","timestamp":1789806437908,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meet-khq-google.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 13:39:46 GMT","end":"Mon, 26 Oct 2026 13:39:45 GMT"},"fingerprint":{"sha1":"58:AF:BD:F4:85:30:61:68:09:38:65:0F:23:06:C2:10:FD:7D:A4:29","sha256":"11:FF:DB:E1:44:96:24:B2:8D:60:AC:57:56:BB:48:0A:59:EC:42:7E:35:24:50:65:BC:6F:62:66:14:F2:5B:A1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: meet-khq-google.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.28.0\r\nDate: Sat, 19 Sep 2026 08:27:19 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 317\r\nConnection: keep-alive\r\nLocation: https://meet-khq-google.live/verify.php?back=/\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T10:41:55.44281Z","times_seen":18547077,"resource_available":true,"data":null}},"time_used":1340,"timings":{"blocked":-1,"dns":337,"connect":34,"send":0,"wait":902,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"meet-khq-google.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meet-khq-google.live/verify.php?back=/","date":"2026-09-19T08:27:19.790Z","timestamp":1789806439790,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://meet-khq-google.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meet-khq-google.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 353627\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:50:34 GMT\r\nexpires: Sat, 18 Sep 2027 10:50:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 02:03:12 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 77805\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":846252,"size_decoded":354533,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (575)","md5":"fac9419e0a4c4b45ec150e400a959d8c","sha1":"79ece6c0cdc5a7cad103ccd6e32aef80793211a6","sha256":"24426f449db0a1effc9a2118370b418d5de8b9fc11076a115baec2ff5250fffe","sha512":"2dbfa5289fe1b4811bb8fe4e409f229859ba27c753f1737c5e25c4b403bdded8e7d2aa11cae71cb1d49bd0d613e9bc15601ac2b0d14ef71fa75e08c4aa7ae296","ssdeep":"12288:CiPDodYZjHqv8FNaieyWjeKizB+JgK9RP9RzGhBXDAZY:nDod1Wv/z4JgK9R/zpZY","tlshash":"dc053be9b445b6f54322f5f1606b6418a33e9826d84c081f7199d9f06eb4c0eb07beb7","first_seen":"2026-09-14T19:29:34.285397Z","last_seen":"2026-09-19T10:31:37.527668Z","times_seen":1866,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":4,"connect":17,"send":0,"wait":19,"receive":71,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdP4oUtAAAAAJTni73zDlmagI4sqhrYiVPfd2LW\u0026co=aHR0cHM6Ly9tZWV0LWtocS1nb29nbGUubGl2ZTo0NDM.\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=zf5acrrpzigc","date":"2026-09-19T08:27:20.176Z","timestamp":1789806440176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42355\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 11:02:41 GMT\r\nexpires: Sat, 18 Sep 2027 11:02:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 02:03:12 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 77079\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82980,"size_decoded":43201,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c7a6d902a0adcd7c9223bc3457d32a41","sha1":"a8edb18d3034cd30504e947ca68ebef437c7b706","sha256":"8266c6122d4a35954f3142697506efb503322c0470d3863c9e759e2e2295e5cc","sha512":"a49bba8e98fd71591b08e158dfa5e500f0bc0b5de853ed672f9769c3be6a813dfbee5c88c5bfe8484943f4b624aa09ed07f2a41e4b4d03b9541455ce662ed4fd","ssdeep":"1536:n7Rpgh9C9ToL9gTNfWNfK4RxXnHZzhXwWx7W1bx7:n7ArC9ULiTYNC4Rv9Xi","tlshash":"85838e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-09-14T19:29:34.239267Z","last_seen":"2026-09-19T10:21:05.081568Z","times_seen":1660,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LdP4oUtAAAAAJTni73zDlmagI4sqhrYiVPfd2LW\u0026co=aHR0cHM6Ly9tZWV0LWtocS1nb29nbGUubGl2ZTo0NDM.\u0026hl=en\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=zf5acrrpzigc","date":"2026-09-19T08:27:20.178Z","timestamp":1789806440178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 353627\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:50:34 GMT\r\nexpires: Sat, 18 Sep 2027 10:50:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 02:03:12 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 77806\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":846252,"size_decoded":354513,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (575)","md5":"fac9419e0a4c4b45ec150e400a959d8c","sha1":"79ece6c0cdc5a7cad103ccd6e32aef80793211a6","sha256":"24426f449db0a1effc9a2118370b418d5de8b9fc11076a115baec2ff5250fffe","sha512":"2dbfa5289fe1b4811bb8fe4e409f229859ba27c753f1737c5e25c4b403bdded8e7d2aa11cae71cb1d49bd0d613e9bc15601ac2b0d14ef71fa75e08c4aa7ae296","ssdeep":"12288:CiPDodYZjHqv8FNaieyWjeKizB+JgK9RP9RzGhBXDAZY:nDod1Wv/z4JgK9R/zpZY","tlshash":"dc053be9b445b6f54322f5f1606b6418a33e9826d84c081f7199d9f06eb4c0eb07beb7","first_seen":"2026-09-14T19:29:34.285397Z","last_seen":"2026-09-19T10:31:37.527668Z","times_seen":1866,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}