{"report_id":"883383ba-81f4-4e47-8031-7bbe6d8f68a1","version":6,"status":"done","tags":[],"date":"2026-01-24T21:17:42Z","url":{"schema":"http","addr":"tklvze.top/","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":0,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"tklvze.top/#/pages/user/login","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"title":"Sign in","dom":{"size":5981,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3802)","md5":"0594df0a5ef53d06ffcebc60a6e40db7","sha1":"6b9507636960a19b439c26c59ba9551c2e065d78","sha256":"f804f8f7dfe9c9c5dec110e2b7be54e8ced6c85a9b3e5f6ac5a2ca1752e8c469","sha512":"8acf3f9a1b44375166374b84fb724f741ee26c79fa59a7e7b3945f26e766439e461ce8105694dd1cdccdeefb0622eeb41d5fba1f89f0be1956f97b44dabed062","ssdeep":"96:gQAViuFhWfzuYusnRPIgS7ON2DVTOkD0ZKigyrEFiM5LfRvIW5LfRT9IMYLfRn9/:gt45IgSKN2DVykD00igyrEFh5LfRgMLC","tlshash":"d1c1ff3070423c3752339a85b4d18f19b183a73bca0a5564f7f403aaafc9de1cfa56a5","dom_hash":"domhasheffca846ed573a9a49e15d10f30fca20","first_seen":"2026-01-24T21:17:51.051981Z","last_seen":"2026-01-24T21:17:51.051981Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tklvze.top/","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":0,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T21:17:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T21:17:20Z","timestamp":1769289440,"ip_dst":{"addr":"Client IP","port":47200,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 31","source":"{\"timestamp\":\"2026-01-24T21:17:20.880982+0000\",\"flow_id\":437385357696279,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"165.154.244.15\",\"src_port\":443,\"dest_ip\":\"172.18.0.30\",\"dest_port\":47200,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400030,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 31\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-01-24T21:17:20.662807+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.222.174.117","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-01-21T11:55:18.622959Z","alert_count":0,"request_count":1,"received_data":579,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tklvze.top","ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-08-01","domain_rank":0,"first_seen":"2026-01-24T21:17:43.32042Z","last_seen":"2026-01-24T21:17:43.32042Z","alert_count":50,"request_count":25,"received_data":695176,"sent_data":11123,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"oasjs.tiks-shopx.shop","ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-24T21:17:43.320987Z","last_seen":"2026-01-24T21:17:43.320987Z","alert_count":0,"request_count":4,"received_data":3323,"sent_data":2041,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tklvze.top/","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"a56ca027e9f908941bc4de9ae628e5f1","sha1":"65f0072c75cca72f81b6abf37c6d28bf4a4699f8","sha256":"0e33bdfb3c3e18bb03cf5b61199cda6f4e9e5e73e419b0bd9f57de4aa8f2d724","sha512":"92cee76c582575aa5977a11203c57878d42049d3916e3693b49d670923ed1321ffc5da8a59d3c1f5c0457fb21072038da6801d493cc1aa43d51bd64a8c73f52c","ssdeep":"","tlshash":"7de068c360b73a4c2220c156304bc4031fb60cb79e864da12c8877a59bf9a4bc56d899","size":365,"data":"","first_seen":"2025-03-28T11:32:49.832844Z","last_seen":"2026-04-16T20:10:32.032727Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/#/","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c3033f934b17840d8f2443dcfdc4f4e8","sha1":"23389a653875b402c718931c5fa15bb5ff58db79","sha256":"4dbbc054b1814682ea810bd50406569aae8d183f1061e20ec5fb444cb8e0f421","sha512":"f5a2a76b9fb2158ffbbc51986e7a6e75166523b6c768956cb9eea60b99b41fd088e3cefced091bd5604142df84447a654c41f5b1d01d58a34912bc293ba594c0","ssdeep":"","tlshash":"80c08cc6a0c62d205602a65120ff36e4a0348026704c2b028c94d8983e230f09233f98","size":151,"data":"","first_seen":"2025-04-02T12:15:09.143734Z","last_seen":"2026-07-02T07:53:55.433166Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/#/","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1ca49f0e439cf34669924908e59b2897","sha1":"efea6ef6bd12f3ded99d07b429c6af21c23ed826","sha256":"9f9ee6011e8f88513c2761906180f430478c9d9835d4e74a211cafd3c79b955e","sha512":"f5dfd73abfc4c47819a1c10e68b974d2253a67fd9fb113e510809ee5ea650d5dd1f003dedcd6f88235e4e5b696f28c5e2f18526e794579f3b9f5a1d7db17bb21","ssdeep":"","tlshash":"fec08cc4b0c22d102602a91010af24e49024406770481b168c94dc882e224b09237e98","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-10T05:13:29.738728Z","times_seen":600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/#/","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7e98f35f23795ecb1a944bbefa9e40a7","sha1":"9f6826623e1d677abe50f4755523c8986d229bc3","sha256":"2f34fa8f7eea8ee00070214da3db09639f6d9b89111c8ca090fcf04954be6ed3","sha512":"7cf3f08fbd52f6a4f645721a24b3d1cabfe28d13473087fb0a98eb47438edcfe9fec95d4b4ee73b2f4199e8f896e8f161d1a10175c400ee88e1d2d030dfd17da","ssdeep":"","tlshash":"8ec08cc4b0c26e002602691415af28e4a024402671481b038ce4d8582e220b08233e9c","size":138,"data":"","first_seen":"2023-05-05T08:00:34Z","last_seen":"2026-08-10T05:13:29.73613Z","times_seen":502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/#/pages/user/login","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"fbdb85a14b4867948da0eb33261859ef","sha1":"03782f8357f95f9b4e1b669ce3ac9e8b24c5bfb8","sha256":"93688ffd3bdd4665c61b9d4a16d57766a1786fffbab8b4c3afa718903d4e3bc1","sha512":"956a633905a8c4298b6787ac37615369eb7ea66c2e536b000f8322b27941123995f492433643cf37ac26714e7d80635cd6fdb0a4d688462e374c76cb0c824113","ssdeep":"","tlshash":"2ac08cc4a0c26d001602645114af24e490348026744c1b028d94d8483e220b48233ed8","size":138,"data":"","first_seen":"2023-05-05T08:00:34Z","last_seen":"2026-08-07T01:18:37.919392Z","times_seen":370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/#/pages/user/login","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0ae64cce4f24529caa56156b159bdade","sha1":"3f1c5a480a93a0bfdc86eb0d7769ea098682b7a5","sha256":"99cb12f023e5c6752e9a7e0132343acf246a432e31d1e7326a3fad10704711a5","sha512":"0ce54f9c86d027c6895c449a7be022ab96d9df608d39f56a3eb0c2721f49aac55b9f82668c5265ba231c626d7a841bcb68c13b169f5f5f9be40244d0c3abec61","ssdeep":"","tlshash":"eec08cc8a0c22d002602a45010bf38e4a024842770481b028de4dc4c3e230f08233e98","size":141,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-08-10T11:55:45.626286Z","times_seen":2562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/#/pages/user/login","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6ac9071d9932331d6f13c28662df3eaa","sha1":"f6eb1baa0bd1ae6f59ae6aceb867f897511aeee1","sha256":"b4c3e0db43ddfac91e82f4f458144da6e4066d57aa41fed04d86cd9b3c0e368d","sha512":"cefe8e65fa5d8690b53f96ad56320e72dba887c3ccd4df0d4eb9000a5bc903b77d1b7ae8b1ad7ec25ec0443e8fd41327e3deb9238f38884b08549579c918e3ca","ssdeep":"","tlshash":"25c08cc4a0c22d201606682014af24e490244026704c2b028dd4d8492ea34b48233e98","size":140,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-09T02:30:21.185967Z","times_seen":416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/#/pages/user/login","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"35050fd32ea313678391d9d92c3836c4","sha1":"6c7c3225c367d3c31d7e5756f6f4b5eed0f12196","sha256":"8dcebcc7e49e3300dd1530138199bf2824c584a3633198c81f5d2522949068a9","sha512":"49f801552c0ae278ef0cca004cee91a0d943c04d5535bcaab6c0968e75a1932d045f741e06136b58f6907fb36a71f69793c13c9bcdd9db32c506c200dae7bf09","ssdeep":"","tlshash":"9ac08cc5a0c22d001602b41110af28e4a0248026b0481b02cc98d8882e230f09233ea8","size":140,"data":"","first_seen":"2025-04-02T12:15:09.129066Z","last_seen":"2026-04-09T10:25:47.008764Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/#/","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"41bbcc2c56aa15aca722543a89a6c730","sha1":"406498af64c571b878803bce96126d82f84fe1fb","sha256":"dcdb9d7d09bbc4280e61709eba14765c1788e29f96bb2d757d7e41e1ca174807","sha512":"48052a6d22581aefb3f456e7ef17080ec74175298ef4d6f05275e19043375211c712175b86b2a51347902345cd7d2d47535dc383acc4b70757be798e6d778136","ssdeep":"","tlshash":"bcc08cd4a0d62d002a12a45430bf25e890344026b0486b03ccd4e8592e234f08233e98","size":148,"data":"","first_seen":"2023-11-01T14:09:04Z","last_seen":"2026-08-09T01:13:35.323823Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/#/","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"fb022e0fc11abdf604a74bcb470ea60c","sha1":"a5bf4ee790d7c00bab585960394e4b90992d51d1","sha256":"5ac600855f9c5811c4bb200f6711b6d78d6bcfd5448ca3c60bd456d938fe82be","sha512":"355fdf4d5b87944e8678d6f2c9cd863f6346a7ce36509f01466125458d2333aff80543e0cb875eba30bba7be6752d3ac3b4c25287084d2efc9c7c7720b7a40de","ssdeep":"","tlshash":"60c08cc6a0ca2d205602e59010ff26e4a0348026704c1b038cd4d8583ea30f08233fa8","size":149,"data":"","first_seen":"2025-04-02T12:15:09.135382Z","last_seen":"2026-07-02T07:53:55.434111Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/#/","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"36f26a090abdcc337bfc430f7eba2abf","sha1":"bde4b3d8e5ebea671a9a85174cfb4058a4bf0adb","sha256":"217e71e9b0dbcd6bf49e06ed0c8570fc448a800192167db81cba4cbaefddce78","sha512":"a191f331612f086b236bcab8dc8340639cec8859afceb86edcaa7913e42165ff3d184a5a5f4bac7ea93f59aeea3c76e505c456f9f5da206347076658fc271a87","ssdeep":"","tlshash":"12c08cc8a0c72e101a12655015bf24e4a024402a70489b038c94d8482e230b09233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-10T21:23:34.691465Z","times_seen":1733,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/#/pages/user/login","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2ab53648be966bb7dc9cdc819fbe6c51","sha1":"ef5204a8800df52adc9f349415590bab2b625388","sha256":"d819bb1f3f5278b45a1f366032432acdc393afbe4f07b30b3f911ea17aa016da","sha512":"15947b3f1181b15bd74c0c44d8884c4863a5d77adc3a870907c6068d29f0406effe81b153ab3042bb89802996df33c09408e3f75e723cd5b79724a2b598c61cd","ssdeep":"","tlshash":"69c08cc8b0c22d112a02681428af35f89028842a74891b0a8cd8e8883e230b08233ea8","size":149,"data":"","first_seen":"2025-03-03T13:52:35.679892Z","last_seen":"2026-08-01T05:36:23.630855Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/index-DtTI4EqK.js","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e07c80577dca03bab9e378b581f9747","sha1":"0a07c03348610b3fa75010fdfbe833f6ba403d0a","sha256":"4573f62bded669516f45ed7d8b2e7052eb44a7fdda605f9a175625385798841a","sha512":"cb55cb37513ce7cced9481fe080c37520dc820d67256ea812e63fa791b0e0da31f715c7dd0ab1c0608d6e43f828f29a48385946c675cc79fee304e86b8a0c1b7","ssdeep":"6144:WoHWKHX+sBYmweKdx8wSVaV/HL5HXH5i+/sr0W5f+s4tRBpozQI/C+II+er:WoHWKHX+sBYveKQSHXH5i+/sr0WFhA/+","tlshash":"f3845ce53285742307b659d660bb1605b2391e91b40ec498b17cddea3ab7c0993ebf3c","size":373909,"data":"","first_seen":"2026-01-24T21:17:51.076801Z","last_seen":"2026-01-24T21:17:51.076801Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/_plugin-vue_export-helper.BCo6x5W8.js","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"41bf66d156aac38dbf7a45b53cb4db18","sha1":"4aa693a2afcc34b6a577e1bfc4be3ef5a458dce0","sha256":"a7dbb0eaed9de79041d555c4563be4bb0514099b8d169a2b548ab2d07102cb55","sha512":"64e1a5c2939052c93692338bf78b66723ae6673121d2915a9fb0848449e4b2657c1a31c8940bc7c9ec77554fd4c04ffae1b787297f0fba23983a987e85caee15","ssdeep":"","tlshash":"40b012e500824138432175c796f444649e08005c394756d144480d52c143080541bc3c","size":91,"data":"","first_seen":"2023-03-26T04:51:44Z","last_seen":"2026-08-07T04:00:25.99919Z","times_seen":1793,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/#/","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e1b5f2113b32bf9bd78a7cb2fecb558c","sha1":"b281a8dc96941029ae15ee999dd5964d58abc4d2","sha256":"d0db13aa8a9394432786af6556f6c84620d3d2c09dbd25453d93991452d17ac5","sha512":"ab94e78bcfea1ca62961f88e2ae011d9f5d1c4d083c15d68d58c07d9b62047c275276c0ebe7c26ee382774ecaa3fcb9ab05e561e627cd1094c93aa364b5b4f42","ssdeep":"","tlshash":"b7c08cc4a0c23d001622641068af34e4a034402ab04c1b428e94d8482e230f09233e98","size":147,"data":"","first_seen":"2023-10-16T14:25:23Z","last_seen":"2026-07-28T19:41:49.926354Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/#/pages/user/login","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"402af1f332d7e47e1c9622baca6a9632","sha1":"97cab97b022b7762f7dcfa5f8d82353769f6529f","sha256":"f69edf676a645ac6b20b9e4c9bb38e51b0fed6ad3971b9447f5ad9ff351e68f2","sha512":"2864db404bdc02f479db9573ea830e0d93249212968d23b13d3ec9ed3ab12741b1ba3622b6d05afb5aec1fb8300082c15283bc4d0c93fe564fa2e61d2e7c3c6f","ssdeep":"","tlshash":"0ec08cc4b0c22d006606642064bf2ae4a0244426b048ab228ee4dc482e630f08233ee8","size":149,"data":"","first_seen":"2025-04-02T12:15:09.138546Z","last_seen":"2026-07-02T07:53:55.427305Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/#/pages/user/login","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a83b08e17f61e1dddfc69fb7761f5640","sha1":"89fc73f2f65ce565b8c9561086edbe9f0867edff","sha256":"639d5da1cf88e2e4447bbb9acc77eb71220c55976ee46f95290e182c82d92570","sha512":"84c2f7ee62ef97e50773f0215dcbc28528a81f2cd8189dfcb8d8de29c795d5e688e6da2ab2b346a7b22696a3810e1c094ae5b43499613bee165c0985033cd7da","ssdeep":"","tlshash":"27c08ccca0c32d002607aa1068af38f4a034846b704c1f038eb8ec6d3e734f49233e98","size":159,"data":"","first_seen":"2023-08-10T22:05:17Z","last_seen":"2026-08-09T01:13:35.313283Z","times_seen":207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/ajax.DIPkPUzn.js","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"15862b46cb1172a72a774dbc3517293e","sha1":"40ca55c1101a759e512f1f7b2b8285ffb420c65a","sha256":"eb88755b187cbb9dc1ed23bfa1d6f65ccd2e531bbcc28ba4630fae3d2ccc0c84","sha512":"6f04c0c176716fbc36fa335db4e214600854d9c51a5f5b170c677439f1ca2935b144b2e1e56cbd790a898ba703626d23bd9ec2aa7769bdd82bf52ce800c37ab3","ssdeep":"96:e/pM42wMzrSH5cmsLynIrSqCLxIJXncaVlhvoEdAiHF4qJL7UmtDZr:e/2sHBMeXIJXc6hdH3AmBJ","tlshash":"379193cb318af4b663a975a2d02a2c4bf7796744314f4958f158f593383226c8167f35","size":4300,"data":"","first_seen":"2026-01-24T21:17:51.067902Z","last_seen":"2026-01-24T21:17:51.067902Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/pages-index-index.CmnXIAje.js","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"61d21824cec88ab4750a9f11ad9dae83","sha1":"f4caaa68cd0ea0ae830a687159f9a943675557fe","sha256":"0b975adf474933a60b3b8b7ac94f1228c127358c3c82791ea035bd327fdead1e","sha512":"bd6e59f3441272dc695e799f558641baaa79095cbff6257bb46f3c907e07854be51c17b4468ff35a549415c6f4ec4eb07d319526cc6e671945304236b19f61cf","ssdeep":"384:lwFh3zZkxlihKNF38PL6lU9M9m/S4hGU4re6lC:lwhyrihQa6ldEGNe","tlshash":"91623c147b1dd328699b2508e47e824039b25c9eda703d5db2f09a3f7165da807ea33f","size":14793,"data":"","first_seen":"2026-01-24T21:17:51.061351Z","last_seen":"2026-01-24T21:17:51.061351Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/pages-user-login.BBobUq4a.js","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"589dac4e190baa1258abeeb489acd56e","sha1":"fc94eb2e70f86343864029d37648dc923432408b","sha256":"24d4367a907a2b863531039d9cb3583e23655b5b05ba384d097bb485432e4213","sha512":"ca4eceefd6f9ab424f6c53c833531349e02887d2e3b105094a250158d032ab41d0782568598c192006f24a0257fa0b2031058f0d3fae3e4d6002407255ee14f1","ssdeep":"","tlshash":"e341100db5e99a2516964064a01aca00717ab4cfca013c0d73f04a6f3ea7c99d39ab2b","size":2384,"data":"","first_seen":"2026-01-24T21:17:51.055173Z","last_seen":"2026-01-24T21:17:51.055173Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/#/pages/user/login","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"dc04525caa1a384f8f939f263003a2df","sha1":"7ee80479861fc6580a67757beae96ce4793168ae","sha256":"18ab5411c20c30007946f0636144273e8e2fdbe06da91b3c7d853280853b7c7f","sha512":"98faa9495858b9889876296f263173740963118b4be0618560c916497f1dfb4071c7fe322606d698a90c6b8a0ecd593e8530f0a24786e837ddb1a59cec4689c8","ssdeep":"","tlshash":"f4c08cc5a0d22d102606685014af25e49024803674881b028c98d84c3e220b49233ea8","size":140,"data":"","first_seen":"2023-04-27T07:37:24Z","last_seen":"2026-08-10T18:35:24.455311Z","times_seen":2932,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"tklvze.top/static/images/tarBar/service.png","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:22.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /static/images/tarBar/service.png HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Feb 2025 18:06:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67be06ae-117d\"\r\nexpires: Mon, 23 Feb 2026 21:17:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4477,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bc6a1c97a38c7f85dfab8c4a12776d64","sha1":"13cd24f98ff6c759a47d64db5e3640739aa7822b","sha256":"314b2b78ee8e9ce6b901ead6842a1e8af29573c05ae4a7b73e5906abba49d698","sha512":"26f5f74b5019dd010b96e7d6eb1bd7613d4b700357410fdb921f4973ceea091f894a5433e3cbbc809dc1318187d3bbdbeb2fbcad90e402f21acc64a56d139ed7","ssdeep":"96:UlATa/DjRnqe0e6nghrYvauavz2zUb0tD/ikzc/4a:+brjRnqe0FnghuYvwUb0dvzc/4a","tlshash":"66917c2263519fc8a97b8fa13fcc00d3587a0c36ccac82838b667c9b9299724a880517","first_seen":"2025-04-02T12:15:09.121471Z","last_seen":"2026-07-02T07:53:55.407172Z","times_seen":11,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/pages-user-login.BBobUq4a.js","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:23.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /assets/pages-user-login.BBobUq4a.js HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tklvze.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ad9d98-950\"\r\nexpires: Sun, 25 Jan 2026 09:17:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2384,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2383)","md5":"589dac4e190baa1258abeeb489acd56e","sha1":"fc94eb2e70f86343864029d37648dc923432408b","sha256":"24d4367a907a2b863531039d9cb3583e23655b5b05ba384d097bb485432e4213","sha512":"ca4eceefd6f9ab424f6c53c833531349e02887d2e3b105094a250158d032ab41d0782568598c192006f24a0257fa0b2031058f0d3fae3e4d6002407255ee14f1","ssdeep":"","tlshash":"e341100db5e99a2516964064a01aca00717ab4cfca013c0d73f04a6f3ea7c99d39ab2b","first_seen":"2026-01-24T21:17:51.055173Z","last_seen":"2026-01-24T21:17:51.055173Z","times_seen":1,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/static/images/tarBar/mine.png","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:22.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /static/images/tarBar/mine.png HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Feb 2025 18:06:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67be06ae-d8a\"\r\nexpires: Mon, 23 Feb 2026 21:17:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3466,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"80b0567ec69baabc752b469be8b91973","sha1":"e0f8246e51dbd91fd3a6d13a63dc97a6c98be7b1","sha256":"5ba337af5b79692317ded775bbb38d19f2aad837b15f00903f34e8a1a41dff11","sha512":"416cc31a00e0baaa17fec345763045ca8a3e734c8ecbf68c688f74144a69410d3836f254e3ffc09bc5d174a12510dd757afdd9880f3cf511c53c1d0e220121f5","ssdeep":"","tlshash":"f5612c6289f0cbfa13667206e3f17cb447656b1869b5e821092b76e79cb4810b560fec","first_seen":"2025-04-02T12:15:09.116678Z","last_seen":"2026-07-02T07:53:55.408463Z","times_seen":11,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/index-D0dVvbFe.css","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:22.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /assets/index-D0dVvbFe.css HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ad9d98-c0d\"\r\nexpires: Sun, 25 Jan 2026 09:17:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3085,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3084)","md5":"c1f5133553d386d330833c0a02a53114","sha1":"e043f0a98a1e9ab0c1875c03fe36c6d2af8c0bf6","sha256":"b72bb1c1e2f0cb16552564b50762eede85e28f202d2dec5770d440e0a22c012f","sha512":"412464a3346eaf3ed634fe14749991d6dc1128fb605b9157d5e957d3cc9ae027c98f16731303c091e3a58eb849764f79ab7617de520e26e48bf8b8683dedf12d","ssdeep":"","tlshash":"ab51ad21b5e8211db03fd451d8f065fd7054b367d333273aad1b3d21c8a709b2a65ba9","first_seen":"2025-05-19T23:12:24.354292Z","last_seen":"2026-06-08T06:01:07.231573Z","times_seen":8,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/recharge-BwBnsQgI.png","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:23.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /assets/recharge-BwBnsQgI.png HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ad9d98-146a\"\r\nexpires: Mon, 23 Feb 2026 21:17:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5226,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"afdc687b8e82b46b4235d1347e3e7cf5","sha1":"e3887ecfba03a499ad163af8a7ec9c167fa3c5f4","sha256":"8ff7c02286f5d26baf94c55248d341d99d5e424b20d57e89555fd0a106946dd3","sha512":"5e827b9df18f11608ae93637e6260c24ea43a972d90e3cc877d1b030da9842bdded3595b8e61415e763fdcb2c630e709c9d03fa18408f045f5c4f89f56a436ae","ssdeep":"96:f19y33l81x6F4lIiVjhrOxFCEvFlvIcDf0jQDUrw+ndQJqi9Gnu2W1kvgc087I0+:ml81EF4lIe9OxFCENlf4uUrw+aJqi9TF","tlshash":"c8b19ebfc6b4c6926cb54e938059f5a28d70b158c1418ee60bf7840dd0243f8e382b6b","first_seen":"2025-04-02T12:15:09.103563Z","last_seen":"2026-07-02T07:53:55.419668Z","times_seen":11,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/uni.0f0451ba.css","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:21.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /assets/uni.0f0451ba.css HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ad9d98-3c69\"\r\nexpires: Sun, 25 Jan 2026 09:17:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15465,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15464)","md5":"b52578051f2ed0347355475d6f99a236","sha1":"2a4339daab182a5d57c670fa7fb829f1d3aa40bc","sha256":"0f0451ba9e70d16a8ef9d5b8ad229df91c6209a4806fb5efac9aa5b60a09e186","sha512":"e5e75872d768be0496842d58fb7237fed71e82069bebc6edbf5ae7bfb6a56edf7b87232d6c4ecca66b8006638a387e62505882973d2a6ed3552744960eb0123c","ssdeep":"192:Ujj8LGJ0CQLnWL9MNXVA8e+l+beizy8N2TZ2ED/PhcvNc/J4wc:UXpmLWLL8Aei+FZVBV/JXc","tlshash":"da6274318d02253bf57bcb2a65e1eb4f2232c473d9132b2eab3870244f9e5c92576785","first_seen":"2025-11-27T11:47:00.961109Z","last_seen":"2026-07-02T07:53:55.423629Z","times_seen":5,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/pages-index-index.CmnXIAje.js","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:22.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /assets/pages-index-index.CmnXIAje.js HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tklvze.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ad9d98-39c9\"\r\nexpires: Sun, 25 Jan 2026 09:17:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14793,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14792)","md5":"61d21824cec88ab4750a9f11ad9dae83","sha1":"f4caaa68cd0ea0ae830a687159f9a943675557fe","sha256":"0b975adf474933a60b3b8b7ac94f1228c127358c3c82791ea035bd327fdead1e","sha512":"bd6e59f3441272dc695e799f558641baaa79095cbff6257bb46f3c907e07854be51c17b4468ff35a549415c6f4ec4eb07d319526cc6e671945304236b19f61cf","ssdeep":"384:lwFh3zZkxlihKNF38PL6lU9M9m/S4hGU4re6lC:lwhyrihQa6ldEGNe","tlshash":"91623c147b1dd328699b2508e47e824039b25c9eda703d5db2f09a3f7165da807ea33f","first_seen":"2026-01-24T21:17:51.061351Z","last_seen":"2026-01-24T21:17:51.061351Z","times_seen":1,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/home-bg-DHK5U4-9.jpg","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:23.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /assets/home-bg-DHK5U4-9.jpg HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/assets/index-D0dVvbFe.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ad9d98-123b2\"\r\nexpires: Mon, 23 Feb 2026 21:17:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74674,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1170x2114, components 3","md5":"7eacac90aa896aafe7d5e6be045f545c","sha1":"446211b35d40edbe8e1c16f4bdb9142d798ce871","sha256":"09f98df94a941289aba189943537bca1d1ad606b6f9eaae71978be7645eda95c","sha512":"6db57692b0b84ecf92cded639cf15b13456e5b62543b97b7d76d82ce5595b10a6eaaa5108adaa29ee52ae3ab0d6346f48ded01edc6a966344b6fdb53784fbeb6","ssdeep":"1536:LJpNICCtuani9MXThiSr9GN3WRp5pHHH1Dg1rZggL:LzNI1ca2Mdr983WR1HHH21rKgL","tlshash":"2a73d093678ac156c8bc577985377602ac334da0e29ae77925c3d00a257f7e0fe1e0b9","first_seen":"2025-05-19T23:12:24.357656Z","last_seen":"2026-07-02T07:53:55.414324Z","times_seen":9,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oasjs.tiks-shopx.shop/user/logout","fqdn":"oasjs.tiks-shopx.shop","domain":"tiks-shopx.shop","tld":"shop"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:24.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oasjs.tiks-shopx.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 21 Jan 2026 19:18:45 GMT","end":"Tue, 21 Apr 2026 19:18:44 GMT"},"fingerprint":{"sha1":"BA:E1:E9:BC:38:98:23:2C:06:52:DD:A6:52:A1:D9:96:B7:AA:CE:9E","sha256":"19:36:0C:A5:B5:9B:EC:CB:01:D1:DF:8B:1F:07:61:3B:F5:DB:78:10:BA:CC:D6:40:8B:27:1C:AC:C7:6B:43:3A"}}},"request":{"raw":"OPTIONS /user/logout HTTP/1.1\r\nHost: oasjs.tiks-shopx.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://tklvze.top/\r\nOrigin: https://tklvze.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:24 GMT\r\nset-cookie: think_var=en-us; expires=Sat, 24-Jan-2026 21:47:24 GMT; Max-Age=1800; path=/; HttpOnly\r\naccess-control-allow-origin: https://tklvze.top\r\naccess-control-allow-methods: GET,POST,PATCH,PUT,DELETE\r\naccess-control-allow-headers: Authorization,Content-Type,If-Match,If-Modified-Since,If-None-Match,If-Unmodified-Since,X-Requested-With\r\naccess-control-expose-headers: User-Token-Csrf\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T21:17:20.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:21 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ad9d98-44d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1101,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"a82d9226a77b88ad05219f72b2f751cc","sha1":"0d0dbb6b486d14e8f95894c8e372f9350b7f217c","sha256":"19817fb55ee1bee762356d80c41c256ac0ee993337ed0eeb94ecb9c8649a76c7","sha512":"c3a03245df06ca717d5ad921a5c74f80161f3c770bc3737c2179b06770975808255f2b57db90c87be789deecabe56d7230d1eb35f75c3f088dc962d26ea9a6c1","ssdeep":"","tlshash":"a01103835491590c2320431424e6e8155ea29e77ce4add903492b1be5ed4b86cc9f878","first_seen":"2026-01-24T21:17:51.064789Z","last_seen":"2026-01-24T21:17:51.064789Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1750,"timings":{"blocked":766,"dns":320,"connect":218,"send":0,"wait":218,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/index-DPwOmC44.css","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:21.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /assets/index-DPwOmC44.css HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ad9d98-2a72\"\r\nexpires: Sun, 25 Jan 2026 09:17:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10866,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10865)","md5":"a8ad7fa7a4b8c32f9ba1b3b77278e191","sha1":"43d27b00fefd01501a0ebc761e5e983c0ca2f061","sha256":"53949c7208293e823c8750f1df528d58d0f7a49796978559eb85f0de79cd207c","sha512":"db6d566c3c80321d58b2a82e4b706640eea2e43e088cb2ba15350646fe6a4e407cdac8e72e048a4a445f4ee5e8be77c7282091b386fbc40f858f847e16718822","ssdeep":"192:3/Pdfo/SnCDdj1yLVnuGDzFztIasxUXcacmBcm0cUqra+7p/+trwJMZ7OZeGxZIp:qgDzFzaXJDuVYFOzzzDz9zRz/zYB","tlshash":"7f22b63229162d3dedbfc267b8e2967a6123e032d46353ede3757612404e5ef4872385","first_seen":"2025-11-27T11:47:00.941261Z","last_seen":"2026-07-02T07:53:55.424649Z","times_seen":8,"resource_available":false,"data":null}},"time_used":875,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":875,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/static/images/tarBar/pre-order.png","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:22.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /static/images/tarBar/pre-order.png HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Feb 2025 18:06:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67be06ae-c8c\"\r\nexpires: Mon, 23 Feb 2026 21:17:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3212,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"b7f62f21ce5ba8dba17d492f29428b21","sha1":"29d2f8aee3ba6d23e6c7d45cb752ec6786eeb527","sha256":"b7a23c06ba1f18c8c72bdc4e0b2f7e8c52e403ee4e8efb426b5dc90c924d425d","sha512":"e64401c52e2160751ee2ce3cbfc5f19a37968045428288679fa17b1cc283c9a4deee23db645ccb29955b211144f7a78161db7a773db4783c1bcca8cb89c9514f","ssdeep":"","tlshash":"3b614c063cb3699f0aa59173d82e537fcc12a83e39c50232ba53bf68e41562a8400887","first_seen":"2025-04-02T12:15:09.113431Z","last_seen":"2026-07-02T07:53:55.406183Z","times_seen":11,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/pages-user-login.BBobUq4a.js","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:23.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /assets/pages-user-login.BBobUq4a.js HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/assets/index-DtTI4EqK.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ad9d98-950\"\r\nexpires: Sun, 25 Jan 2026 09:17:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2384,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2383)","md5":"589dac4e190baa1258abeeb489acd56e","sha1":"fc94eb2e70f86343864029d37648dc923432408b","sha256":"24d4367a907a2b863531039d9cb3583e23655b5b05ba384d097bb485432e4213","sha512":"ca4eceefd6f9ab424f6c53c833531349e02887d2e3b105094a250158d032ab41d0782568598c192006f24a0257fa0b2031058f0d3fae3e4d6002407255ee14f1","ssdeep":"","tlshash":"e341100db5e99a2516964064a01aca00717ab4cfca013c0d73f04a6f3ea7c99d39ab2b","first_seen":"2026-01-24T21:17:51.055173Z","last_seen":"2026-01-24T21:17:51.055173Z","times_seen":1,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/_plugin-vue_export-helper.BCo6x5W8.js","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:22.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper.BCo6x5W8.js HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tklvze.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 91\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\netag: \"68ad9d98-5b\"\r\nexpires: Sun, 25 Jan 2026 09:17:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"41bf66d156aac38dbf7a45b53cb4db18","sha1":"4aa693a2afcc34b6a577e1bfc4be3ef5a458dce0","sha256":"a7dbb0eaed9de79041d555c4563be4bb0514099b8d169a2b548ab2d07102cb55","sha512":"64e1a5c2939052c93692338bf78b66723ae6673121d2915a9fb0848449e4b2657c1a31c8940bc7c9ec77554fd4c04ffae1b787297f0fba23983a987e85caee15","ssdeep":"","tlshash":"40b012e500824138432175c796f444649e08005c394756d144480d52c143080541bc3c","first_seen":"2023-03-26T04:51:44Z","last_seen":"2026-08-07T04:00:25.99919Z","times_seen":1793,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/ajax.DIPkPUzn.js","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:22.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /assets/ajax.DIPkPUzn.js HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/assets/pages-index-index.CmnXIAje.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ad9d98-10cc\"\r\nexpires: Sun, 25 Jan 2026 09:17:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4300,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4299)","md5":"15862b46cb1172a72a774dbc3517293e","sha1":"40ca55c1101a759e512f1f7b2b8285ffb420c65a","sha256":"eb88755b187cbb9dc1ed23bfa1d6f65ccd2e531bbcc28ba4630fae3d2ccc0c84","sha512":"6f04c0c176716fbc36fa335db4e214600854d9c51a5f5b170c677439f1ca2935b144b2e1e56cbd790a898ba703626d23bd9ec2aa7769bdd82bf52ce800c37ab3","ssdeep":"96:e/pM42wMzrSH5cmsLynIrSqCLxIJXncaVlhvoEdAiHF4qJL7UmtDZr:e/2sHBMeXIJXc6hdH3AmBJ","tlshash":"379193cb318af4b663a975a2d02a2c4bf7796744314f4958f158f593383226c8167f35","first_seen":"2026-01-24T21:17:51.067902Z","last_seen":"2026-01-24T21:17:51.067902Z","times_seen":1,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.222.174.117","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:25.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Sun, 25 Jan 2026 15:17:26 GMT\r\ncache-control: max-age=64800\r\nset-cookie: __uni__uid=rBEQa2l1NuZjYyCkAx+LAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-10T18:54:13.738025Z","times_seen":20195,"resource_available":false,"data":null}},"time_used":1714,"timings":{"blocked":726,"dns":2,"connect":262,"send":0,"wait":262,"receive":0,"ssl":459},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/ajax.DIPkPUzn.js","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:22.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /assets/ajax.DIPkPUzn.js HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tklvze.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ad9d98-10cc\"\r\nexpires: Sun, 25 Jan 2026 09:17:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4300,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4299)","md5":"15862b46cb1172a72a774dbc3517293e","sha1":"40ca55c1101a759e512f1f7b2b8285ffb420c65a","sha256":"eb88755b187cbb9dc1ed23bfa1d6f65ccd2e531bbcc28ba4630fae3d2ccc0c84","sha512":"6f04c0c176716fbc36fa335db4e214600854d9c51a5f5b170c677439f1ca2935b144b2e1e56cbd790a898ba703626d23bd9ec2aa7769bdd82bf52ce800c37ab3","ssdeep":"96:e/pM42wMzrSH5cmsLynIrSqCLxIJXncaVlhvoEdAiHF4qJL7UmtDZr:e/2sHBMeXIJXc6hdH3AmBJ","tlshash":"379193cb318af4b663a975a2d02a2c4bf7796744314f4958f158f593383226c8167f35","first_seen":"2026-01-24T21:17:51.067902Z","last_seen":"2026-01-24T21:17:51.067902Z","times_seen":1,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/favicon-BwqC9HMk.ico","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:22.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /assets/favicon-BwqC9HMk.ico HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:22 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\netag: \"68ad9d98-10be\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"ec7f15a5d7e173a70d85deb96f395aa7","sha1":"59b0a0e590aa24d50fe2b414e85bfebb999480e5","sha256":"32d05bd2db26d8b0155a349bd0fffc3419c89a4a59459b11b3d316ebfb3bc8ea","sha512":"6df2ff15c56d41d83c1db8b8693beae0688caeeb3509a7dfa6dc24280b681c31b124085864f8ffff76621d5ae3e51a2b87d170e1bfda9a119ee7c9c7013f33dc","ssdeep":"48:W/Gtsj3WDIGTr2jvcHUQfGKYK5xH68fC7Dc2Ni:WGtY2TTr2bMMKYK/rfC7DHw","tlshash":"fd911485166e1814d73107790a85fb37235b6dc82326452026c2bcefb773e86591b54e","first_seen":"2023-10-13T14:12:38Z","last_seen":"2026-08-09T06:35:50.987075Z","times_seen":131,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/_plugin-vue_export-helper.BCo6x5W8.js","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:22.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper.BCo6x5W8.js HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/assets/pages-index-index.CmnXIAje.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:23 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 91\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\netag: \"68ad9d98-5b\"\r\nexpires: Sun, 25 Jan 2026 09:17:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"41bf66d156aac38dbf7a45b53cb4db18","sha1":"4aa693a2afcc34b6a577e1bfc4be3ef5a458dce0","sha256":"a7dbb0eaed9de79041d555c4563be4bb0514099b8d169a2b548ab2d07102cb55","sha512":"64e1a5c2939052c93692338bf78b66723ae6673121d2915a9fb0848449e4b2657c1a31c8940bc7c9ec77554fd4c04ffae1b787297f0fba23983a987e85caee15","ssdeep":"","tlshash":"40b012e500824138432175c796f444649e08005c394756d144480d52c143080541bc3c","first_seen":"2023-03-26T04:51:44Z","last_seen":"2026-08-07T04:00:25.99919Z","times_seen":1793,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/login-BNF1lWi2.css","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:23.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /assets/login-BNF1lWi2.css HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:23 GMT\r\ncontent-type: text/css\r\ncontent-length: 957\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\netag: \"68ad9d98-3bd\"\r\nexpires: Sun, 25 Jan 2026 09:17:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":957,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (956)","md5":"a0444527a397963d9cb373dd462cc9f7","sha1":"ce1e4002d329201bf4e3d6816ea389c97769fea7","sha256":"0b9ee88fa32fad43084af040c10bd9704ffbe23a161966d9d304e2f070102b33","sha512":"4ae5b07e86d283295aa972ac1ab1301e2184e4e469685212d3afd9fa7b349710d260276ffb3f81ee8f6788065f8219769d43d7b6a4bc9bbdb42d2d24b968ea95","ssdeep":"","tlshash":"b0119e30b5cd7438bdbbc2545a7051e5101ac3a3d5264729b0f63635cd975b33b61b88","first_seen":"2025-05-19T23:12:24.351606Z","last_seen":"2026-06-08T06:01:07.232451Z","times_seen":8,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/static/images/tarBar/order.png","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:22.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /static/images/tarBar/order.png HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Feb 2025 18:06:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67be06ae-8cf\"\r\nexpires: Mon, 23 Feb 2026 21:17:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2255,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"156559d0c0c770c64d120342a7e2250b","sha1":"300ac1646e0316ca117afb0118516165f95e69ef","sha256":"522012a324d4eb4dbb8d6694dfae55e868ceb2c0ee6055e0dc118203422dbd30","sha512":"3ab9b8752b43416b906692ad71a04631c1ab934b0f4f1d5a45e638a05e0fe52c91c66c932fcff0f67cfad0c5ca1be23c1bac4881d5a3c0db463e28f07f756455","ssdeep":"","tlshash":"5041c98a8755cb71a6dc230d86f06d01549a599d751c88feb4ee2317e04bf02d77a6c3","first_seen":"2025-04-02T12:15:09.112254Z","last_seen":"2026-07-02T07:53:55.413319Z","times_seen":11,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/pages-index-index.CmnXIAje.js","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:22.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /assets/pages-index-index.CmnXIAje.js HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/assets/index-DtTI4EqK.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ad9d98-39c9\"\r\nexpires: Sun, 25 Jan 2026 09:17:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14793,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14792)","md5":"61d21824cec88ab4750a9f11ad9dae83","sha1":"f4caaa68cd0ea0ae830a687159f9a943675557fe","sha256":"0b975adf474933a60b3b8b7ac94f1228c127358c3c82791ea035bd327fdead1e","sha512":"bd6e59f3441272dc695e799f558641baaa79095cbff6257bb46f3c907e07854be51c17b4468ff35a549415c6f4ec4eb07d319526cc6e671945304236b19f61cf","ssdeep":"384:lwFh3zZkxlihKNF38PL6lU9M9m/S4hGU4re6lC:lwhyrihQa6ldEGNe","tlshash":"91623c147b1dd328699b2508e47e824039b25c9eda703d5db2f09a3f7165da807ea33f","first_seen":"2026-01-24T21:17:51.061351Z","last_seen":"2026-01-24T21:17:51.061351Z","times_seen":1,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/home-top-BnHNdt15.jpg","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:23.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /assets/home-top-BnHNdt15.jpg HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/assets/index-D0dVvbFe.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ad9d98-ced5\"\r\nexpires: Mon, 23 Feb 2026 21:17:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52949,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1170x280, components 3","md5":"c8887a2f07ff976f081fd83bd5677ba7","sha1":"ef16a125f35b1a7eba1c1bdde5c3831872f9d316","sha256":"d46bacbf2685b911ea5f22ea6b92e43a61379fb292a128325205c48c5db34e43","sha512":"52aff96298e070d6abf7ecbe25954df901847da8600c3567f6bee6cd947b8ba3324cdb0ede4763fd8ba30674d469ba819bea09089df79e90fd707ed0d8ca6fa3","ssdeep":"1536:pYz5uURTtqeuffnq3nADx6lKGmdWic6SUOb/wBy+:uXWfq30cUyicSObW","tlshash":"db33df831890770eef9fc6b32933d77cf6861931b67df2104dac80d3aca154a1659366","first_seen":"2025-05-19T23:12:24.332983Z","last_seen":"2026-07-02T07:53:55.415323Z","times_seen":9,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/moto-Br8T3Bmy.jpg","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:23.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /assets/moto-Br8T3Bmy.jpg HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ad9d98-1a15\"\r\nexpires: Mon, 23 Feb 2026 21:17:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6677,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 318x159, components 3","md5":"9ade7f41f7d3465e095045abacbf923c","sha1":"f936d63d60f639444f76996bb33531c90cbabb3c","sha256":"71dc7d2a3ceda092babc08321a401519356af1bd026a4c7432f32205b58d271a","sha512":"d7ff5ea4fe047fabfd9cbebd235e78af687407f2c66c88426680a71c460dbddfc6e6ddb38a2721e2b3d3abe07a19316dae674ce721dfa5fa557b4576cbbc6c14","ssdeep":"192:kNk3PQfmeMJfauf4NT9qREQl5eA7eNX3nbj++IBN9:5+mrfaOoxqREQlGNXLjjIt","tlshash":"b2d1a071d675035bea6e5076ff941478024c88b25c478eb5a6cb28fdaa13c843ed32cb","first_seen":"2025-05-19T23:12:24.334385Z","last_seen":"2026-07-02T07:53:55.425967Z","times_seen":9,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oasjs.tiks-shopx.shop/user/refresh","fqdn":"oasjs.tiks-shopx.shop","domain":"tiks-shopx.shop","tld":"shop"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:24.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oasjs.tiks-shopx.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 21 Jan 2026 19:18:45 GMT","end":"Tue, 21 Apr 2026 19:18:44 GMT"},"fingerprint":{"sha1":"BA:E1:E9:BC:38:98:23:2C:06:52:DD:A6:52:A1:D9:96:B7:AA:CE:9E","sha256":"19:36:0C:A5:B5:9B:EC:CB:01:D1:DF:8B:1F:07:61:3B:F5:DB:78:10:BA:CC:D6:40:8B:27:1C:AC:C7:6B:43:3A"}}},"request":{"raw":"POST /user/refresh HTTP/1.1\r\nHost: oasjs.tiks-shopx.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 0\r\nOrigin: https://tklvze.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: think_var=en-us; expires=Sat, 24-Jan-2026 21:47:24 GMT; Max-Age=1800; path=/; HttpOnly\ns3dc196de=n82em6eugpvmm3tdu7ainb2mb3; path=/; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: https://tklvze.top\r\naccess-control-allow-methods: GET,POST,PATCH,PUT,DELETE\r\naccess-control-allow-headers: Authorization,Content-Type,If-Match,If-Modified-Since,If-None-Match,If-Unmodified-Since,X-Requested-With\r\naccess-control-expose-headers: User-Token-Csrf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ffbe85fef746c0686194c1da888dc4f0","sha1":"aad49c9f310c34dfc6c6b9120e564066bf85cb67","sha256":"6a0231cdbc2ed833e3fefd75010ff8c2a46c140857f83044a2927bd3a8e1faa8","sha512":"6d13a30c709da2da5d84ff061e8192ee2fdf8226435920fab9a385d80fc77304d9b36a7bca62693ea89caa2ca7cefe6c895900525235b4dc8e8eb5b8bd863d7f","ssdeep":"","tlshash":"f3a0220c830e000e00b082ec8208828c0fcf80b322008f3c08080f3288a803232a3b38","first_seen":"2026-01-24T21:17:51.074551Z","last_seen":"2026-01-24T21:17:51.074551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oasjs.tiks-shopx.shop/user/logout","fqdn":"oasjs.tiks-shopx.shop","domain":"tiks-shopx.shop","tld":"shop"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:24.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oasjs.tiks-shopx.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 21 Jan 2026 19:18:45 GMT","end":"Tue, 21 Apr 2026 19:18:44 GMT"},"fingerprint":{"sha1":"BA:E1:E9:BC:38:98:23:2C:06:52:DD:A6:52:A1:D9:96:B7:AA:CE:9E","sha256":"19:36:0C:A5:B5:9B:EC:CB:01:D1:DF:8B:1F:07:61:3B:F5:DB:78:10:BA:CC:D6:40:8B:27:1C:AC:C7:6B:43:3A"}}},"request":{"raw":"POST /user/logout HTTP/1.1\r\nHost: oasjs.tiks-shopx.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 13\r\nOrigin: https://tklvze.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13,"data":"{\"userID\":\"\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: think_var=en-us; expires=Sat, 24-Jan-2026 21:47:24 GMT; Max-Age=1800; path=/; HttpOnly\ns3dc196de=1a0456ium4rarfp84uab9n66ej; path=/; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: https://tklvze.top\r\naccess-control-allow-methods: GET,POST,PATCH,PUT,DELETE\r\naccess-control-allow-headers: Authorization,Content-Type,If-Match,If-Modified-Since,If-None-Match,If-Unmodified-Since,X-Requested-With\r\naccess-control-expose-headers: User-Token-Csrf\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"37e4933673422932dd5144336aa621ac","sha1":"ebc2010d4e3aaf5e6e86a677fbbd4b00e65e58d5","sha256":"7f2595b99850ff898ce7b8ad9fbedfdcbc0abc6f5624e60c40296bbdc8e24dac","sha512":"dd83cac31a74f194bf9f03bccf37dcc4dbda6c26781120bc9069cac8578a25e8d46e094d86496be308dd4bcc8e2efc9bd9518fa7194d9810b52bea2e517edef2","ssdeep":"","tlshash":"bb900444555f401f044571dc410cc5c54f3c70571c014f104d4f5f35505c47455d3c31","first_seen":"2026-01-24T21:17:51.075676Z","last_seen":"2026-01-24T21:17:51.075676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/index-DtTI4EqK.js","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:21.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /assets/index-DtTI4EqK.js HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ad9d98-5b495\"\r\nexpires: Sun, 25 Jan 2026 09:17:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":373909,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33875)","md5":"8e07c80577dca03bab9e378b581f9747","sha1":"0a07c03348610b3fa75010fdfbe833f6ba403d0a","sha256":"4573f62bded669516f45ed7d8b2e7052eb44a7fdda605f9a175625385798841a","sha512":"cb55cb37513ce7cced9481fe080c37520dc820d67256ea812e63fa791b0e0da31f715c7dd0ab1c0608d6e43f828f29a48385946c675cc79fee304e86b8a0c1b7","ssdeep":"6144:WoHWKHX+sBYmweKdx8wSVaV/HL5HXH5i+/sr0W5f+s4tRBpozQI/C+II+er:WoHWKHX+sBYveKQSHXH5i+/sr0WFhA/+","tlshash":"f3845ce53285742307b659d660bb1605b2391e91b40ec498b17cddea3ab7c0993ebf3c","first_seen":"2026-01-24T21:17:51.076801Z","last_seen":"2026-01-24T21:17:51.076801Z","times_seen":1,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oasjs.tiks-shopx.shop/user/refresh","fqdn":"oasjs.tiks-shopx.shop","domain":"tiks-shopx.shop","tld":"shop"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:23.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oasjs.tiks-shopx.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 21 Jan 2026 19:18:45 GMT","end":"Tue, 21 Apr 2026 19:18:44 GMT"},"fingerprint":{"sha1":"BA:E1:E9:BC:38:98:23:2C:06:52:DD:A6:52:A1:D9:96:B7:AA:CE:9E","sha256":"19:36:0C:A5:B5:9B:EC:CB:01:D1:DF:8B:1F:07:61:3B:F5:DB:78:10:BA:CC:D6:40:8B:27:1C:AC:C7:6B:43:3A"}}},"request":{"raw":"OPTIONS /user/refresh HTTP/1.1\r\nHost: oasjs.tiks-shopx.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://tklvze.top/\r\nOrigin: https://tklvze.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:23 GMT\r\nset-cookie: think_var=en-us; expires=Sat, 24-Jan-2026 21:47:23 GMT; Max-Age=1800; path=/; HttpOnly\r\naccess-control-allow-origin: https://tklvze.top\r\naccess-control-allow-methods: GET,POST,PATCH,PUT,DELETE\r\naccess-control-allow-headers: Authorization,Content-Type,If-Match,If-Modified-Since,If-None-Match,If-Unmodified-Since,X-Requested-With\r\naccess-control-expose-headers: User-Token-Csrf\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":1162,"timings":{"blocked":468,"dns":53,"connect":205,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/assets/alb-yhFmkscu.png","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:23.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /assets/alb-yhFmkscu.png HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/assets/login-BNF1lWi2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 26 Aug 2025 11:42:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ad9d98-12057\"\r\nexpires: Mon, 23 Feb 2026 21:17:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73815,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1170x2390, components 3","md5":"be8160b86d0ab898cfe9205371560aec","sha1":"a44c13c4065b7cbca036beca25e5599bd5154ed9","sha256":"1c435d8b8cf918ffb68fe76054127fda441a30dc0319fabf18cd51cecd3d9599","sha512":"f2c8063c51adc49c32bdf635b2b05a082307aede9de23cadcab527f21f45df13643e48379e50b781838080b67a33aebb7707608b943078b3954363dbf6f858d1","ssdeep":"1536:GwX447VpOvHviYss1ZHbyjfrEh03cj/apMWimlTWp:1eHviYssHyjfrEh0goMVmlTWp","tlshash":"9773f2d5538497eacd891872c8ef806ead961cf0e79c14d64ef3f2617178f129c809b5","first_seen":"2024-08-27T01:06:08Z","last_seen":"2026-07-02T07:53:55.417477Z","times_seen":16,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tklvze.top/static/images/tarBar/home_active.png","fqdn":"tklvze.top","domain":"tklvze.top","tld":"top"},"ip":{"addr":"165.154.244.15","port":443,"asn":142002,"as":"Scloud Pte Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tklvze.top/","date":"2026-01-24T21:17:22.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaitalia.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 19:18:52 GMT","end":"Fri, 27 Mar 2026 19:18:51 GMT"},"fingerprint":{"sha1":"BA:A9:2D:FC:2F:75:FA:78:FD:4D:50:F0:FF:50:59:04:BC:5D:D1:B4","sha256":"AC:58:95:E1:69:F0:20:0A:D5:C4:3F:41:E1:D7:33:54:63:E6:68:80:E5:AD:9B:F5:FF:33:C0:B0:15:A9:77:E9"}}},"request":{"raw":"GET /static/images/tarBar/home_active.png HTTP/1.1\r\nHost: tklvze.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tklvze.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 24 Jan 2026 21:17:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Feb 2025 18:06:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67be06ae-add\"\r\nexpires: Mon, 23 Feb 2026 21:17:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2781,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"dc196f749d99287356d95948e2e8cff8","sha1":"4236414d6963c45ec4274218212773680a657362","sha256":"d3a25fb4f7470ed4d7be97418f4e499d756f8bc42250a60c61a60134b610436a","sha512":"a3ea1a9ae54dc746d39637b7b08acb107fa835f03c4e3fad579da0400c5c8e2da0f2d2b6f0deac62c279438cbbf11b528a9e1636ef56ec37a5a546a351586be3","ssdeep":"","tlshash":"09515bdf800a9c1ca1218bef2e1586f600206aa37f9bc84e2551356fc2fa52508ca5c7","first_seen":"2025-04-02T12:15:09.099363Z","last_seen":"2026-07-02T07:53:55.41872Z","times_seen":11,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"tklvze.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}