{"report_id":"94fc6707-4a73-41a1-9f49-2a6994635169","version":6,"status":"done","tags":[],"date":"2026-05-29T20:49:52Z","url":{"schema":"http","addr":"kitseramc.com","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"ip":{"addr":"172.67.135.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kitseramc.com/","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"title":"KitseraMC • The Sweetest SMP","dom":{"size":69540,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24314)","md5":"ed316ede9bd63f9bb518ba6b9f141264","sha1":"15361a6fcdd5a5bd4df17d23d6a3bceabd6ce5a8","sha256":"b36801ca389b7e68794fb8d873d8b3db0e61e8565994e6bdf657135768ec1f94","sha512":"649aa7606833dc2de2105621a41f07c7bc1e45269fb765bd701560aa07d9f700ef16f8aee95986cdd10c346ea5ff37886631db673d2f175a3d28f797f1a210c0","ssdeep":"768:Pe8aOyyFuALhnPXbk38U+WbQOVDCAMPEGJVAN2GIm4nNtytfDJ/EtP073QvDB:28aOyy1LhPXbk3lVDCAMPEZqnytflrOB","tlshash":"e8631a3a16e2103f7867c1f2e6927b5db629e247c91bcaaeb29c07405fc7dd58c63604","dom_hash":"domhash5d21b8245d744983ecd71f32230cd6e7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kitseramc.com","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"ip":{"addr":"172.67.135.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-03T20:49:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":1,"received_data":6679,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-05-25T07:23:14.316466Z","alert_count":0,"request_count":2,"received_data":1021662,"sent_data":882,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"kitseramc.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-10","domain_rank":0,"first_seen":"2026-05-29T20:49:53.868115Z","last_seen":"2026-05-29T20:49:53.868115Z","alert_count":60,"request_count":15,"received_data":3051216,"sent_data":7054,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":4,"received_data":34856,"sent_data":2144,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kitseramc.com/","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f3d7e919dbb9d5b2cb1494d708df9ce","sha1":"e38625d7ddd9119818b5c7dce157d14d3bde5e0c","sha256":"233e2095124ffd0fba7a439bca26226f8f7fd28e7783de9eef434de62ad99de2","sha512":"39cd03b670fb4133bceb6a81f59deac2325f8e9e599a6a5a567d2539be8c29e8b3d10f1ff1e69d5e06e4cd3794127d7b9cb86afd3cb5ff34c44a97aeae8f881c","ssdeep":"","tlshash":"30f0d80e49b11b536613a138994b0801b1f5018f2d2d7c3e7f4c12020f4d55ea578b1d","size":472,"data":"","first_seen":"2026-03-03T03:22:31.776951Z","last_seen":"2026-05-29T20:52:14.221513Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kitseramc.com/","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f7645f5aa18c15db0c1018ba7d0ce33","sha1":"24dabdfa5fd60f5b6d5a5489972128b59901c841","sha256":"36cd9928eab604be9757e9adfd06d79a5f101b68e275b23e612d4f6ec2b8376b","sha512":"85dec5db51d9c39fa4c15a2f5c3f7f6f609fac5ca15671e3fa767f0ccdcc57508e4399728755395e9cdc69d1f4b7f298a4ad1ac2bb853fb7ddd4cf0a8d175c8d","ssdeep":"192:jNU0/WhVWbDZx20Z3BSsQCCbFiIIYfvbelD:RU0/SVcZ3QFNDbet","tlshash":"d3f1842a33b7107442ab5ab7a35b6b0836211013a403cc4d7f6c83449fd5f95fafa6e9","size":7460,"data":"","first_seen":"2026-05-29T20:49:57.275623Z","last_seen":"2026-05-29T20:49:57.275623Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kitseramc.com/assets/hero-smp.mp4","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:32.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitseramc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 00:20:17 GMT","end":"Thu, 06 Aug 2026 01:18:45 GMT"},"fingerprint":{"sha1":"82:B8:60:A3:EF:9A:D8:E9:7E:40:2B:EB:B5:DD:78:7E:E7:EF:67:A6","sha256":"43:5A:34:6A:A7:B5:B3:9C:6A:FF:F4:4A:C8:08:34:F9:26:F9:D4:52:DF:B4:70:E5:2E:BA:8D:54:8A:0A:88:C9"}}},"request":{"raw":"GET /assets/hero-smp.mp4 HTTP/1.1\r\nHost: kitseramc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kitseramc.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Fri, 29 May 2026 20:49:32 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 11511767\r\nserver: cloudflare\r\nlast-modified: Wed, 20 May 2026 21:40:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a0e2a3e-afa7d7\"\r\nexpires: Fri, 29 May 2026 20:59:07 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 2E9C:2B8828:18B8C:1B6F0:6A19FBC3\r\nvia: 1.1 varnish\r\nage: 25\r\nx-served-by: cache-bma-essb1270065-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1780087772.313478,VS0,VE15\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 198925c6b8be519fe0055e167cf518acadbabdb9\r\ncontent-range: bytes 0-11511766/11511767\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YKpW0LBkO8oD1q74HrLi1jvkzNHVjVnmGocX%2FYVRNMQBMiQxnOfLzTHxpzKDORrCWgj4GrNk1Xf09dERALYQEWpRU57Bbwkok8TcsV7hK%2BtBXgiy0%2Fl3AR5hwfLNuZnt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0385dc0c8d0569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":291409,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"40a91b1216dcf7e354f39298cab9cb3e","sha1":"95b7393af39f4797f0a5b3b96ce608481de258c2","sha256":"7b1e8d1ce76aabef4319a73d0d15b81ac35cf421c90494122eaad399f95181b9","sha512":"30dc96f4379e5934073c5add2f43d9c0985813f71f3b39f0af453da27c0a2290b0acc0d556cc92d8ed45797c903c8f3d158ff01ae17c75ae772f55d2f7e42191","ssdeep":"6144:hSoVzf0VVTywnqVThC6cPd7pIVG2J9yKILIGf/yLzfFGsxW13Ua0ZQ1JjaHveC:h198rTymqvClPd7pIVmnSzfu1J0ZQPj4","tlshash":"ec5423d88a8ee0fc91338eff2e019fcc46035f3776a569b64969e31545257a83b842f4","first_seen":"2026-05-29T20:49:57.237785Z","last_seen":"2026-05-29T20:49:57.237785Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kitseramc.com/assets/logo.png","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:32.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitseramc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 00:20:17 GMT","end":"Thu, 06 Aug 2026 01:18:45 GMT"},"fingerprint":{"sha1":"82:B8:60:A3:EF:9A:D8:E9:7E:40:2B:EB:B5:DD:78:7E:E7:EF:67:A6","sha256":"43:5A:34:6A:A7:B5:B3:9C:6A:FF:F4:4A:C8:08:34:F9:26:F9:D4:52:DF:B4:70:E5:2E:BA:8D:54:8A:0A:88:C9"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: kitseramc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kitseramc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 May 2026 20:49:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 125633\r\nserver: cloudflare\r\nx-origin-cache: HIT\r\nlast-modified: Wed, 20 May 2026 21:40:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a0e2a3e-1eac1\"\r\nexpires: Fri, 29 May 2026 20:59:06 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 9806:340123:19AD3:1C62F:6A19FBC2\r\naccept-ranges: bytes\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-bma-essb1270079-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1780087771.181868,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 3e2aa3b094c06fd7cbb9d372fb7e37ce7175e362\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5pY9KFlmrkMfjuoBJ5oPRZaaMYGjohKqNKUvxGLnX6V0ofa%2BihemN9%2BwLWx71IupU8p0iLEgvXcpn4imT3Ig3JupdBpaa2IsQ%2BsWiZNVb4wmQd5eF0bUYnfZMho4bpsc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0385dc2db04569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":125633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"fbc4dff27cbb5f4e036d27e6db0c85d6","sha1":"ea778f4faddae2367e661db26a363884b8a36f77","sha256":"36eee7c94d4e988d1a3a0e60f8be04e8ab71a5317be35cdf502e696ed705728e","sha512":"c0d9b7ed7c7f508117c26a9923fa492571204a3ed04dec977fa1865313fa33a9fe9de599ddf6dfcb90544a4b081517c24dd7a3a7838a35e11d5469e7a6def150","ssdeep":"3072:iFiPV1TlJjwoxCtDZBUyKcyGZ4MsA9+VNn2KlvVMcE/6dMAtZM:wiPVhlhwoSLvZ4y9uN2LTydMa+","tlshash":"20c3e1a9960acf89cb9485f17dc389435b3080c99950cbbb837e761388b736575cf1ba","first_seen":"2025-12-22T17:51:11.404739Z","last_seen":"2026-06-09T04:17:09.790855Z","times_seen":26,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:32.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kitseramc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7824\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 14:11:03 GMT\r\nexpires: Sat, 29 May 2027 14:11:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 23909\r\nlast-modified: Mon, 15 Sep 2025 16:34:56 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7824,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7824, version 1.0","md5":"af4d371a10271dafeb343f1eace762bc","sha1":"6d11d743bc3cfb169d70bc86450f18351dc1a905","sha256":"60bf0aba6526436f3930c58c12047687fbb6bff4dd180cce4613458ed3439ea2","sha512":"98e1d4804a31f0ec40307bb02d7af0e25e1a01f2d0f69676cd55f97f64a8d50ecfd5be05525956c4a80bf0d98810badbb08acb2927cd78963bcdde9f96e25ba1","ssdeep":"192:SvrCMV0T6yUN1NfKPtAqGFNL2kshO5YwMg9eSnUK:SvV0T6pNzSPtCrhsCYwMqeSnUK","tlshash":"44f1ae6ff6ea226ff944537dbc50108431224f92b94f11b61d2b126a77e87c8620b2a9","first_seen":"2023-04-06T18:33:44Z","last_seen":"2026-06-22T10:11:58.624654Z","times_seen":28114,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":84,"dns":0,"connect":15,"send":0,"wait":15,"receive":1,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:32.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kitseramc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 14:18:38 GMT\r\nexpires: Sat, 29 May 2027 14:18:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 23454\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-06-22T10:35:48.683543Z","times_seen":261740,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":123,"dns":0,"connect":15,"send":0,"wait":15,"receive":5,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kitseramc.com/assets/hero-smp.mp4","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:32.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitseramc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 00:20:17 GMT","end":"Thu, 06 Aug 2026 01:18:45 GMT"},"fingerprint":{"sha1":"82:B8:60:A3:EF:9A:D8:E9:7E:40:2B:EB:B5:DD:78:7E:E7:EF:67:A6","sha256":"43:5A:34:6A:A7:B5:B3:9C:6A:FF:F4:4A:C8:08:34:F9:26:F9:D4:52:DF:B4:70:E5:2E:BA:8D:54:8A:0A:88:C9"}}},"request":{"raw":"GET /assets/hero-smp.mp4 HTTP/1.1\r\nHost: kitseramc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=11468800-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kitseramc.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Fri, 29 May 2026 20:49:32 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 42967\r\nserver: cloudflare\r\nlast-modified: Wed, 20 May 2026 21:40:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a0e2a3e-afa7d7\"\r\nexpires: Fri, 29 May 2026 20:59:07 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 2E9C:2B8828:18B8C:1B6F0:6A19FBC3\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-bma-essb1270065-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1780087772.313478,VS0,VE15\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 198925c6b8be519fe0055e167cf518acadbabdb9\r\ncontent-range: bytes 11468800-11511766/11511767\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NT2f6a%2FLMu7fPRjiCDiXVms55pfLmsL7uZg6JSPVJi3OauL0I9MLARe2wVw%2FPMR4aFb4yXv7oPqTSlhNIx%2BsFUNjuNZSxmioR9Zi2Xh0Ej4iEPyjL3kfN%2BOQkhOg5Ec0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0385dc179b6569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42967,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"c3523efc36f9c9d4ab0a08266a80965e","sha1":"308369075553763e2b1e875a40e7bde562193440","sha256":"96946d388e22039ebb1d02bdd55bd3f3aed791aec321e0411d2a199215730e25","sha512":"36c7d540789c5136e02e3c8abed27a461fac94d690bd06a426d71f439558f89b9b21ce744c308e93394b3802713bb4665523a49389f0fc1c6d0671319abf3f7c","ssdeep":"768:D/56acn2VFC03r44lnuQROT6C17XYftlit4PZ9jQ5Y:zcaFtUUQAifY","tlshash":"96134a9327226723c2112a7cc4fb13057370da8adbe79797da81d6712dca3891705fda","first_seen":"2026-01-09T01:16:04.626998Z","last_seen":"2026-06-09T04:17:09.79324Z","times_seen":22,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kitseramc.com/assets/hero-smp.mp4","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:32.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitseramc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 00:20:17 GMT","end":"Thu, 06 Aug 2026 01:18:45 GMT"},"fingerprint":{"sha1":"82:B8:60:A3:EF:9A:D8:E9:7E:40:2B:EB:B5:DD:78:7E:E7:EF:67:A6","sha256":"43:5A:34:6A:A7:B5:B3:9C:6A:FF:F4:4A:C8:08:34:F9:26:F9:D4:52:DF:B4:70:E5:2E:BA:8D:54:8A:0A:88:C9"}}},"request":{"raw":"GET /assets/hero-smp.mp4 HTTP/1.1\r\nHost: kitseramc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=294912-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kitseramc.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Fri, 29 May 2026 20:49:32 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 11216855\r\nserver: cloudflare\r\nlast-modified: Wed, 20 May 2026 21:40:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a0e2a3e-afa7d7\"\r\nexpires: Fri, 29 May 2026 20:59:07 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 2E9C:2B8828:18B8C:1B6F0:6A19FBC3\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-bma-essb1270065-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1780087772.313478,VS0,VE15\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 198925c6b8be519fe0055e167cf518acadbabdb9\r\ncontent-range: bytes 294912-11511766/11511767\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DrwiSDGVQBzomrq6nnXrg8QtDfY6kWKR6DGSYJgsfE3RO%2BBW89HpDsY5t8%2F3yHkkMOtRyzY52LmEcBqQPrsjtgAX72E6SeEWTVFR0Lzm1afvpSIzIRvbZD71C254kx1w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0385dc1ea36569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":408227,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"372aae88336ea0e3212b6445df15161c","sha1":"f98a737a9328c1033531427c732df5769cd24aef","sha256":"9614693632b8e4e41cfbd5d46fcd61a5b0b66c92c5a8b1a66126e44330a8fb61","sha512":"7f034fcbca187cd6077aa5faca9f8194201fb9ffd12b0e6ef51fc9a121b3d57f6320beeb434d6a7ce3668d44569b06e814aad7abb6099996d5f0f5abdd90b4a8","ssdeep":"12288:6voCKwnhXcAQMIQ6cwJKJOWZD302CyNinSla9C6WA4:WxKwnhX3IQ6cwJKg+0AG9vW","tlshash":"f69423e8c7695be883d2745c9c0f91c9a9760e4e8450be62fcf9d18216dceab1df84c0","first_seen":"2026-05-29T20:49:57.252416Z","last_seen":"2026-05-29T20:49:57.252416Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kitseramc.com/assets/logo.png","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:32.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitseramc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 00:20:17 GMT","end":"Thu, 06 Aug 2026 01:18:45 GMT"},"fingerprint":{"sha1":"82:B8:60:A3:EF:9A:D8:E9:7E:40:2B:EB:B5:DD:78:7E:E7:EF:67:A6","sha256":"43:5A:34:6A:A7:B5:B3:9C:6A:FF:F4:4A:C8:08:34:F9:26:F9:D4:52:DF:B4:70:E5:2E:BA:8D:54:8A:0A:88:C9"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: kitseramc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kitseramc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 May 2026 20:49:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 125633\r\nserver: cloudflare\r\nx-origin-cache: HIT\r\nlast-modified: Wed, 20 May 2026 21:40:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a0e2a3e-1eac1\"\r\nexpires: Fri, 29 May 2026 20:59:06 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 9806:340123:19AD3:1C62F:6A19FBC2\r\naccept-ranges: bytes\r\nvia: 1.1 varnish\r\nage: 1\r\nx-served-by: cache-bma-essb1270079-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1780087771.181868,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 3e2aa3b094c06fd7cbb9d372fb7e37ce7175e362\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0pyNx5403MyRpu1iJDjBdjUW2JSeVqT055S%2FaYmkzyvwK7t8T6WyBAdHwuvtzoqq2h3VTqbm2UQe26rrcQcAIIIsFLTKmoSF5jBFH0rLATHoyShWMkN%2FTZF4CqSFJoDx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0385dc2db05569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":125633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"fbc4dff27cbb5f4e036d27e6db0c85d6","sha1":"ea778f4faddae2367e661db26a363884b8a36f77","sha256":"36eee7c94d4e988d1a3a0e60f8be04e8ab71a5317be35cdf502e696ed705728e","sha512":"c0d9b7ed7c7f508117c26a9923fa492571204a3ed04dec977fa1865313fa33a9fe9de599ddf6dfcb90544a4b081517c24dd7a3a7838a35e11d5469e7a6def150","ssdeep":"3072:iFiPV1TlJjwoxCtDZBUyKcyGZ4MsA9+VNn2KlvVMcE/6dMAtZM:wiPVhlhwoSLvZ4y9uN2LTydMa+","tlshash":"20c3e1a9960acf89cb9485f17dc389435b3080c99950cbbb837e761388b736575cf1ba","first_seen":"2025-12-22T17:51:11.404739Z","last_seen":"2026-06-09T04:17:09.790855Z","times_seen":26,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kitseramc.com/","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-29T20:49:30.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitseramc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 00:20:17 GMT","end":"Thu, 06 Aug 2026 01:18:45 GMT"},"fingerprint":{"sha1":"82:B8:60:A3:EF:9A:D8:E9:7E:40:2B:EB:B5:DD:78:7E:E7:EF:67:A6","sha256":"43:5A:34:6A:A7:B5:B3:9C:6A:FF:F4:4A:C8:08:34:F9:26:F9:D4:52:DF:B4:70:E5:2E:BA:8D:54:8A:0A:88:C9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kitseramc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 20:49:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Wed, 20 May 2026 21:40:14 GMT\r\naccess-control-allow-origin: *\r\nexpires: Fri, 29 May 2026 20:59:04 GMT\r\ncache-control: max-age=600\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=59qRBKVVJ4KWF%2FmBrm5768EbW%2BpXS%2BgxTWnlaJKyu8DO9GWvRJPTACpLXSF%2Fs8fxu7WsGS9UJM5TTtYjDJBITdTXfErMD9S4CobdXxyfDFxQdaud%2B02w%2F0vjK%2FB5hHg8\"}]}\r\nx-proxy-cache: MISS\r\nx-github-request-id: A808:340123:19A9D:1C5F0:6A19FBBF\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: 1.1 varnish\r\nage: 27\r\nx-served-by: cache-bma-essb1270049-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1780087771.947740,VS0,VE3\r\nvary: Accept-Encoding\r\nx-fastly-request-id: a0183babfc101754e4383954c6a2a339413b44ce\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a0385db81e9756a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":45892,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"da7c3dc64b29c5a7482f04f5b7625d76","sha1":"b3ddde9f54d62654329b7a0c13aa4710c9f5d2e3","sha256":"ab69b182b9d46ca20d8563b60762829ad0feb7db6288a8de26ef040ea22ae300","sha512":"092bacf833f9a03434a201d49ab328a122935075c06de8a677fffa67e7831f5ed0c96a0d9e3c186386f2d951431869b0ac14ade6d349bf64897531071728f4a6","ssdeep":"768:Yy8aOyyFuAKVDCAMPERdV4Y2rI1snNty0MIxX73QvDl:X8aOyy1KVDCAMPEe7ny0MIpOl","tlshash":"cc23c47622f3106a11ab82b277a36f0a6a65d307c50bc94e73ac07c54fc6dd5dda3358","first_seen":"2026-05-29T20:49:57.254376Z","last_seen":"2026-05-29T20:52:14.204659Z","times_seen":2,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":89,"dns":38,"connect":1,"send":0,"wait":67,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:31.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kitseramc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 29 May 2026 20:49:31 GMT\r\ndate: Fri, 29 May 2026 20:49:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5993,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f4b874a96c6e11344f7b1939c38f87e2","sha1":"15879e821b5dda4854585c17a9bf43d5c8eaf8b5","sha256":"7e933b9d624b6b5f720d276780008035bcf7ba564403d931532059e9041e8bd1","sha512":"0b3488b90e5a4f635cd59b2c2d5bcb018b5bd377e0e00cd095d33fbb81d0f84f62429485639ecba7d0e2bfeebffc6544ae19ff7e02221a257f7e7cad1edacbe5","ssdeep":"96:SOEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMacOxMaUJc+ukOxMarN3OpE:lgKQcXr3lVwa3RzJ/apsn","tlshash":"3cc19cd1087be114ab871cc123cf7d36ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-20T07:37:39.957294Z","last_seen":"2026-06-22T02:01:37.093469Z","times_seen":1088,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":185,"dns":0,"connect":28,"send":0,"wait":32,"receive":0,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kitseramc.com/assets/hero-smp.mp4","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:32.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitseramc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 00:20:17 GMT","end":"Thu, 06 Aug 2026 01:18:45 GMT"},"fingerprint":{"sha1":"82:B8:60:A3:EF:9A:D8:E9:7E:40:2B:EB:B5:DD:78:7E:E7:EF:67:A6","sha256":"43:5A:34:6A:A7:B5:B3:9C:6A:FF:F4:4A:C8:08:34:F9:26:F9:D4:52:DF:B4:70:E5:2E:BA:8D:54:8A:0A:88:C9"}}},"request":{"raw":"GET /assets/hero-smp.mp4 HTTP/1.1\r\nHost: kitseramc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kitseramc.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Fri, 29 May 2026 20:49:32 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 11511767\r\nserver: cloudflare\r\nlast-modified: Wed, 20 May 2026 21:40:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a0e2a3e-afa7d7\"\r\nexpires: Fri, 29 May 2026 20:59:07 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 2E9C:2B8828:18B8C:1B6F0:6A19FBC3\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-bma-essb1270065-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1780087772.313478,VS0,VE15\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 198925c6b8be519fe0055e167cf518acadbabdb9\r\ncontent-range: bytes 0-11511766/11511767\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7q7vvqeumhbvVgaYvXfEAzLZh0i9G3kLcVkJtzNNuXx1CT%2F4CQzoNbofDFNlH0L0YCdL%2BkR8Zm%2FP3fI2xZ8Xz71I7pc0TbGRT58ovbdSKU8ES4LcEvGpglGliJMx%2BlS5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0385dc0c8d3569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":299001,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"aa78424e65ea78f163a5ff5998221a28","sha1":"fd30bdf4beb90f57c4579988b2617c27443e17e0","sha256":"b363322cd056c2fb68db3236ebb0928b746962c06d04058005696c8b1382a95f","sha512":"8d35255861c28eb424fbe55a0ca87c3021cc02dbaba94dbbbb55322ad94fdc8cae880f431391c762c08988902419e68843eec5cd61c0c63962b8836d7bb72647","ssdeep":"6144:hSoVzf0VVTywnqVThC6cPd7pIVG2J9yKILIGf/yLzfFGsxW13Ua0ZQ1JjaHveK+r:h198rTymqvClPd7pIVmnSzfu1J0ZQPjF","tlshash":"555423d88f8ee0fc91378eff2e019fc882035f2371a559b659a5e30585653ad2f942e4","first_seen":"2026-05-29T20:49:57.256499Z","last_seen":"2026-05-29T20:49:57.256499Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kitseramc.com/assets/hero-smp.mp4","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:32.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitseramc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 00:20:17 GMT","end":"Thu, 06 Aug 2026 01:18:45 GMT"},"fingerprint":{"sha1":"82:B8:60:A3:EF:9A:D8:E9:7E:40:2B:EB:B5:DD:78:7E:E7:EF:67:A6","sha256":"43:5A:34:6A:A7:B5:B3:9C:6A:FF:F4:4A:C8:08:34:F9:26:F9:D4:52:DF:B4:70:E5:2E:BA:8D:54:8A:0A:88:C9"}}},"request":{"raw":"GET /assets/hero-smp.mp4 HTTP/1.1\r\nHost: kitseramc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=11468800-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kitseramc.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Fri, 29 May 2026 20:49:32 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 42967\r\nserver: cloudflare\r\nlast-modified: Wed, 20 May 2026 21:40:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a0e2a3e-afa7d7\"\r\nexpires: Fri, 29 May 2026 20:59:07 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 2E9C:2B8828:18B8C:1B6F0:6A19FBC3\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-bma-essb1270065-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1780087772.313478,VS0,VE15\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 198925c6b8be519fe0055e167cf518acadbabdb9\r\ncontent-range: bytes 11468800-11511766/11511767\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mnD1bv9U56CN4iWFsCB6tyGN%2FiSVMG2slCQiH32w9LgTkwSsYMvxSDcaWx0necCjf8RY6eGNUTDXq%2BQJMhyyuEhQ0T3XYrtpPcDhfcIvIg7gzNOxsVVelgFwgFfD8Q%2BS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0385dc179b2569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":42967,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"c3523efc36f9c9d4ab0a08266a80965e","sha1":"308369075553763e2b1e875a40e7bde562193440","sha256":"96946d388e22039ebb1d02bdd55bd3f3aed791aec321e0411d2a199215730e25","sha512":"36c7d540789c5136e02e3c8abed27a461fac94d690bd06a426d71f439558f89b9b21ce744c308e93394b3802713bb4665523a49389f0fc1c6d0671319abf3f7c","ssdeep":"768:D/56acn2VFC03r44lnuQROT6C17XYftlit4PZ9jQ5Y:zcaFtUUQAifY","tlshash":"96134a9327226723c2112a7cc4fb13057370da8adbe79797da81d6712dca3891705fda","first_seen":"2026-01-09T01:16:04.626998Z","last_seen":"2026-06-09T04:17:09.79324Z","times_seen":22,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kitseramc.com/assets/hero-smp.mp4","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:32.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitseramc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 00:20:17 GMT","end":"Thu, 06 Aug 2026 01:18:45 GMT"},"fingerprint":{"sha1":"82:B8:60:A3:EF:9A:D8:E9:7E:40:2B:EB:B5:DD:78:7E:E7:EF:67:A6","sha256":"43:5A:34:6A:A7:B5:B3:9C:6A:FF:F4:4A:C8:08:34:F9:26:F9:D4:52:DF:B4:70:E5:2E:BA:8D:54:8A:0A:88:C9"}}},"request":{"raw":"GET /assets/hero-smp.mp4 HTTP/1.1\r\nHost: kitseramc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=262144-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kitseramc.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Fri, 29 May 2026 20:49:32 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 11249623\r\nserver: cloudflare\r\nlast-modified: Wed, 20 May 2026 21:40:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a0e2a3e-afa7d7\"\r\nexpires: Fri, 29 May 2026 20:59:07 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 2E9C:2B8828:18B8C:1B6F0:6A19FBC3\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-bma-essb1270065-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1780087772.313478,VS0,VE15\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 198925c6b8be519fe0055e167cf518acadbabdb9\r\ncontent-range: bytes 262144-11511766/11511767\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f4bQUn8rr3oJscmjmoLfBV%2BF6j1S%2F5W0mKLG6QOgTZwxHwiKhi1ualG0OQu%2FlCO8DtEjoYWKL9ZP3Y1LdYC6rwOuOzdEIfCSmeafxqLSaaPp%2B4XUC97AddwF3P5UTmwi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0385dc1ea32569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1080564,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"f61aa1f648cac3f9813dd26ef4528ba7","sha1":"8ebc7b408e420cd398ebd037251a7b78905b9ea8","sha256":"ccae488a0fc5df158eeb2a35907c7766d351d9a3760bbb811ef0262cce9dca44","sha512":"a1e64160c573bee376bed9a27183c8ea7bffcd49eeeedf3dd2ea4551221ee57b228a73bb940937c7b571b37b638d0e748fc9ab5785b58eb69c58b36d0e6822f7","ssdeep":"24576:TaFxKwnhX3IQ6cwJKg+0AG9vmNNULAZh68B2CnaF7rtpGK/3cRmI77gA:uFxKmWcw9+ZGhmrUL868MCni7XGKPUtl","tlshash":"d02533d6931e12d85693593e951e70e5e8a2875c8a207f03f8fc809107d8ef96ef97c8","first_seen":"2026-05-29T20:49:57.260829Z","last_seen":"2026-05-29T20:49:57.260829Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kitseramc.com/assets/logo.png","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:31.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitseramc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 00:20:17 GMT","end":"Thu, 06 Aug 2026 01:18:45 GMT"},"fingerprint":{"sha1":"82:B8:60:A3:EF:9A:D8:E9:7E:40:2B:EB:B5:DD:78:7E:E7:EF:67:A6","sha256":"43:5A:34:6A:A7:B5:B3:9C:6A:FF:F4:4A:C8:08:34:F9:26:F9:D4:52:DF:B4:70:E5:2E:BA:8D:54:8A:0A:88:C9"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: kitseramc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kitseramc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 May 2026 20:49:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 125633\r\nserver: cloudflare\r\nx-origin-cache: HIT\r\nlast-modified: Wed, 20 May 2026 21:40:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a0e2a3e-1eac1\"\r\nexpires: Fri, 29 May 2026 20:59:06 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 9806:340123:19AD3:1C62F:6A19FBC2\r\naccept-ranges: bytes\r\nvia: 1.1 varnish\r\nage: 24\r\nx-served-by: cache-bma-essb1270079-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1780087771.181868,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 3e2aa3b094c06fd7cbb9d372fb7e37ce7175e362\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UkFonp7u30onxePMcOkRAoLXVeKSUyMKC34mV2JLyWvMBJXb9%2FWSDJGSQ%2F0gVJNihaBLiZEiVDrYs2li%2BoGr1tGVuzlsLHgaV5LXr6zame1D9NaIqnCOLPCslM4fkX02\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0385db9aa52569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":125633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"fbc4dff27cbb5f4e036d27e6db0c85d6","sha1":"ea778f4faddae2367e661db26a363884b8a36f77","sha256":"36eee7c94d4e988d1a3a0e60f8be04e8ab71a5317be35cdf502e696ed705728e","sha512":"c0d9b7ed7c7f508117c26a9923fa492571204a3ed04dec977fa1865313fa33a9fe9de599ddf6dfcb90544a4b081517c24dd7a3a7838a35e11d5469e7a6def150","ssdeep":"3072:iFiPV1TlJjwoxCtDZBUyKcyGZ4MsA9+VNn2KlvVMcE/6dMAtZM:wiPVhlhwoSLvZ4y9uN2LTydMa+","tlshash":"20c3e1a9960acf89cb9485f17dc389435b3080c99950cbbb837e761388b736575cf1ba","first_seen":"2025-12-22T17:51:11.404739Z","last_seen":"2026-06-09T04:17:09.790855Z","times_seen":26,"resource_available":false,"data":null}},"time_used":8290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8283,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kitseramc.com/assets/server2.jpg","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:31.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitseramc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 00:20:17 GMT","end":"Thu, 06 Aug 2026 01:18:45 GMT"},"fingerprint":{"sha1":"82:B8:60:A3:EF:9A:D8:E9:7E:40:2B:EB:B5:DD:78:7E:E7:EF:67:A6","sha256":"43:5A:34:6A:A7:B5:B3:9C:6A:FF:F4:4A:C8:08:34:F9:26:F9:D4:52:DF:B4:70:E5:2E:BA:8D:54:8A:0A:88:C9"}}},"request":{"raw":"GET /assets/server2.jpg HTTP/1.1\r\nHost: kitseramc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kitseramc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 May 2026 20:49:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 39956\r\nserver: cloudflare\r\nlast-modified: Wed, 20 May 2026 21:40:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a0e2a3e-9c14\"\r\nexpires: Fri, 29 May 2026 20:59:07 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: A3B8:337F4E:19A80:1C5DD:6A19FBC3\r\naccept-ranges: bytes\r\nvia: 1.1 varnish\r\nage: 24\r\nx-served-by: cache-bma-essb1270074-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1780087771.180645,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 2347e29308a236f4c08fc21e9f1a9ee897541099\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wkgYepI2SmQ7gepn3eod9%2FdIpj7iWBnf7%2FtnnenYzv%2F9tjj15bF3Rvk1xtjiyzmVRC7cthAok3ustzqeF3vMKNOqemtB0IZidzwKCr0KZnBd%2BPc0U78nJCP1McDWy9m1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0385db9aa5c569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":39956,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x338, components 3","md5":"1382f4005ff1e328b7520c7dc49fb8c8","sha1":"529e7c85a896f3d166f4c44c399e16c10ac95502","sha256":"4d52564d62b6241dcbbbee9c7fededddc4957f60b841ccfff5f7e2a5e378b1fd","sha512":"61489ae1fe9b9daf2b25b630ea89ab013130a44df07f0a5711fb5f468cc85ab9fdd9c05bd89cbcf26ea7e0f3de5b3546e565cbbfafc6f20ad3169cca0ce4fc2b","ssdeep":"768:LRmWcMd+B81c0tLigVm34/74W2fJ12zgPgqw3gS3ranbK1/cWPWITn:j681ztLtI3kqfgYLEgS7anbK1/cG3Tn","tlshash":"bc03e1c48d251851f45abe7be8c03970f7b447e0efbd0b66a961e7c98852ed047a0637","first_seen":"2026-02-26T23:12:44.9236Z","last_seen":"2026-05-29T20:52:14.212388Z","times_seen":19,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kitseramc.com/assets/server3.jpg","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:31.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitseramc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 00:20:17 GMT","end":"Thu, 06 Aug 2026 01:18:45 GMT"},"fingerprint":{"sha1":"82:B8:60:A3:EF:9A:D8:E9:7E:40:2B:EB:B5:DD:78:7E:E7:EF:67:A6","sha256":"43:5A:34:6A:A7:B5:B3:9C:6A:FF:F4:4A:C8:08:34:F9:26:F9:D4:52:DF:B4:70:E5:2E:BA:8D:54:8A:0A:88:C9"}}},"request":{"raw":"GET /assets/server3.jpg HTTP/1.1\r\nHost: kitseramc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kitseramc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 May 2026 20:49:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 130664\r\nserver: cloudflare\r\nlast-modified: Wed, 20 May 2026 21:40:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a0e2a3e-1fe68\"\r\nexpires: Fri, 29 May 2026 20:59:07 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 58C0:1A4B5C:18F4F:1BA75:6A19FBC3\r\naccept-ranges: bytes\r\nvia: 1.1 varnish\r\nage: 24\r\nx-served-by: cache-bma-essb1270046-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1780087771.186735,VS0,VE2\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 79c473c3b4d0ec96020f0549a6e55331f6769695\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8lzUyB44NytVlMLqlwIZYfkxE9Bg4bcyVMUMrEFhHJ%2FoP6bmcJX8DUi2vsrCaXciU6zB255%2BiNrJ3O8Ua8UuWPJEmZ%2FXk%2B%2BdmtdSGc970%2B3AoSNKcFw5iGO%2FM%2F%2BVjd14\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0385db9aa5f569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":130664,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1408x792, components 3","md5":"fdb790913421bb5aedee95d37ab96c58","sha1":"390fcbd33694002b72b65efe8562059310b681af","sha256":"60945e4788011785fde6ebbad59efc857887bbc346439ea9affa1041fdfa87ec","sha512":"b605d4b8af0ed42b24e9b39670d28a72a1028a612e8aa2bfc5da251d511696e6c800d9707192b2f0841e61b2b2a7bbd2f27430aac723c7cfd66cb7a3c327e5e7","ssdeep":"3072:k9CmQVzWMNfNbCIzC8IE8PPQuv/JPgeVyqcHHFWBE69C2:k94z/fNbnC8/8ryHH/+T","tlshash":"56d3f17451b603878b52be53de3c90cbfa93996cb68252f0e4d26c2d3c5f49a47345ac","first_seen":"2026-02-26T23:12:44.916829Z","last_seen":"2026-05-29T20:52:14.207163Z","times_seen":19,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kitseramc.com/assets/launcher-preview.png","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:31.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitseramc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 00:20:17 GMT","end":"Thu, 06 Aug 2026 01:18:45 GMT"},"fingerprint":{"sha1":"82:B8:60:A3:EF:9A:D8:E9:7E:40:2B:EB:B5:DD:78:7E:E7:EF:67:A6","sha256":"43:5A:34:6A:A7:B5:B3:9C:6A:FF:F4:4A:C8:08:34:F9:26:F9:D4:52:DF:B4:70:E5:2E:BA:8D:54:8A:0A:88:C9"}}},"request":{"raw":"GET /assets/launcher-preview.png HTTP/1.1\r\nHost: kitseramc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kitseramc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 May 2026 20:49:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 190517\r\nserver: cloudflare\r\nlast-modified: Wed, 20 May 2026 21:40:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a0e2a3e-2e835\"\r\nexpires: Fri, 29 May 2026 20:59:07 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: A908:337F4E:19A80:1C5DE:6A19FBC2\r\naccept-ranges: bytes\r\nvia: 1.1 varnish\r\nage: 24\r\nx-served-by: cache-bma-essb1270049-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1780087771.183060,VS0,VE2\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 2af23f8175743af13e22665a78d7395655e6a251\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XXNUpCwvSlHGbaaGIScza%2BbyyRgF%2FRBO1b6xOKbhwqwVOcBt%2FUTmOIXKUziIUhzcqn2hiFbIb13RVklt8iyTsv7Rkh63kyjghyV1WJSODiCTa5UIJm4ql5DPmJXiaK6Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0385db9aa60569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":190517,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 367, 8-bit/color RGB, non-interlaced","md5":"9d903a6bf692b59fb924e40b1de0963e","sha1":"501f5d90259c1a91ad7b5c936ca6061d1812195d","sha256":"2048c5cdb3ece8d202b1f492d6cb2426a0e353a05dca1231a8aa82410900424a","sha512":"4f3a2b8bc4bf4b2aa74079b3d4ec7ea1df2b45d422b19b295c3e25723f79a88623181483419c09402319fca74e77dc8734444b82accefc95bd8965c7e0f32864","ssdeep":"3072:nsjuOhyd6l/W1631ygOsM2vjrzZao7yBuV4h13ORklvBtZECpKsGOBoQAVruA:IryMY18cgOsM2ruBuVqS6zSQAVr/","tlshash":"cc1423cc8fc3ad99d44652a7b4d24035a5be7836c63bfffc58865c58b23b8c4e14a684","first_seen":"2026-05-29T20:49:57.268564Z","last_seen":"2026-05-29T20:52:14.201841Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17?plugins=forms@0.5.10,typography@0.5.16","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:31.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 14:31:45 GMT","end":"Mon, 17 Aug 2026 15:31:39 GMT"},"fingerprint":{"sha1":"B6:67:6F:5A:BE:B9:2A:B2:16:10:49:96:1E:1F:99:2B:44:AF:EA:A6","sha256":"63:A9:BF:FB:46:E0:B8:37:95:77:F3:63:84:AE:78:22:46:11:85:5E:DF:87:F6:4B:EF:F2:2E:24:D5:74:70:39"}}},"request":{"raw":"GET /3.4.17?plugins=forms@0.5.10,typography@0.5.16 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kitseramc.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 20:49:31 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::59hx7-1778775054866-427d4557a019\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1312713\r\nlast-modified: Thu, 14 May 2026 16:27:52 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8a%2FWEkSD8aHIT5zxvy0sp1YJnkPeNKU%2B8aFBOdX9%2FzO26QkyO6YcMHjbUgMe9HiBXFz8djoXo4bI0c0bY1PlOklIgWoXpGrogLzg%2FQtz0GC0On6GLdDQ9UanfyAwWqtjfhbMwEQ%3D\"}]}\r\ncf-ray: a0385dba1d3756c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":510091,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52873)","md5":"c423257ce6bde1851c335e8f8f4e9bb2","sha1":"034de0a189bd5e766accc1122ab3a53d53c23cc4","sha256":"0656b912a5893ab56c590ef7e1edd2c9ae57bbff18b30a300cdd66f3f1486708","sha512":"a21bcd7fbf9351dd93a98f4d5d170224d0e7df81cba9da8da1c2cb354257c38d188c1f3c34d929c9783f5cc1389c0e720d268d357efba89a99a3980c48c463d5","ssdeep":"6144:LFQUPEz0+19zXEVy61LLeMP5mqNFPyF2pH7w2nXrPO0s:ZQUPEQSzXEVy61LLn5/CSbHbPO0s","tlshash":"22b43ba97356b13647eba1e850ab1402f37d9928900c84acf79dc4ea3de4d4950bbf3d","first_seen":"2025-09-21T16:18:40.255776Z","last_seen":"2026-06-16T01:50:30.771392Z","times_seen":112,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:32.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kitseramc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 14:10:57 GMT\r\nexpires: Sat, 29 May 2027 14:10:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 23915\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-06-22T10:36:48.766998Z","times_seen":361744,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":129,"dns":4,"connect":28,"send":0,"wait":19,"receive":2,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/?plugins=forms,typography","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:31.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 14:31:45 GMT","end":"Mon, 17 Aug 2026 15:31:39 GMT"},"fingerprint":{"sha1":"B6:67:6F:5A:BE:B9:2A:B2:16:10:49:96:1E:1F:99:2B:44:AF:EA:A6","sha256":"63:A9:BF:FB:46:E0:B8:37:95:77:F3:63:84:AE:78:22:46:11:85:5E:DF:87:F6:4B:EF:F2:2E:24:D5:74:70:39"}}},"request":{"raw":"GET /?plugins=forms,typography HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kitseramc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 29 May 2026 20:49:31 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17?plugins=forms@0.5.10,typography@0.5.16\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::6qpnn-1780087479093-83fc14990182\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 291\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aBrncefPUDoMasgLpGcRoSqU0x61A%2BM4cpZKDEFx3qghu22VnF%2BjVpXO%2F0kxwyF93YDhYPZtZpkKVYAfv0%2FkUVmJ%2FN4mxnfjZM08No9OR%2B3LOo%2BHdO8L2LiKCqimahmvRqB%2BWGA%3D\"}]}\r\ncf-ray: a0385db9fd0d56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":510091,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T11:29:50.742489Z","times_seen":16634939,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":38,"dns":21,"connect":1,"send":0,"wait":9,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kitseramc.com/assets/server.jpg","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:31.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitseramc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 00:20:17 GMT","end":"Thu, 06 Aug 2026 01:18:45 GMT"},"fingerprint":{"sha1":"82:B8:60:A3:EF:9A:D8:E9:7E:40:2B:EB:B5:DD:78:7E:E7:EF:67:A6","sha256":"43:5A:34:6A:A7:B5:B3:9C:6A:FF:F4:4A:C8:08:34:F9:26:F9:D4:52:DF:B4:70:E5:2E:BA:8D:54:8A:0A:88:C9"}}},"request":{"raw":"GET /assets/server.jpg HTTP/1.1\r\nHost: kitseramc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kitseramc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 May 2026 20:49:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 76615\r\nserver: cloudflare\r\nlast-modified: Wed, 20 May 2026 21:40:14 GMT\r\naccess-control-allow-origin: *\r\netag: \"6a0e2a3e-12b47\"\r\nexpires: Fri, 29 May 2026 20:59:06 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 44D0:21BFE0:1BD44:1E8B1:6A19FBBC\r\naccept-ranges: bytes\r\nvia: 1.1 varnish\r\nage: 24\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1780087771.187872,VS0,VE3\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 21e244213270bc75b4e459c7602cd2196f23ce88\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wBikDbMHsjiYyZlOExEbcvABgk4ZEwK4s648PejOnIpxlbeWXGxXvM0CFOqhtx%2FUz%2FJEB%2BAv3WLJQTWfdNkJTXxHjThq25P0VwwcOpDD8FSVAE6Iv89cR893%2FRtvp%2Ff8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0385db9aa57569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":76615,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, orientation=upper-left], progressive, precision 8, 800x450, components 3","md5":"f305632c1b73d612096e946b0cf5d511","sha1":"b7319c7f513035f060cb9cc12a11db0564afb575","sha256":"06e41d5c5345ec9b6b82fee95984876bd9bdb778d232be004746eb475a94b6e2","sha512":"dde45c10f17564c142e1b7d0d268674865ca0404093b7a91c46acc20f044da2bc0604f2a91864d553bdd7765123be696a4bfdf32a1debb91bef9c0b2ae96b153","ssdeep":"1536:TbJGp1hUTafTJSPBJozNZVNTDZvdbc/hcSrRN3P4zz36grRv/1:8pIsSPBJKr4/BrRNP4P6g9v/1","tlshash":"14730230829f65b05721967c5f47f9e9acae00e2503bfe0c94421a3eb924b84886f727","first_seen":"2026-02-26T23:12:44.922783Z","last_seen":"2026-06-09T04:17:09.801463Z","times_seen":21,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kitseramc.com/assets/pixel-clouds.png","fqdn":"kitseramc.com","domain":"kitseramc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:32.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kitseramc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 00:20:17 GMT","end":"Thu, 06 Aug 2026 01:18:45 GMT"},"fingerprint":{"sha1":"82:B8:60:A3:EF:9A:D8:E9:7E:40:2B:EB:B5:DD:78:7E:E7:EF:67:A6","sha256":"43:5A:34:6A:A7:B5:B3:9C:6A:FF:F4:4A:C8:08:34:F9:26:F9:D4:52:DF:B4:70:E5:2E:BA:8D:54:8A:0A:88:C9"}}},"request":{"raw":"GET /assets/pixel-clouds.png HTTP/1.1\r\nHost: kitseramc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kitseramc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 29 May 2026 20:49:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jH4pzgj0CuP3okdD7hdmI5WeuYhPQG0oCZHY4pOKcbufn1KZzCSd2zB1DQJrNA7tH9ebDePBUqdOKlnZ8LYbq2MeBDQ%2BfblLirf5i0OoXT4KddI%2FRp2aJeHV6gzfBzc7\"}]}\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\nx-proxy-cache: MISS\r\nx-github-request-id: E47C:1F1374:199E2:1C539:6A19FBC2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: 1.1 varnish\r\nage: 25\r\nx-served-by: cache-bma-essb1270075-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1780087772.211975,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 5ac97160aedec8d7ff5829d24b15c179efba9c47\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: a0385dc0284a569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":9379,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-06-22T10:16:19.73418Z","times_seen":17904,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"kitseramc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kitseramc.com/","date":"2026-05-29T20:49:32.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kitseramc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 14:10:57 GMT\r\nexpires: Sat, 29 May 2027 14:10:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 23915\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-06-22T10:36:48.766346Z","times_seen":266348,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":70,"dns":1,"connect":28,"send":0,"wait":15,"receive":2,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
