{"report_id":"9d4b94a8-4d80-413b-a53e-0c0d152a0a6a","version":0,"status":"done","tags":[],"date":"2026-09-23T09:28:16Z","url":{"schema":"http","addr":"pro-paquet.com/","fqdn":"pro-paquet.com","domain":"pro-paquet.com","tld":"com"},"ip":{"addr":"103.224.182.242","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"no-go.kelkoogroup.net/permanentLinkGo?country=no\u0026id=47692679-139a-4232-9170-574f76601827\u0026merchantUrl=https%3A%2F%2Fwww.kikkertspesialisten.no%2Fproducts%2Fkowa-tsn-601-m-20-60x-zoom\u0026publisherSubId=shoplicity\u0026ctrl_ab={var10}\u0026publisherClickId=18uumd0.68.4na5a","fqdn":"no-go.kelkoogroup.net","domain":"kelkoogroup.net","tld":"net"},"title":"Du sendes videre til Kikkertspesialisten.no","dom":{"size":181367,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33459)","md5":"614704ae3c252300fe7dc3c411b4f367","sha1":"2dccb204f5c303a5485b20e9584a21fbeccd88ec","sha256":"0bbad757a3f3c58688999cba02741e6f19dc5d99d0aefc7b1e7b85c0789118d9","sha512":"15b4d82e89d78a4bdc39cd09bdd67ccd6681aaffa21c81e18143514d3de24ccf785d3db8994981ec7755754301aeae6079b560b2c7cc494eec7fa59cd41af49e","ssdeep":"3072:/eTXtK1042g9R6gja0H2IEb2EJnEWQfRfYU:/gdK1wtH0H2IEb2EJnEWQfRfT","tlshash":"f9041b85b38ce82e02835a73136f7183f1675d653c40c742a574ecf569a890fe5aafb8","dom_hash":"domhash19f37b17b4a310fba23520eaeda521da","first_seen":"2026-09-23T09:28:17.44166Z","last_seen":"2026-09-23T09:28:17.44166Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pro-paquet.com/","fqdn":"pro-paquet.com","domain":"pro-paquet.com","tld":"com"},"ip":{"addr":"103.224.182.242","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-28T09:28:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"pro-paquet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"pro-paquet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"pro-paquet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"trck.shopli.city","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"zairuc.com","ip":{"addr":"103.224.182.220","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"2026-09-10","domain_rank":0,"first_seen":"2026-09-18T08:32:34.394528Z","last_seen":"2026-09-18T08:32:34.394528Z","alert_count":0,"request_count":2,"received_data":200,"sent_data":4895,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"no-go.kelkoogroup.net","ip":{"addr":"95.211.116.26","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-08-18","domain_rank":0,"first_seen":"2017-10-30T14:27:38Z","last_seen":"2026-09-19T08:11:25.140108Z","alert_count":0,"request_count":3,"received_data":3422,"sent_data":3174,"comment":"","tags":null,"fingerprints":[{"name":"DataDome","description":"DataDome is a cybersecurity platform that specialises in bot protection and mitigation, offering advanced solutions to safeguard websites and mobile applications against malicious bot traffic, credential stuffing, scraping, and other automated threats.","website":"https://datadome.co","common_platform_enumeration":"","icon":"DataDome.svg","categories":["Security"]}]},{"fqdn":"pro-paquet.com","ip":{"addr":"103.224.182.242","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"2025-03-03","domain_rank":0,"first_seen":"2025-12-03T11:56:02.066675Z","last_seen":"2025-12-03T11:56:02.553069Z","alert_count":3,"request_count":1,"received_data":1502,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"trck.shopli.city","ip":{"addr":"207.154.244.157","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"domain_registered":"2025-05-08","domain_rank":0,"first_seen":"2026-03-13T11:23:25.543078Z","last_seen":"2026-09-16T14:32:34.004927Z","alert_count":1,"request_count":1,"received_data":691,"sent_data":1585,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zairuc.com/check?dat=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","fqdn":"zairuc.com","domain":"zairuc.com","tld":"com"},"ip":{"addr":"103.224.182.220","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-23T09:27:47.659Z","timestamp":1790155667659,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /check?dat=YET4pVX2tpQKF2qeQ6ikGn49fjQ2QnErWEliUllxalZEWm9RbXBURy9WTUJnOEx4TkNaWjNOS2lNcFhpREg0U1laek1KbThaMlpzdzE0T0VjK05FRlhtU3RrNVk5cVI3cjY5MnkzQjJGOG1sd09oejQrYmVsUEJmdWVFMlBwZmgvR3IxL1c2bkNNVi9YS3lPSmZFSGxTcVB2cERtQTFVR1lnd1MxNS9YMDRGeExLMEE0OC9BT21KZ1EraFZtcGdFNENnRnoxck5DOXkwd1RXRzhYVjh0QjNrMnhxa1lWeDJUaUpDYWI4Z29UTlBWb29BTGVWb0pwdFg4cElPNTQzNGEyVU1IZFhuWWhhbFk4UGEzUU0zdTRFeXpsY1lxRm0xck5CTEMraFl4LzJzUWVvbEpIdFJSUFhhUUlraVZqVHhTbG5wcjlKY1FhWjM0NWtaR0RQWHdvaUt5MkJNdlRtTnlWZUkzV1VNYkM2WnZsT2N4VUFYVGdLY2I5Mzk0QThWOVV6RWxuUUdlWWpaVGtlWXAyT0pudDRlS2RzRExjZi9wdW05MEpwWG9oa1dNVjBMSjFmcHJleHpmYzUwdGVNYy80Y2RMRVRielQ1WUE2STY3cWlFemUyb2d2QVR0MHlBdEROdldYMnFqTk54amRReWFESXJrc1hXRVVRaUNubVR6OVR1MGVzMWVzMWlZRXBsVzdjRWMxUE9OQUJ1dHZ5RUVlV1NBblRnUloyRlJKaXRjSDVBYUIrQlpWSnVkRXlaYnVEUFVaMlpHM09Lc2s5Sm9ocURrUGM3TlA4MHg3THA2L0RmRDNaajh3dStJUHJXcmgyZ3FjL3d1OGRLYlpSbFYwL1k3ZEFrVTVaOThqRVJVWnppdXJyY2JUQUhpQ0lCTituYXhWbDlqTlA4SFM0dlhJUWU1b3hxUWxsSEFrNFRjeWhBanhxeHhvZXdzc3E3dHRiSGtSMjI4OUNMdDlRdHhHUGxadE5EczFoOXFNVkgwaDRkUmtqT2Y3cU1QMGF1ZjE5TlFkczhDaDJlaXRKS3V6cmFUZnIzY1oxekNSazUxUmlIZ0dtT3lnMHFNRldHK2cwdUN3WWtPbFFCaFl2T245Y0hWb2FHMmRPWXZNd1JMMER0NkwyOEJHN1Jrc1l6MDFQTCs3ckZmMEVxblpYQ3FzZ0RONERFVEt6MUl4NFlDQXZqZnhZWTRHcmJVZU0wU1cxeEVlWDE1WUtoOTJ5cU10c0RjTW5FQT09 HTTP/1.1\r\nHost: zairuc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zairuc.com/ck?dat=ovplBW72TQsrz03Fgmwam349fjlxQXRobmducGVsMFdqS21pMzRMRUliYVlXYUY1VU5leUNpbWNoelZPNEk5ZXFOOXRSendSZE1ha2RCcUZCQitlWGZYcU8zSk1KTDBBOW5lUnpUdXZ1dWd2RjYzNlY1UUQzU0FYUmtYQmhhNVdGWlZ1Rnc5SnNnMkVFSEl1RUlDUUdhRnFaZmFEdEhEZ2YxRWs2MXM3OHR1S0JLMjJDS2ExSHIzdDI3cHhGaXNRR1Z1Yi9HeUIvK1dMakV5Q2M4NTNUZjdVbGZLNHU2MXJPRklVaTkxUm4xVWw2WmhzMXQ1Q0tSR2tvMlZiZFZDYTdMaUphdFJSM2xCdEw5and0Vmc5eGdSQ2RpM3BEanZJYWF5emVkeWE4SnJ4WVRYN2JsUVc2aHU0ZkVOYXFMbEFialBiNEJtaXJwUS9IOUE0Y2IzTnR6K1EwUXRnVUdwV1VrRTMvV2ZnV2lTNEJwa2ZuYzhMdWNrOGNoNW01amZ0UXNpYmRCdVplR29hYUZvdWhCaHgwV0xPKytJR1QvS295Ym5pVXFnRU9RaXc2elg2ZS9obnBBeVZPckFDQ0tMdWorTGtkUGUrR0gwd2RLd0NmUncvN1NsUzBhd2I5OUU0aFhpOUFkVndHYnk4NjA1L25pcDFHZzFlNU5TL2IwL20xR0U0LzF0QWo5aFZ2ZnAwdko3Y3pvb0FLYTBRM1FzVndYNTBhcXhsNWhhQ0xEVTREWUFjREYrR2Rpb1R2SU14YkU0RzBMVlJIUFZhSGFBaExHL0tza3IvQ0dNUVZzR21IeStpME8yaERsZWhwdEZTSmJjbE9FMlRWYUN0VmdBMTFaNldmRFhpRHN4YkowdUMxYzVScm5SMEpOWmZvb0l0N3lXZno5VVBRcXVzcklTY2Q1dXFTRldLa0c4ZlJjRFVXQ1JCWkpPMVNqRDJKOGE1TVVXZmJPVTFrakwrbG9iSlFaUjVyWU5VL01TQ1NHTFp5Ly9sbXhudEN6THgxWXlqZVpndmkwS0gybVNaNi93L3V4allYOEpIMHN4Zk9jQVV6UitqTTZjUXZGYWhCbFFZYjdObjFhaG9yRUJlLy8vZzVlWkFwcnNFM0w2ZEM2dVlOVlpzQTRtK0U3UVFnNUhsdE81NktPL2grWElyb0VxelIxZ0RibmVUelhnMDF1cDV6UHZwZUUrOTNGcW5CMmliYXVQcEE2ZkdNVmx6d1dKMVg4SjRlbWRaUmxHbHY1ell5YU1GYUMrSUowQ3BJS3JsWUM4V3cyV0hWZ2pZVHdmK242Uw%3D%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T18:41:04.501457Z","times_seen":18948806,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"no-go.kelkoogroup.net/assets/images/p.png?country=no\u0026k=612f7a9541cd6ea6c9a780de621954daed65fbdbe878aa8801e8223e297472ae5dccb6c16cd177a09cb099f8ce29ed793ad812ed80ffc6abb5c8d2e676b593ab20645a2d46d713c9bcd74aa22b35bacd57444213cbb7315be3177628077b9bddc3166169df925584d04aa27c90983053f5e039ce2245c9e375f363bd0d2ce51a27b40e8cfa55a5a87fcdb34b61cf9447ded7ce10cc14da0f24f900aa203288d770e6895d1eb63135ed64e9a404d46da11fed6bd3339e7c4205a3e3d1a2b363fdd8aa5609b2abc813a5efab544c7687e94f1565f940d23500a53ce279558799072509b15ec338b83147c151e8ccd9cc3e088d5b7e0a364c369da5065bc987c69a","fqdn":"no-go.kelkoogroup.net","domain":"kelkoogroup.net","tld":"net"},"ip":{"addr":"95.211.116.26","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://no-go.kelkoogroup.net/permanentLinkGo?country=no\u0026id=47692679-139a-4232-9170-574f76601827\u0026merchantUrl=https%3A%2F%2Fwww.kikkertspesialisten.no%2Fproducts%2Fkowa-tsn-601-m-20-60x-zoom\u0026publisherSubId=shoplicity\u0026ctrl_ab={var10}\u0026publisherClickId=18uumd0.68.4na5a","date":"2026-09-23T09:27:52.772Z","timestamp":1790155672772,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kelkoogroup.net","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Sep 2026 00:00:00 GMT","end":"Wed, 31 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C1:25:14:1F:63:25:9F:01:30:0C:DF:86:10:2F:A8:AF:4D:29:82:EB","sha256":"76:BA:9E:4C:77:83:4F:14:87:12:EF:F0:C9:35:D7:97:2B:25:65:80:53:A7:0D:B5:50:EC:A3:A9:95:06:10:2D"}}},"request":{"raw":"GET /assets/images/p.png?country=no\u0026k=612f7a9541cd6ea6c9a780de621954daed65fbdbe878aa8801e8223e297472ae5dccb6c16cd177a09cb099f8ce29ed793ad812ed80ffc6abb5c8d2e676b593ab20645a2d46d713c9bcd74aa22b35bacd57444213cbb7315be3177628077b9bddc3166169df925584d04aa27c90983053f5e039ce2245c9e375f363bd0d2ce51a27b40e8cfa55a5a87fcdb34b61cf9447ded7ce10cc14da0f24f900aa203288d770e6895d1eb63135ed64e9a404d46da11fed6bd3339e7c4205a3e3d1a2b363fdd8aa5609b2abc813a5efab544c7687e94f1565f940d23500a53ce279558799072509b15ec338b83147c151e8ccd9cc3e088d5b7e0a364c369da5065bc987c69a HTTP/1.1\r\nHost: no-go.kelkoogroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://no-go.kelkoogroup.net/permanentLinkGo?country=no\u0026id=47692679-139a-4232-9170-574f76601827\u0026merchantUrl=https%3A%2F%2Fwww.kikkertspesialisten.no%2Fproducts%2Fkowa-tsn-601-m-20-60x-zoom\u0026publisherSubId=shoplicity\u0026ctrl_ab={var10}\u0026publisherClickId=18uumd0.68.4na5a\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: datadome=KcvdojXhtYOXUbpNmbZDIkYxG6aP3SNtEfg5CotRywdBcq~HU4CK6VUc2aFAoFTgSTSpOeja_tIZ9nkRR2gWje5vEF540~v9Emp~98Lhvru8oASnzAFoqRY6AMnlGGyh; kelkooID=a4c6293-1a0cd97c7b1-2568\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nleadId: 62A001M36SFHY094W5EWT1B5V3PWP3\r\nclickId: 107698147_1790155671473_95230\r\ncountry: no\r\nRequest-Time: PT0.002042191S\r\nX-Robots-Tag: noindex,nofollow\r\nCache-Control: private, must-revalidate\r\nReferrer-Policy: origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: frame-ancestors 'none'\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nDate: Wed, 23 Sep 2026 09:27:53 GMT\r\nContent-Type: image/png\r\nContent-Length: 68\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68,"size_decoded":594,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced","md5":"91e42db1c66c0b276abf6234dc50b2eb","sha1":"c1986af3c26609b8b7d8933f99c51c1a89e9ea6b","sha256":"63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058","sha512":"0b77019542fdb02f72c8407a379579bde36e2fe3af81b1c74553f1b5df2590373bf7e6ff3fefcbdaf0b9a2fcf9b1e57b30d24e29810f0cfaf9d51153415c89ce","ssdeep":"","tlshash":"bea022c223e0ec3cc38c8233c0000230f83000ab08000028202be0202e822e0088c2a2","first_seen":"2023-04-05T22:54:48Z","last_seen":"2026-10-08T17:40:58.889077Z","times_seen":36789,"resource_available":true,"data":null}},"time_used":1256,"timings":{"blocked":0,"dns":0,"connect":62,"send":0,"wait":68,"receive":0,"ssl":1126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pro-paquet.com/","fqdn":"pro-paquet.com","domain":"pro-paquet.com","tld":"com"},"ip":{"addr":"103.224.182.242","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-23T09:27:44.857Z","timestamp":1790155664857,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"virusscanner.com.au","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 04:28:12 GMT","end":"Tue, 08 Dec 2026 04:28:11 GMT"},"fingerprint":{"sha1":"9B:A0:5D:47:DD:25:50:0B:6A:07:3C:31:53:63:75:CA:EA:0E:88:24","sha256":"21:67:18:69:46:2C:19:BA:20:21:13:5C:E2:79:3B:1A:EF:79:CB:8A:9B:83:E2:C3:EE:0D:FD:2D:81:BB:C3:77"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pro-paquet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\ndate: Wed, 23 Sep 2026 09:27:45 GMT\r\nserver: Apache\r\nlocation: http://zairuc.com/ck?dat=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%3D%3D\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T18:41:04.501457Z","times_seen":18948806,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"pro-paquet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"pro-paquet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"pro-paquet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trck.shopli.city/nipuhFeed1?keyword=.no.01.desktop.nonadult\u0026cost={adv_price}\u0026external_id=18uumd0.5e.4na59\u0026sub_id_1={hp}\u0026sub_id_2={geo}\u0026sub_id_3={oadest}\u0026sub_id_4={traffic_type}\u0026sub_id_5=18uumd0.5e.4na59\u0026sub_id_6={brand}\u0026sub_id_7={pubid}\u0026sub_id_8={ctrl_fetch_dest}\u0026sub_id_9={domain}\u0026sub_id_10={ctrl_ab}\u0026sub_id_11={campaignId}\u0026sub_id_12={campaignName}\u0026sub_id_13={ctrl_pm_key}\u0026sub_id_15=domain","fqdn":"trck.shopli.city","domain":"shopli.city","tld":"city"},"ip":{"addr":"207.154.244.157","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-23T09:27:50.129Z","timestamp":1790155670129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trck.shopli.city","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 01:50:34 GMT","end":"Sat, 05 Dec 2026 01:50:33 GMT"},"fingerprint":{"sha1":"A0:F2:A8:FA:6E:FC:01:E8:7C:F1:56:E2:21:34:46:CD:21:00:98:AA","sha256":"4D:31:0A:62:A5:73:B7:B3:78:F0:64:AD:02:CA:F8:80:BC:A7:50:A3:43:65:20:F8:E6:15:13:4D:8F:38:8B:BA"}}},"request":{"raw":"GET /nipuhFeed1?keyword=.no.01.desktop.nonadult\u0026cost={adv_price}\u0026external_id=18uumd0.5e.4na59\u0026sub_id_1={hp}\u0026sub_id_2={geo}\u0026sub_id_3={oadest}\u0026sub_id_4={traffic_type}\u0026sub_id_5=18uumd0.5e.4na59\u0026sub_id_6={brand}\u0026sub_id_7={pubid}\u0026sub_id_8={ctrl_fetch_dest}\u0026sub_id_9={domain}\u0026sub_id_10={ctrl_ab}\u0026sub_id_11={campaignId}\u0026sub_id_12={campaignName}\u0026sub_id_13={ctrl_pm_key}\u0026sub_id_15=domain HTTP/1.1\r\nHost: trck.shopli.city\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trck.shopli.city/gateway.php?frm=dm\u0026token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.WT6GXMgGx4lC1DMYyTrmcFz2rXyqIxKkQlr0aO2Xb10\r\nCookie: e3b0c4_94=18bp7hk3lrab22\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 09:27:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://no-go.kelkoogroup.net/permanentLinkGo?country=no\u0026id=47692679-139a-4232-9170-574f76601827\u0026merchantUrl=https%3A%2F%2Fwww.kikkertspesialisten.no%2Fproducts%2Fkowa-tsn-601-m-20-60x-zoom\u0026publisherSubId=shoplicity\u0026ctrl_ab={var10}\u0026publisherClickId=18uumd0.68.4na5a\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Wed, 23 Sep 2026 09:27:50 GMT\r\nset-cookie: e3b0c4_104=18bp7hk3lrab22; expires=Wed, 23 Sep 2026 19:38:08 GMT; path=/; domain=trck.shopli.city; secure; httponly; samesite=none\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"e3b0c4_104","value":"18bp7hk3lrab22","quoted":false,"path":"/","domain":"trck.shopli.city","expires":"2026-09-23T19:38:08Z","raw_expires":"Wed, 23 Sep 2026 19:38:08 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"e3b0c4_104=18bp7hk3lrab22; expires=Wed, 23 Sep 2026 19:38:08 GMT; path=/; domain=trck.shopli.city; secure; httponly; samesite=none"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T18:41:04.501457Z","times_seen":18948806,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"trck.shopli.city","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"no-go.kelkoogroup.net/permanentLinkGo?country=no\u0026id=47692679-139a-4232-9170-574f76601827\u0026merchantUrl=https%3A%2F%2Fwww.kikkertspesialisten.no%2Fproducts%2Fkowa-tsn-601-m-20-60x-zoom\u0026publisherSubId=shoplicity\u0026ctrl_ab={var10}\u0026publisherClickId=18uumd0.68.4na5a","fqdn":"no-go.kelkoogroup.net","domain":"kelkoogroup.net","tld":"net"},"ip":{"addr":"95.211.116.26","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-23T09:27:50.230Z","timestamp":1790155670230,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kelkoogroup.net","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Sep 2026 00:00:00 GMT","end":"Wed, 31 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C1:25:14:1F:63:25:9F:01:30:0C:DF:86:10:2F:A8:AF:4D:29:82:EB","sha256":"76:BA:9E:4C:77:83:4F:14:87:12:EF:F0:C9:35:D7:97:2B:25:65:80:53:A7:0D:B5:50:EC:A3:A9:95:06:10:2D"}}},"request":{"raw":"GET /permanentLinkGo?country=no\u0026id=47692679-139a-4232-9170-574f76601827\u0026merchantUrl=https%3A%2F%2Fwww.kikkertspesialisten.no%2Fproducts%2Fkowa-tsn-601-m-20-60x-zoom\u0026publisherSubId=shoplicity\u0026ctrl_ab={var10}\u0026publisherClickId=18uumd0.68.4na5a HTTP/1.1\r\nHost: no-go.kelkoogroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trck.shopli.city/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncomId: 10939123\r\nleadId: 62A001M36SFHY094W5EWT1B5V3PWP3\r\nPragma: no-cache\r\nX-DD-B: 3\r\nCharset: utf-8\r\nclickId: 107698147_1790155671473_95230\r\ncountry: no\r\nAccept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory\r\nSet-Cookie: datadome=KcvdojXhtYOXUbpNmbZDIkYxG6aP3SNtEfg5CotRywdBcq~HU4CK6VUc2aFAoFTgSTSpOeja_tIZ9nkRR2gWje5vEF540~v9Emp~98Lhvru8oASnzAFoqRY6AMnlGGyh; Max-Age=31104000; Expires=Sat, 18 Sep 2027 09:27:51 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure\nkelkooID=a4c6293-1a0cd97c7b1-2568; Max-Age=31536000; Expires=Thu, 23 Sep 2027 09:27:51 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly\r\nX-DataDome: protected\r\nRequest-Time: PT0.026055518S\r\nX-Robots-Tag: noindex,nofollow\r\nCache-Control: max-age=0, private, no-cache, no-store, must-revalidate\r\nX-DataDome-CID: AHrlqAAAAAMATsxTYN5hPgkAw0B2mA==\r\nReferrer-Policy: origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: frame-ancestors 'none'\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nDate: Wed, 23 Sep 2026 09:27:51 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 180773\r\n\r\n","headers":null,"cookies":[{"name":"datadome","value":"KcvdojXhtYOXUbpNmbZDIkYxG6aP3SNtEfg5CotRywdBcq~HU4CK6VUc2aFAoFTgSTSpOeja_tIZ9nkRR2gWje5vEF540~v9Emp~98Lhvru8oASnzAFoqRY6AMnlGGyh","quoted":false,"path":"/","domain":".kelkoogroup.net","expires":"2027-09-18T09:27:51Z","raw_expires":"Sat, 18 Sep 2027 09:27:51 GMT","max_age":31104000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"datadome=KcvdojXhtYOXUbpNmbZDIkYxG6aP3SNtEfg5CotRywdBcq~HU4CK6VUc2aFAoFTgSTSpOeja_tIZ9nkRR2gWje5vEF540~v9Emp~98Lhvru8oASnzAFoqRY6AMnlGGyh; Max-Age=31104000; Expires=Sat, 18 Sep 2027 09:27:51 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure"},{"name":"kelkooID","value":"a4c6293-1a0cd97c7b1-2568","quoted":false,"path":"/","domain":"kelkoogroup.net","expires":"2027-09-23T09:27:51Z","raw_expires":"Thu, 23 Sep 2027 09:27:51 GMT","max_age":31536000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"kelkooID=a4c6293-1a0cd97c7b1-2568; Max-Age=31536000; Expires=Thu, 23 Sep 2027 09:27:51 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"DataDome","description":"DataDome is a cybersecurity platform that specialises in bot protection and mitigation, offering advanced solutions to safeguard websites and mobile applications against malicious bot traffic, credential stuffing, scraping, and other automated threats.","website":"https://datadome.co","common_platform_enumeration":"","icon":"DataDome.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T18:41:04.501457Z","times_seen":18948806,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"no-go.kelkoogroup.net/favicon.ico","fqdn":"no-go.kelkoogroup.net","domain":"kelkoogroup.net","tld":"net"},"ip":{"addr":"95.211.116.26","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://no-go.kelkoogroup.net/permanentLinkGo?country=no\u0026id=47692679-139a-4232-9170-574f76601827\u0026merchantUrl=https%3A%2F%2Fwww.kikkertspesialisten.no%2Fproducts%2Fkowa-tsn-601-m-20-60x-zoom\u0026publisherSubId=shoplicity\u0026ctrl_ab={var10}\u0026publisherClickId=18uumd0.68.4na5a","date":"2026-09-23T09:27:55.235Z","timestamp":1790155675235,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kelkoogroup.net","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Sep 2026 00:00:00 GMT","end":"Wed, 31 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C1:25:14:1F:63:25:9F:01:30:0C:DF:86:10:2F:A8:AF:4D:29:82:EB","sha256":"76:BA:9E:4C:77:83:4F:14:87:12:EF:F0:C9:35:D7:97:2B:25:65:80:53:A7:0D:B5:50:EC:A3:A9:95:06:10:2D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: no-go.kelkoogroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://no-go.kelkoogroup.net/permanentLinkGo?country=no\u0026id=47692679-139a-4232-9170-574f76601827\u0026merchantUrl=https%3A%2F%2Fwww.kikkertspesialisten.no%2Fproducts%2Fkowa-tsn-601-m-20-60x-zoom\u0026publisherSubId=shoplicity\u0026ctrl_ab={var10}\u0026publisherClickId=18uumd0.68.4na5a\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: datadome=KcvdojXhtYOXUbpNmbZDIkYxG6aP3SNtEfg5CotRywdBcq~HU4CK6VUc2aFAoFTgSTSpOeja_tIZ9nkRR2gWje5vEF540~v9Emp~98Lhvru8oASnzAFoqRY6AMnlGGyh; kelkooID=a4c6293-1a0cd97c7b1-2568\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nRequest-Time: PT0.000436619S\r\nX-Robots-Tag: noindex,nofollow\r\nReferrer-Policy: origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: frame-ancestors 'none'\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nDate: Wed, 23 Sep 2026 09:27:54 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 1144\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":1144,"size_decoded":1560,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"8560de521c4990c7c870121fc9643508","sha1":"0cacf7a6b96cceeb6ceae74d5f14dc87406a6f39","sha256":"73a434285c3a752bc8c44aebd50e10f1a766853cbc7184e78d5c934c7b52b620","sha512":"aafb16d81fe8ac491cf7b738e32f127bcaff894e1ed33ad47fa1bd5150badbf9ed76a30dacc1ce50f8277eb7be099cb11789aa651f9a89bbc305eb0fa7affd34","ssdeep":"","tlshash":"3121fda6a6e70846b51a9130a3a3b7813356820be24bcd383f6e63249f402b5c4d3b0c","first_seen":"2023-04-08T17:23:22Z","last_seen":"2026-10-04T13:59:39.010072Z","times_seen":8275,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zairuc.com/ck?dat=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%3D%3D","fqdn":"zairuc.com","domain":"zairuc.com","tld":"com"},"ip":{"addr":"103.224.182.220","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-23T09:27:46.765Z","timestamp":1790155666765,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /ck?dat=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%3D%3D HTTP/1.1\r\nHost: zairuc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Wed, 23 Sep 2026 09:27:47 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1595\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T18:41:04.501457Z","times_seen":18948806,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}