{"report_id":"a2829da0-426f-46e8-8be4-d932adf7e945","version":0,"status":"done","tags":[],"date":"2026-09-12T14:17:22Z","url":{"schema":"http","addr":"lkntansr.net/","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":0,"asn":205759,"as":"Ghosty Networks LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"lkntansr.net/","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"title":"MHRS | Randevu Al","dom":{"size":14733,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (748)","md5":"6f43bb6c939c6e2ee454c7b09d82ab11","sha1":"c7b66f3eb17e9f0bef5910b3f04289d938d44f0b","sha256":"23d2ff4bbc2094d834925a6141b4412ce173ca22b270344874b5d74d0696434a","sha512":"516c5e173aa1eadb9972ace0f8d6ac9cf339c0454cfac1aa9212d990ad220f81902b4fa72fbe4c9ee87892cb5270653133bc0aee8015b51d27d1d85046bcea02","ssdeep":"192:kXTHcFNB8dDtVJ8bo01/tJ4iJAlCxxDNXrTlvBkwjudLF3bke:kXe3UJYbo01/tJ4iJAlCLBrT9cz","tlshash":"ca62554004f7067721a350d81b978a1f6b96e927d45fe6047bac5ff02fc9fa6c823694","dom_hash":"domhashb0ee402b7765fc82ce171d43962aa080","first_seen":"2026-09-08T08:21:51.997401Z","last_seen":"2026-09-12T14:17:25.374778Z","times_seen":6,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"lkntansr.net/","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-17T14:17:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"lkntansr.net","ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-09-11","domain_rank":0,"first_seen":"2026-09-12T08:23:53.321427Z","last_seen":"2026-09-12T08:23:53.321427Z","alert_count":135,"request_count":27,"received_data":2516981,"sent_data":13973,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lkntansr.net/assets/js/jquery.min.js","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-09-13T08:50:44.408498Z","times_seen":194380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d474cac8b5d30c79c1796a15e5a21747","sha1":"8b4860a0bebd85dcea6fde531ffbd0dbf9c79629","sha256":"f315f7979951607746369e98a3530f4b4ea862bedc996cc7e6e4f8e6dd018940","sha512":"b16b2378e091c4e069ec8fbb340a528b69ab8ac2f289c7a26c949c6e185b9f37f97bc1c3358830862ce07e39a2051bbd5fc3c5728715404e77ac6cb1197ce810","ssdeep":"","tlshash":"dc71a08dadf701416b7730bc0fdf8846a365945b040cea057a4c9f407f847ae9a67bb2","size":3787,"data":"","first_seen":"2026-07-23T06:17:43.018627Z","last_seen":"2026-09-12T14:17:25.387734Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"51647a8ecae0997b8e9409ccb1c5b45a","sha1":"f20879ac0deb5c28abd8cec0389dcfb59f4d3c60","sha256":"b508f783d5fa190b77c4c79af1e667b0ec38f58eb9bfc9f6b64fa123d35829a5","sha512":"63a3082bdf307dc00e86b593d4af1b7bd5505982140bff598db5268669d5f73c07674f53c86cd9ecd38266d447c5864a63cb68ca408ded0fd4c5bb5488214bf1","ssdeep":"","tlshash":"48d00033f0030003300cccf0030c0c00000000c0c000f000003000000030000f30cf30","size":224,"data":"","first_seen":"2026-04-14T05:00:14.501907Z","last_seen":"2026-09-12T14:17:25.388455Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lkntansr.net/veri.php?ip=195.64.118.152","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:16:54.818Z","timestamp":1789222614818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://lkntansr.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Sat, 12 Sep 2026 14:16:54 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T10:24:28.258643Z","times_seen":18440847,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/veri.php?ip=195.64.118.152","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:17:02.386Z","timestamp":1789222622386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://lkntansr.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Sat, 12 Sep 2026 14:17:02 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T10:24:28.258643Z","times_seen":18440847,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/veri.php?ip=195.64.118.152","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:17:04.884Z","timestamp":1789222624884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://lkntansr.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Sat, 12 Sep 2026 14:17:05 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T10:24:28.258643Z","times_seen":18440847,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/veri.php?ip=195.64.118.152","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:17:07.384Z","timestamp":1789222627384,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://lkntansr.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Sat, 12 Sep 2026 14:17:07 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T10:24:28.258643Z","times_seen":18440847,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-12T14:16:48.845Z","timestamp":1789222608845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 3365\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 12 Sep 2026 14:16:49 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}],"data":{"size":14997,"size_decoded":3638,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (748), with CRLF line terminators","md5":"a6a6c687394680ea04f9332b396275e5","sha1":"a547d7728e67b778e9a7d4aafce8bfd733d4acfe","sha256":"168c9138f3577c495cabc1481c4b4e6182ef338cebbb05e3b8917970e6c73f77","sha512":"bdef1f4cf00c2aef4d160b5cd73f6863b0c925a6c6695f6c77bca61509d36a403f93af2b5a67057f021493d3cca8da4fef238dcb7ddecb351769a3a91d310c22","ssdeep":"192:emKHRVgN8dwFq88bo01/Cg4ig0xHJQVN+v7AUTD:emygIYIbo01/Cg4ig0xH4+v7AUTD","tlshash":"a762640050d5066b117351d80ba28f1dfb9a9627c54ba2047bec6ff32ffaf65c823a94","first_seen":"2026-09-08T08:21:52.001829Z","last_seen":"2026-09-12T14:17:25.376516Z","times_seen":6,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":40,"connect":41,"send":0,"wait":280,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/assets/js/jquery.min.js","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:16:49.481Z","timestamp":1789222609481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"GET /assets/js/jquery.min.js HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 22 Jan 2026 17:58:14 GMT\r\netag: \"155ed-69726536-d11bc5fb4dc9018a;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29739\r\ndate: Sat, 12 Sep 2026 14:16:49 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":87533,"size_decoded":30046,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-09-13T08:50:44.408498Z","times_seen":194380,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/assets/images/login-logo.png","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:16:49.747Z","timestamp":1789222609747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"GET /assets/images/login-logo.png HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 19 Sep 2026 14:16:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 17:56:46 GMT\r\netag: \"21d1-697264de-7d227b7102869650;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 8657\r\ndate: Sat, 12 Sep 2026 14:16:49 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":8657,"size_decoded":8990,"mime_type":"image/png","magic":"PNG image data, 306 x 79, 8-bit/color RGBA, non-interlaced","md5":"3650904ae495b893ae471be527626539","sha1":"07cf032ae76d222d1a87b2e2b289dc68edb47c90","sha256":"614d4e90fb9f2c650bda51aad9c6f9428afc4f5553f21fcf85e99a46e99174e2","sha512":"2a70b6059569d386241aedfae44f0da44294aaf3e75a975dcfd54eb3f5fee9e13bda8c711ed8632ff01cb6b42edc028cbdac92f583494780b62dc9706685cc8b","ssdeep":"192:r7LnP7m17ypfmvaRKR9Hf3CiAeNHkFWDclOd/hHZFLYKkn9WOJlVmVDLnY4FE:r77P7m17+mvaRE1f7Ac3YMZHZNY3WnYj","tlshash":"4502ae1c47daa261bda1d958a34f008fd3b2435b6b11d64441e5c68e68c3f8e2bff688","first_seen":"2026-02-28T06:15:48.15943Z","last_seen":"2026-09-12T14:17:25.377937Z","times_seen":25,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/assets/images/key.png","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:16:49.756Z","timestamp":1789222609756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"GET /assets/images/key.png HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 19 Sep 2026 14:16:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 17:56:46 GMT\r\netag: \"153-697264de-a303577a39be276d;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 339\r\ndate: Sat, 12 Sep 2026 14:16:49 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":339,"size_decoded":670,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"65c9f68e4181468af050935fa31cce77","sha1":"269b2750f88eacb46fa2608db7f5fac435e6942e","sha256":"cf3e617fe62b1f873d125452a7ff794bdafa1f773657265e758e1ad729c71589","sha512":"20f57eb00968eaee013fc3c244dddd92367072fa2644ee7c7316438dff03c59b2edb65b2f3c84d20a5985bf293e5d795792ceaa5b3245fcd951109a9fa0f2589","ssdeep":"","tlshash":"15e0c0dcdf9148b5919d4d154121289d6b14e59862d04035ce689d988c879404568326","first_seen":"2026-02-28T06:15:48.136386Z","last_seen":"2026-09-12T14:17:25.378604Z","times_seen":25,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/assets/images/neyim_var_banner.png","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:16:49.761Z","timestamp":1789222609761,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"GET /assets/images/neyim_var_banner.png HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 19 Sep 2026 14:16:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 17:56:46 GMT\r\netag: \"1163aa-697264de-16d58c4d8cf26b39;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1139626\r\ndate: Sat, 12 Sep 2026 14:16:50 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1139626,"size_decoded":1139964,"mime_type":"image/png","magic":"PNG image data, 1058 x 1080, 8-bit/color RGBA, non-interlaced","md5":"358160de98d58add1ccb92d8b361c446","sha1":"99ff7d7acc881f9fd1cfbd708eea8d1c3d22e2f3","sha256":"b8081b87393bab85bd4acab386f4f0060344516f0c8c767a1191d5ba17472a62","sha512":"3158d5314ad27db093fbf903fe011475b73c6bf24b29c64087512c8bc7b9c72dd63b97f6e1b22ee6d4fdbfc6479b4d2dccead11a0d4e4fbb8c9865299852147c","ssdeep":"24576:YH/6vQZK5inMf+02waBc45knUwlNq+cBgCv1Wy9sDf+8XSfiXHo5Yh:YH/6YQsL02XWbUwlNq+X0Wy9s7aaXHaQ","tlshash":"63253395be69748d2d4e29bb3c375307182ea86cdb1f6a3e76c032c95354a3dc4029ed","first_seen":"2026-02-28T06:15:48.147436Z","last_seen":"2026-09-12T14:17:25.379244Z","times_seen":25,"resource_available":false,"data":null}},"time_used":1360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1147,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/assets/images/metin_tr.png","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:16:49.764Z","timestamp":1789222609764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"GET /assets/images/metin_tr.png HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 19 Sep 2026 14:16:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 17:56:46 GMT\r\netag: \"523b-697264de-8e44ce600d89ea71;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 21051\r\ndate: Sat, 12 Sep 2026 14:16:50 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":21051,"size_decoded":21385,"mime_type":"image/png","magic":"PNG image data, 714 x 250, 8-bit/color RGBA, non-interlaced","md5":"44c781b1371a01669826b65d74f57219","sha1":"55612ba151471af3f67dfa9ba8d048a08056f63e","sha256":"8f81dd46455090157f90b9479dd0a6c86222d503ba01e377342e8b55ae2123c0","sha512":"127101662335bb0a0697b2ff5def69447ea867dc46565ae3e079aff4ed21992e24cb44851d772b34131d84853d1d94a463abe68f3735725f1c4f087f2de323a0","ssdeep":"384:OJXE05KwvnEssnwnfsn7DWkcNL6wbu/DQ6VJ66+W++gC50HRdB8PlXgE87Y7FlA:O35PEtafsn7SLNL6wbuU0VJhwvglu","tlshash":"5a92d094f314daeee85949320c87255337162e6dbab63b1dc25011e869cfc963d30d7c","first_seen":"2026-02-28T06:15:48.139812Z","last_seen":"2026-09-12T14:17:25.380261Z","times_seen":25,"resource_available":false,"data":null}},"time_used":1186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1145,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/assets/images/favIcon.png","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:16:50.264Z","timestamp":1789222610264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"GET /assets/images/favIcon.png HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 19 Sep 2026 14:16:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 15:27:34 GMT\r\netag: \"40c-697241e6-ed6884f5df53833e;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1036\r\ndate: Sat, 12 Sep 2026 14:16:50 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1036,"size_decoded":1368,"mime_type":"image/png","magic":"PNG image data, 25 x 24, 8-bit/color RGBA, non-interlaced","md5":"93391497de645156492969abbe1da449","sha1":"1c1e7604777a46bf83eaaf1c7a4e5bbfc361f103","sha256":"f83723d18b873f16e93ff15943b7399147bd1a5e7567290f986fc945e3b941ca","sha512":"3f7c5be6cd2ddd338cc75c01b1080e515fc45a279f65cf0ca1ef8d3e477d54b81cdeb5527a164d23c7910586716f617a500bffe767e7b7fb578e841314217248","ssdeep":"","tlshash":"4911d8c057afc07c28b94c89623615db08df33aa83c86460e0c8c1e8c6550dc100c660","first_seen":"2026-04-14T05:00:14.499096Z","last_seen":"2026-09-12T14:17:25.380842Z","times_seen":19,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/assets/css/main.css","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:16:49.479Z","timestamp":1789222609479,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"GET /assets/css/main.css HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 19 Sep 2026 14:16:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Jan 2026 17:57:40 GMT\r\netag: \"11a241-69726514-777ffb6b6d8aa191;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 111477\r\ndate: Sat, 12 Sep 2026 14:16:49 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1155649,"size_decoded":111858,"mime_type":"text/css","magic":"ASCII text, with very long lines (757), with CRLF line terminators","md5":"66b60f978d5842ede3097301dc76160b","sha1":"bcd56ca92e3998f3c6f3e79cdb536f141fc1c7e3","sha256":"d99169034cb86d0ad69f0359563a339602809a7dfdc7374e04f037010e0b53bc","sha512":"82ecbf16d6e26c37dea2b827d7fea518ebfd00f60b18de3f0c9f8d9547384dd88819c2830e59841e2a7d22a99be21fc1c207329559c99c1b15c94c57b6d07f2a","ssdeep":"3072:5ankDGXuXd0kpfgSvYr3GkV7FbUyVPFNgX8iNNB9vOeb8s+6KpxSfdX904jKTIIM:snkDLQrPyXrLLh","tlshash":"9d254116bb00215eac37d338d7b39855ea325263c20fd97abb6c77484fb950881e2f95","first_seen":"2026-03-29T05:28:33.087684Z","last_seen":"2026-09-12T14:17:25.381494Z","times_seen":22,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/assets/images/sb-logo-tr.png","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:16:49.745Z","timestamp":1789222609745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"GET /assets/images/sb-logo-tr.png HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 19 Sep 2026 14:16:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 17:52:06 GMT\r\netag: \"20b5-697263c6-19ac9b1c83026838;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 8373\r\ndate: Sat, 12 Sep 2026 14:16:49 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":8373,"size_decoded":8706,"mime_type":"image/png","magic":"PNG image data, 130 x 127, 8-bit/color RGBA, non-interlaced","md5":"a0d9f241bc1d572011f90f1149d08828","sha1":"f3994cb18f362fe23e0c30e828004c34c4fabd0f","sha256":"01e4d6553b4628a8dddd16b81941aa96623f067b6b28d2fca49198af0d874098","sha512":"05ce57aaa71a5030dc67f55d42274804551b597213b61c4f8f4f804dc07f42118c600587d703d68db44b2bf6bfa28f6b7ccb26d875eddbaff3a72ba486fa5386","ssdeep":"192:F4ARkj62Mwe5fkwswA3rYsQcpos1j4YKkhLwX1Psaonm/U+aekxXAoTs2:F4eQe+B3rYsNNhndwoMtkxi2","tlshash":"6402af985ff55f43aa7b040bbe39e0b0b6bf721411b1aa4450397b1952e0e408f577e7","first_seen":"2026-02-28T06:15:48.148404Z","last_seen":"2026-09-12T14:17:25.383007Z","times_seen":25,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/assets/images/neyim_var_logo.png","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:16:49.762Z","timestamp":1789222609762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"GET /assets/images/neyim_var_logo.png HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 19 Sep 2026 14:16:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 17:56:46 GMT\r\netag: \"2db8-697264de-59c33804f1ac43a7;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 11704\r\ndate: Sat, 12 Sep 2026 14:16:50 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":11704,"size_decoded":12038,"mime_type":"image/png","magic":"PNG image data, 370 x 101, 8-bit/color RGBA, non-interlaced","md5":"e4610db620e7ae89a8d73aa0696fd799","sha1":"fab6d209aa1b93ed38a26ba4f274de7600e47b66","sha256":"a89e37b3657a7a4d8fc8fe912894d9e20589462a1a35fa0ab98a23b3fcef89dc","sha512":"d5512884db349c243ff82b3417cb0cf3980cebe55c9dbd6578f0afccff91f0b2c64d8373768cfb286ab70e8aeb248f2d09b3d3faf7669079780a437349a3d3af","ssdeep":"192:nSDS0tKg9E05TsLJi4+UOL7iQEf34Se7iVtLSrxIYAV5IbXfvr+srFpzKWEToKsl:SJXE05N4+7L+Vf38yVS6vUlrKWPR","tlshash":"f132c0964804904fb4de79d3edc91366a6b5821e49ae783882d3c2fd0f91d637d705bc","first_seen":"2026-02-28T06:15:48.13876Z","last_seen":"2026-09-12T14:17:25.38362Z","times_seen":25,"resource_available":false,"data":null}},"time_used":1146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/veri.php?ip=195.64.118.152","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:16:49.787Z","timestamp":1789222609787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://lkntansr.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Sat, 12 Sep 2026 14:16:49 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T10:24:28.258643Z","times_seen":18440847,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/veri.php?ip=195.64.118.152","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:16:52.289Z","timestamp":1789222612289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://lkntansr.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Sat, 12 Sep 2026 14:16:52 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T10:24:28.258643Z","times_seen":18440847,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/veri.php?ip=195.64.118.152","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:16:57.397Z","timestamp":1789222617397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://lkntansr.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Sat, 12 Sep 2026 14:16:57 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T10:24:28.258643Z","times_seen":18440847,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/veri.php?ip=195.64.118.152","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:16:59.886Z","timestamp":1789222619886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://lkntansr.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Sat, 12 Sep 2026 14:16:59 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T10:24:28.258643Z","times_seen":18440847,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/veri.php?ip=195.64.118.152","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:17:09.883Z","timestamp":1789222629883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://lkntansr.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Sat, 12 Sep 2026 14:17:09 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T10:24:28.258643Z","times_seen":18440847,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/assets/images/e-nabiz.svg","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:16:49.759Z","timestamp":1789222609759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"GET /assets/images/e-nabiz.svg HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 19 Sep 2026 14:16:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 22 Jan 2026 17:56:46 GMT\r\netag: \"65c9-697264de-3072e017d71fc532;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8557\r\ndate: Sat, 12 Sep 2026 14:16:49 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":26057,"size_decoded":8939,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"044ce8dd145e8dc195da55fc29607b9d","sha1":"6babeea290edeb8c711256e7e5c450f9b7332fee","sha256":"22e4653e27e83c2087b3f9be4df4b44a540f5b1db14fff40e042964a7d4d0dbe","sha512":"35840e60867566e1ecdcc5796a1799d9bbdb6d719f200363b8fcaefafd018d53d614fad43dd8a3a50e0f9e4233300f5b0dd7daac22b5bd091277f4f95c8ec694","ssdeep":"768:UWVyVHzedZb4hCQbSNOE+rFevgV1pivoT:UPVHzuZb4kQWXVZvS","tlshash":"45c21e7b03594bbe9691db848aa6b15d37948583b0f9d1dcff5fa986af058f38070c20","first_seen":"2026-03-29T05:28:33.078973Z","last_seen":"2026-09-12T14:17:25.384424Z","times_seen":22,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/veri.php?ip=195.64.118.152","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:17:12.384Z","timestamp":1789222632384,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://lkntansr.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Sat, 12 Sep 2026 14:17:12 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T10:24:28.258643Z","times_seen":18440847,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/veri.php?ip=195.64.118.152","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:17:14.884Z","timestamp":1789222634884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://lkntansr.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Sat, 12 Sep 2026 14:17:14 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T10:24:28.258643Z","times_seen":18440847,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/veri.php?ip=195.64.118.152","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:17:17.384Z","timestamp":1789222637384,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://lkntansr.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Sat, 12 Sep 2026 14:17:17 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T10:24:28.258643Z","times_seen":18440847,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/assets/images/loading.gif","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:16:49.489Z","timestamp":1789222609489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"GET /assets/images/loading.gif HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 19 Sep 2026 14:16:49 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 22 Jan 2026 15:27:58 GMT\r\netag: \"81a0-697241fe-3bc6884b7445e550;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 33184\r\ndate: Sat, 12 Sep 2026 14:16:49 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":33184,"size_decoded":33518,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 150","md5":"1f6e62651dbc2f9d73e16cb931e3929c","sha1":"0bfdf1bf8e439311999078ddd0b834bee41cc400","sha256":"4dc17122679e2bdcba824f8e020f42dafd3673c9f5d39dede9ab886c5826e9cd","sha512":"f89bf0ebd48cbf6e969757779619832e87894b31c4930977708ee3438ea864184c1b2078e31eddd90496c034b5676afbee6f998eddf70bdbb128b32f53660ac3","ssdeep":"768:XwucdM3y/l995qTVPoI7ZSKQqeaZEgMiQwoFLW21:XFGj95qVoI7EqeY9MiSL9","tlshash":"18e27d82e97d8e99f9173430362e0a62cd9114d0bcf6f63b7490bf45879663d60e8bd2","first_seen":"2026-02-28T06:15:48.142727Z","last_seen":"2026-09-12T14:17:25.385027Z","times_seen":25,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/assets/images/tr-flag.png","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:16:49.752Z","timestamp":1789222609752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"GET /assets/images/tr-flag.png HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 19 Sep 2026 14:16:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 17:56:46 GMT\r\netag: \"187-697264de-88819a055e47aaa4;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 391\r\ndate: Sat, 12 Sep 2026 14:16:49 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":391,"size_decoded":722,"mime_type":"image/png","magic":"PNG image data, 27 x 17, 8-bit/color RGBA, non-interlaced","md5":"e7901cad923768f2f59ca982e25834ad","sha1":"bec1865e1797aa6faa56c1975b5c1c4bed0a5219","sha256":"da43ff96225096a37299dfaba7945280c53d95dbbe78c8dfb0ad2dfd24045223","sha512":"fe75c489a352c96a0cad74be214563d94b07bb95fc63c38fcea63c4b05e6069001bf840a9e4d7ff8e1eaf6aac46368a0e58ee8199b6d69b4036e93d41fff0caf","ssdeep":"","tlshash":"74e0f1b1f2a409e19e8702797113598ce4238480d10b2a040488d0668edcf91c0dd15a","first_seen":"2026-02-28T06:15:48.145363Z","last_seen":"2026-09-12T14:17:25.385751Z","times_seen":25,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/assets/images/user.png","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:16:49.755Z","timestamp":1789222609755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"GET /assets/images/user.png HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 19 Sep 2026 14:16:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 17:56:46 GMT\r\netag: \"161-697264de-811b1f3b869e4355;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 353\r\ndate: Sat, 12 Sep 2026 14:16:49 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":353,"size_decoded":684,"mime_type":"image/png","magic":"PNG image data, 22 x 23, 8-bit/color RGBA, non-interlaced","md5":"639373259cb7ee696d6d984b04f4f329","sha1":"f12e397ea04e62a6752414b25ef8cb4df54163df","sha256":"f9363971113960d078a074d73b3711acc4f9cc5f097f927e4e0ff71eda29b006","sha512":"d891ffc2e23e7a66a4df634c2ac3e0332cea86f27e4c53aea0fef928acc16a86f9d309a1e7a1b1038f673e96fe3c5a68db1d0be08452de34ba7b66b947ec3e4d","ssdeep":"","tlshash":"3ae0c0d917425fb8f6e44e7d824a15ec769c40124b44269211173ffd07325078190763","first_seen":"2026-02-28T06:15:48.135331Z","last_seen":"2026-09-12T14:17:25.386341Z","times_seen":25,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lkntansr.net/assets/images/e-devlet.png","fqdn":"lkntansr.net","domain":"lkntansr.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lkntansr.net/","date":"2026-09-12T14:16:49.758Z","timestamp":1789222609758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lkntansr.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 13:34:47 GMT","end":"Thu, 10 Dec 2026 13:34:46 GMT"},"fingerprint":{"sha1":"FA:0E:EF:48:24:2C:5D:6A:1E:72:02:7B:24:62:D5:35:A3:8D:EE:9C","sha256":"47:E6:41:38:A2:7C:3A:52:1C:D8:90:FD:17:07:1D:05:CB:40:FC:CB:89:EB:09:A5:BF:79:1D:95:68:89:A8:96"}}},"request":{"raw":"GET /assets/images/e-devlet.png HTTP/1.1\r\nHost: lkntansr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lkntansr.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 19 Sep 2026 14:16:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 17:56:46 GMT\r\netag: \"3fd-697264de-ebe1e15970ffa2db;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1021\r\ndate: Sat, 12 Sep 2026 14:16:49 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1021,"size_decoded":1353,"mime_type":"image/png","magic":"PNG image data, 41 x 30, 8-bit/color RGBA, non-interlaced","md5":"89d8b8c27a056991dff744bc620d451f","sha1":"829ba72f772943d461040f0574d7cfedc5f42b8b","sha256":"b941d2e106429ec5f86c696835cf18f1ca9edccaa82b8345936eb7eae625d6be","sha512":"c7da1343483ddef4be3cdaec889feb6e2b4b7ba48fe86a312157cc69bdb03cb7835ad765174ba02323274382efa80cca565bf9c9b214931a7d0bd35ed867a45c","ssdeep":"","tlshash":"72110c7144a7f3b05cdc71863c1c459f55f2003042778ca834156f95103afab5703aab","first_seen":"2026-02-28T06:15:48.137508Z","last_seen":"2026-09-12T14:17:25.386938Z","times_seen":25,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"lkntansr.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"lkntansr.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}
