{"report_id":"a4407984-ddc8-4a5c-9ea5-dbf334fe81d0","version":0,"status":"done","tags":[],"date":"2026-09-13T19:00:35Z","url":{"schema":"http","addr":"kespoy.com/","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"172.67.134.157","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kespoy.com/","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"title":"One Investment Group | Independent Australian funds management business","dom":{"size":143191,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40266)","md5":"9789822ab5d0d1af60fa96cafe723190","sha1":"dd145b0d6847829d67074464500922a4f7cdb9b4","sha256":"afb30c7fc823faa750bd79961c26ad1c29b93cce5bb12a18756f29e0fda36eaf","sha512":"e1d6c391f8ec440dabefdb5a834fdd65911425de6d9cfbbae97c5d2a33fd59d511313436856f491c7e13b0207bd65d5116fbb8073c402eb0811369bdd11117d1","ssdeep":"1536:rAYvgidFnSkjuDWpuDMw3+OSSSVu/SkN78jHUEwhe2iKi+fanwL84KNge8dAj+Nm:8EvdFaacIw3+pbhvnwL2t","tlshash":"e0e3957218a6243b970b05d5e169eb1a77c3815ecf420991a3f8d3adcfd1edab62310d","dom_hash":"domhashf3c3a22a210214c8010c35fe8c6433bd","first_seen":"2026-09-13T19:00:41.548986Z","last_seen":"2026-09-13T19:00:41.548986Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kespoy.com/","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"172.67.134.157","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-18T19:00:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":8,"received_data":377232,"sent_data":4437,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.oneinvestment.com.au","ip":{"addr":"104.21.0.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2015-11-21T06:59:40Z","last_seen":"2026-09-13T18:48:32.280145Z","alert_count":0,"request_count":4,"received_data":194651,"sent_data":2405,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-06T22:44:31.282543Z","alert_count":0,"request_count":2,"received_data":895148,"sent_data":943,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":72104,"sent_data":627,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-06T23:07:00.048542Z","alert_count":0,"request_count":1,"received_data":3793,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kespoy.com","ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-08","domain_rank":0,"first_seen":"2026-09-13T18:48:30.983581Z","last_seen":"2026-09-13T18:48:30.983581Z","alert_count":22,"request_count":22,"received_data":3362875,"sent_data":12047,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress:6.6.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Site Kit:1.121.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Elementor:3.24.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kespoy.com/","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ae59b1913ca29e50513416ccd314d02","sha1":"cee8e154aad414656b50354f8b58faf6593f2525","sha256":"ba91b20ed6a0028ef5c5d865a7fd03e96cdb7420c2778a7eb47a7592c829de23","sha512":"89216b52ef531c2a2496df9b2ee16dd290d33a73f3f425139725cc99ff7ba9904a8b1533fa4ca8f3939fb484e58950076844a11add20b2adf53fbb39b6a7a9ed","ssdeep":"","tlshash":"4fd0eba004032cba02ff18003b4bbb0132a3220a00508c600c4102495f3f803a494c8c","size":275,"data":"","first_seen":"2026-03-14T22:06:30.346417Z","last_seen":"2026-09-23T09:44:41.943244Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c70f503bc86fd2c1fcaad19aff9019b","sha1":"eb69242c7b6a0a2947f23dad8f41cd206fe969ad","sha256":"3ce6d55e65a74ef0c7f6ed15ee9360c5af45b2fb4ac06812e1a1380c450b3e61","sha512":"8d727b48c56de2d7cc8b69cf478a42bc6b9a08b8c7eadf59ef50df0adf1b7b7b96bfd183514a5ce9711bc195454ca418d5b1e9bd5acaad6c82fec89678c3e074","ssdeep":"","tlshash":"22e028da79111cb170ed05f533b1e1197143510878091c23cdfdcd2438185c74c135cc","size":341,"data":"","first_seen":"2026-03-14T22:06:30.347699Z","last_seen":"2026-09-23T09:44:41.943806Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6fd9094e86814d0503102df9d5dfa4d1","sha1":"8b0c06a86d929b80bf912e4b248f41e7737d2940","sha256":"5d96c558db496731c3c9b46bc69c03427092ac7b849272016689615ef14f9e1f","sha512":"1098499fe388bd17824e4219517711454df354874b9e9ff94b332d364b706bb0be87df705a5d5f0556f5a1523c1ad872a27a257090eeb9f7b53ce9ad74fb92ac","ssdeep":"","tlshash":"42c08c289a829d9516a9c2d9134db271761a818a8c1a9782a58443450f99068e0095d1","size":149,"data":"","first_seen":"2026-03-14T22:06:30.350297Z","last_seen":"2026-09-23T09:44:41.944382Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"17ac1c8fd583e290619b63d0aea745bc","sha1":"b770e62417df378d95cc70b5a6f0955d6a153d64","sha256":"6d256beb71f4899bc0b4b0956ee5e8047b4acc6060be4189b9efcbe5dfc140ca","sha512":"c7e5a1bf05d5b7dab48e37c6fcb82a161ddf0edf0265b6578bfb6e5aa8502a5f875f14c36fea7cf70efb8e89fc739b6e3616b1e0a836cd9968b2ffd3af756f9a","ssdeep":"","tlshash":"bdb09216a2a11c5961a813b4228d0a49bae6a22b408cd809286aa921bf89924d1c63f4","size":122,"data":"","first_seen":"2026-03-14T22:06:30.351541Z","last_seen":"2026-09-23T09:44:41.944929Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47846c2558ea133d414554698bf4d1cf","sha1":"8756e69a65532a0e4ea39f8c93c541000f2274a1","sha256":"ae19cc271949ae889595f85dd531262899459206c844d5ac68c21d70b23f95b9","sha512":"df60f2cee35a5abaea721e46c4984f27c24d3917121b0defb9d5703a62c5b1277f6f8a41a82be6cd353e591614a1e1e62b675038bcc81ebc3222e3e72f62f2f1","ssdeep":"","tlshash":"a3c0803ce9f10c511ba64c5435592681de4186bbd2a6184a01b1851d8fb11d7d0417d4","size":165,"data":"","first_seen":"2026-03-14T22:06:30.352715Z","last_seen":"2026-09-23T09:44:41.945491Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e58ef3987fe3564429d448116208733","sha1":"49bf5e735cb7db6c243a0c4661352de8a3fedb64","sha256":"957777a8c8f9fe8363b0d2a527591a803773424aa275b124d5a3da471a08300a","sha512":"78256f568cd53c9c974e404965c99d4ab61830f455bbffd70e799f353193dd1e9cfa4e38176c65a438fbd07742ff83f2d47bed670487243b647d0179d314be5c","ssdeep":"","tlshash":"daa00211434e5cd315f09264975550816742064d055d4882b5c885551dd6c59d0d97f5","size":76,"data":"","first_seen":"2023-03-10T04:45:38Z","last_seen":"2026-10-03T02:15:44.252089Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c49cdb1e90bfec1fea3002fd3c1f1b54","sha1":"e6d4719bcaa0239044a4c3cdf20e039967a94bc4","sha256":"cf01dfba55c27e43cca73bd03850982155f547aa0fb93ada25449d119391ee17","sha512":"f4d42ddb9541b5a9deef920c014f8d8116df9cd4a5805fbedecc55d403ed8098d86ae9f4158cd3cb9fd173b19bfd2c72224c6ce80c5cdc906beabac1d1d41489","ssdeep":"","tlshash":"ade02b06a7060dff46ee515d3f85e02685cc1520c21088bb98f5ce192fd9410a18b3da","size":411,"data":"","first_seen":"2026-03-14T22:06:30.355315Z","last_seen":"2026-09-23T09:44:41.946354Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"388722716c8c89af1136cef19a98017c","sha1":"50875c3734cfd73eb9856bef783de97dbb496dae","sha256":"d39b00bf80cd9591e726005002d8084407bdb41ce867ac0e70ede5b7a781c472","sha512":"758f2d3f006c02d444367695830968f8ab8f59a46489e76f4fd148bf4d33150189b5547b952756d53dccba74eb8138f18f26f4d11bc5842b7229335e715fa2ad","ssdeep":"","tlshash":"30319ad33267c01bbcbb2413237f531e352079267f40b562eee5886645b8e43266b69d","size":1628,"data":"","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-10-12T03:26:32.40253Z","times_seen":1124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/js/api.js","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b89c7b075cfa2c6674a1efdac61eccb","sha1":"447a4523a7c83c18e875eed387dbeeab8a9c071d","sha256":"e8fdf9ceb2e0e67d350912156ee1e2841ec16088f50d4e72f5a65286332394ce","sha512":"f9aba0ddc753b6ee2a11de767dae0680caeebc25f45740495dffc66d7e8ec6468706ee394898bd52ab1b76d301c4e4cbfbaa392331f014914be96e674469b82f","ssdeep":"","tlshash":"3d1140ba1514b0315f231af4e4fbdfe1f481a028f12888d08415ee842e798d7ce15985","size":904,"data":"","first_seen":"2026-03-14T22:06:30.321926Z","last_seen":"2026-09-23T09:44:41.905206Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/js/lazyload.min.js","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d18523e4a4aaa9420a86e4dddfb07554","sha1":"fa22a3d38dc3c87ca92f1456846682abeb696b96","sha256":"6e86a52a9858206302e32036d89907e3ac87762055e7f9c6364aec33221b3e41","sha512":"5290650d7a2a12b6c2bb65b0a46bfcee46d4058afdd0999d7bec1c7db5acd35038ac6a820e3dc2fd1d3dca50776e9a2690bb0476f63fd1746564cb7d7329ecf5","ssdeep":"192:hXVUD75/K/x4sGDkPq4rL6Z3jGXnxMXR5blzw7fu4:hFUx/KLG4qV3jGuB8u4","tlshash":"0af1ed0df95ab52e3d23b4b5531f120a773a244374434454a6ace6d4ae7c88f2963fbc","size":7890,"data":"","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-10-15T02:55:53.168497Z","times_seen":10153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/js/b0f35be9c11b8a0c65645d3b351a8a59.js","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecfe7e57ec382e297b36fc266f53d999","sha1":"566e1d665ed3eb27d52b934b1fc1afb40363ca73","sha256":"865787ceb6ce3aea45c2510f2a8fc034df3b8ce21c137d7d3687e3bd0704fa86","sha512":"a224903a07b4d3a8df4971eb556b5c6f7f3331626266032a9775b3fba7c80601c17aa723dba4d3d14acf529e701db6fd3fe092d1b86a31e4e991652682e15f98","ssdeep":"6144:0rPU+Jo0FQ8zcFQk5fvtgDC8FaCC4Pxo8SOUuGaNPPdqJuejp9s23OOk0:MP80FQ8wlgDC8COgHJuejp9s23jk0","tlshash":"e1a43c85b31834b342ff21b5906f530a723a5569d906846cb8b8dcd82df8c59227bfbd","size":456258,"data":"","first_seen":"2026-03-14T22:06:30.343439Z","last_seen":"2026-09-23T09:44:41.933496Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5843dbdc71ff8014a5eafd346a262da","sha1":"127e1d971efab9341db8079f10663dc28e8e0a2f","sha256":"8e73a30d35c83ea6a597c3343324d2b7df097ad26e67b62efb5266ee12d317b5","sha512":"ac28dfa1a6fd09528e1ffc3f4fa19b0719c01f9033872e3eab51175b95c451179f1db22445b43ef9947e1810a5a37fdddeae7cdd7fe03b814a98e16e8642ab74","ssdeep":"","tlshash":"7e514241671662f381f60f36b12fb642713ad015140328b2b9bd9d90aba6deb5363d1e","size":2771,"data":"","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-10-15T00:31:41.110791Z","times_seen":17295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-10-15T02:36:19.351131Z","times_seen":106107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-55BFW9XC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5895b470c8d4172ec709d32b213c54ad","sha1":"60079dc0799c34d2f137c44b0003a019b17ca479","sha256":"71a4397e084d92c6e8a97516cb4cd0e7c3f95cb2af4329c7667e1ab1a2f4b8db","sha512":"4f337bc665222ff03d6f9a752854019de8736630c06eb926d2b0c60258fdd979d17a8e5787d6afa2b14a19a19bd9540d5ff1e70838c18c97cc5b3257b7b5bdb8","ssdeep":"6144:Yj4f1L6SSxQhmgyyEydQV80ucTPbNELR3/jbxWS3PKNS3IhZ:2K0yAynNxJPiSc","tlshash":"8ab409ce73d674229396f078903f01cba57b29a2b49cc896f18adce02e3455a5167f7c","size":522296,"data":"","first_seen":"2026-09-13T18:48:37.085728Z","last_seen":"2026-09-13T19:00:41.612984Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/js/gtm.js","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d58ca22ccde496f0fc4d941952609e0c","sha1":"2ae7348becb448b3dee9085e956fbc71c3ba63dd","sha256":"cb38b203ea6362301c00a506f5c4094f214ecd7c0638c3dd4cefeb1542724de2","sha512":"cd65f8cfc7fb8908cb3bbf7ed0fb1b1e653e2c5deac9e578fe19728de6c960be6beef06de4b0d5b5ed937bbb9fa262c18132f2efe8d132c96efeb66440a65bce","ssdeep":"3072:gBax8eulMYeHToG00clXoldVQbQwM87NzgOsEemtJeN0ZzVDlGL:0pmFslqdUd7DsEemvemzo","tlshash":"ff2408d8b7d6b42683a36478503f014bf17a6dd2f80cd894e146d4d82e74aa9427bf7c","size":217589,"data":"","first_seen":"2026-03-14T22:06:30.328627Z","last_seen":"2026-09-23T09:44:41.931126Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-10-15T02:36:49.549289Z","times_seen":121400,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/js/jquery.min.js","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-15T02:37:58.810418Z","times_seen":1109332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MJMSMFP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"88e6660a6787b5b73e13f230dde5836a","sha1":"602595aef38821b0db9caa3d8df08eb75ae154e9","sha256":"d2d08f840dd84e5adb77b006ff598f3f5ace4a9959c34c4b37799d747759029f","sha512":"7eecae3746047ece4154ee834b8fd671f4c2266421275e206c7da9d735a54837552790f603e79799d385068459fe2342dbe3b2e64207df3a1956d917a9e84c5f","ssdeep":"6144:Gpf1L6SbQEm6qy/vd80vcTPbNELR3/jHvumtK4xZ:GraFyrvXL3","tlshash":"2e841acdb3d6b42283a3b574903f014bb23a7992b84cd894f286d9d42d3465a9237f7d","size":371598,"data":"","first_seen":"2026-09-13T19:00:41.571643Z","last_seen":"2026-09-13T19:00:41.571643Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://kespoy.com/lander/hochu-spatb/js/b0f35be9c11b8a0c65645d3b351a8a59.js","line_number":2,"column_number":981},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/images/cropped-OIG_logo_black_sq-192x192.png","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kespoy.com/","date":"2026-09-13T19:00:00.454Z","timestamp":1789326000454,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/images/cropped-OIG_logo_black_sq-192x192.png HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/\r\nCookie: _ga_6DFL3R5PGW=GS2.1.s1789325999$o1$g0$t1789325999$j60$l0$h0; _ga=GA1.1.244407999.1789326000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:00:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=6,i=?0\r\netag: \"67ec5ba5-305b\"\r\nexpires: Wed, 23 Sep 2026 18:47:52 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 728\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a9h9IU96Nv7fL7yNcFs1H2g8gAiyIiCq1wadJlYwu5hVeMB5BPkCyoO3rJNtZVLfuRjRh5%2BD7OlHkFI7zKHw%2Fr7Eg1%2Faag7PThqx80qEh%2BxWoAwfp%2FH1aBJkVRsN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a9646ede2456c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12379\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12379,"size_decoded":13147,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"37f8cae3616dbc93f3bc38ca76089e7f","sha1":"2d33bbeb34383b55fac4d8efc41072f8b62ce35b","sha256":"b0bd8b7ff6890f8d2928176aeacd6c90ec04e43a124a86778e3d0cb463a0f18e","sha512":"16bf81ec9912b4f7c04e5b7976f0013d7032897a358463894c55e77f29728f1f9e7157519e3898f599d8ce24f392cd92eebc806d7231bccc4184802eae926e0b","ssdeep":"192:3BeBwh3U/Z104XuxJao4oYsbBW5GowRrBg0v0XTHfsNcccxPcB+wmGwXLtgz1Mu:4Beo7hPodWiqjX/vXLGP","tlshash":"0f429ec59f1e01d00ffbe06c80f365182aaa9029e271967e9fdea877247c62575c3607","first_seen":"2026-03-14T22:06:30.340372Z","last_seen":"2026-09-23T09:44:41.942216Z","times_seen":38,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/js/b0f35be9c11b8a0c65645d3b351a8a59.js","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.229Z","timestamp":1789325999229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/js/b0f35be9c11b8a0c65645d3b351a8a59.js HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rnl6VQOZuxX6Yc1hqn%2FK5ifU8nGXbXQGkTMUlYqCKwMFDEo5ihAnvrxIXBRzXlSVTXQtNU4ESaXQhaC%2FiAWfD5IFMRZGnzQZtHWVvDISoknlmLlhJZ94dMq1P14%2B\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ec5ba5-6f642\"\r\nexpires: Wed, 23 Sep 2026 07:19:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 42030\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a964672d8956c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":456258,"size_decoded":121990,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (48845)","md5":"ecfe7e57ec382e297b36fc266f53d999","sha1":"566e1d665ed3eb27d52b934b1fc1afb40363ca73","sha256":"865787ceb6ce3aea45c2510f2a8fc034df3b8ce21c137d7d3687e3bd0704fa86","sha512":"a224903a07b4d3a8df4971eb556b5c6f7f3331626266032a9775b3fba7c80601c17aa723dba4d3d14acf529e701db6fd3fe092d1b86a31e4e991652682e15f98","ssdeep":"6144:0rPU+Jo0FQ8zcFQk5fvtgDC8FaCC4Pxo8SOUuGaNPPdqJuejp9s23OOk0:MP80FQ8wlgDC8COgHJuejp9s23jk0","tlshash":"e1a43c85b31834b342ff21b5906f530a723a5569d906846cb8b8dcd82df8c59227bfbd","first_seen":"2026-03-14T22:06:30.343439Z","last_seen":"2026-09-23T09:44:41.933496Z","times_seen":39,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.377Z","timestamp":1789325999377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kespoy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 10 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 290541\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-10-15T02:35:23.559923Z","times_seen":328212,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":17,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/images/sydney-2651711_1280-e1522054677941.jpg","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.403Z","timestamp":1789325999403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/images/sydney-2651711_1280-e1522054677941.jpg HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=4,i\r\netag: \"67ec5ba5-1b3ee\"\r\nexpires: Wed, 23 Sep 2026 07:19:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 42030\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FHu7ynBFRTEG%2FPonwBSk5ipxgv3SaHsK%2BV%2B%2Bs%2BY8nPwQQtQARNTWqqadyck%2BYTFuj95a7PaLIQ5ptlv44CSex2hyi3MeUo5T1OXuQoC3lcGdXDIQ%2FmjqDAHM9tHM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a964684d9256c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 111598\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111598,"size_decoded":112374,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 1110x494, components 3","md5":"4c4c7084023a63ebce36104668659506","sha1":"43782098fbc3422819d10d6e86db8d3ea76cc562","sha256":"05b4d47e3bd4bd6910b007ee813462997009f75cc4bdeffcc823e30ecb9ac563","sha512":"4ccfd3dca669dc20aa8141f2a695c50e96ba367451bf812cd744f2c716dccad52288ab2a0470e56c105bdfa43a14bb23c862dab29efe0b012c69c1de0a47328b","ssdeep":"3072:yg6KzWoB5aU5WEaoqozjwnFVgqXc3suxHJAMQ3:yg6KzWoB5azozm1Xc3ssphc","tlshash":"a0b31218df036de5708f5e08cc899f8d61833589b386c38982b2b04585f89f3db96697","first_seen":"2026-03-14T22:06:30.304104Z","last_seen":"2026-09-23T09:44:41.942728Z","times_seen":38,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.472Z","timestamp":1789325999472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kespoy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:10 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 376129\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-10-15T02:15:00.263559Z","times_seen":68958,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.oneinvestment.com.au/wp-content/uploads/2018/03/OIG_White-1.png","fqdn":"www.oneinvestment.com.au","domain":"oneinvestment.com.au","tld":"com.au"},"ip":{"addr":"104.21.0.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.536Z","timestamp":1789325999536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneinvestment.com.au","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 00:21:34 GMT","end":"Fri, 13 Nov 2026 01:21:27 GMT"},"fingerprint":{"sha1":"F7:61:CA:C6:B2:7B:FA:1E:BE:CA:1C:1C:F0:B3:98:CD:0F:32:EC:5B","sha256":"50:B7:CF:F1:6B:1E:C9:84:90:65:F2:D9:61:3B:BA:A7:CC:96:9D:0B:D5:0D:F6:69:9F:D5:EE:FD:22:E6:59:1D"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/OIG_White-1.png HTTP/1.1\r\nHost: www.oneinvestment.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 13 Sep 2026 19:00:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 10935\r\nset-cookie: __cf_bm=J7s8PlsMpOsJ.zhDLl2wUIBsNDo5_LjQH9qE1QE9DkU-1789325999.647126-1.0.1.1-XquMQOf2KkyD7EjVfrW79xSXmRsIZqEd0sH00PJOHEK6WY3zMPgab1X6gkazk4vcP3jNg5IuxuXxZgQjmmjliRH0nkAB5sP75PDflyN9bJKhmgdeT3UPUadrrxbS0UvK; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.oneinvestment.com.au; Expires=Sun, 13 Sep 2026 19:30:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wNEK%2Bwo56kWOerzCN2Wd4APggADgiyZ8FigQt2r0TkA2DhgU1SZns7ZKGuOofJH97VZ78DonsVLIy2RrxxyTTDrv5cUO27f%2FXCvjtiUPEJbqGiVr5KQviJhgRDMI%2FKeypsq8ZJOl3mUH5Q%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\netag: \"5b8a64aa-2ab7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Sat, 01 Sep 2018 10:06:34 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nki-cf-cache-status: HIT\r\nki-edge-o2o: yes\r\nx-content-type-options: nosniff\r\nx-edge-location-klb: 1\r\nki-cache-tag: d5d04bf4-345a-48ef-a99c-1c1ef92bc121,6a9038b735e2b33751e07c3541ebeb35f493f7020ec65c304301921fedd7b017\r\nki-cache-type: CDN\r\nki-edge: v=28.5.0;mv=99.9.9\r\nki-origin: g1p\r\ncf-ray: a3a96469afa47a70-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"J7s8PlsMpOsJ.zhDLl2wUIBsNDo5_LjQH9qE1QE9DkU-1789325999.647126-1.0.1.1-XquMQOf2KkyD7EjVfrW79xSXmRsIZqEd0sH00PJOHEK6WY3zMPgab1X6gkazk4vcP3jNg5IuxuXxZgQjmmjliRH0nkAB5sP75PDflyN9bJKhmgdeT3UPUadrrxbS0UvK","quoted":false,"path":"/","domain":"www.oneinvestment.com.au","expires":"2026-09-13T19:30:00Z","raw_expires":"Sun, 13 Sep 2026 19:30:00 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=J7s8PlsMpOsJ.zhDLl2wUIBsNDo5_LjQH9qE1QE9DkU-1789325999.647126-1.0.1.1-XquMQOf2KkyD7EjVfrW79xSXmRsIZqEd0sH00PJOHEK6WY3zMPgab1X6gkazk4vcP3jNg5IuxuXxZgQjmmjliRH0nkAB5sP75PDflyN9bJKhmgdeT3UPUadrrxbS0UvK; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.oneinvestment.com.au; Expires=Sun, 13 Sep 2026 19:30:00 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":10935,"size_decoded":12317,"mime_type":"image/png","magic":"PNG image data, 600 x 327, 8-bit colormap, non-interlaced","md5":"21c2ea2c61d17b118c7de73453055f0d","sha1":"3fd11dc87c59df429082f03799c7ff02936d7115","sha256":"d9adbcf028648f70e382d3d437bb82d88c57a7df77d02448780e663dae446e01","sha512":"239cc189b27a1fa6f13e40445dae868d039c77c8ace809ec53d7fd7dc0431425e139dc915cd37bb8c73d590e31870217d9e9c0b5eced647adf5eef4cd99838c8","ssdeep":"192:2N0UcGD3qQBny1tlHEMFTwDPS1rHtmHLOPRwKzX5YJNR4NFuITxp:PGbqkYDkMmDK1BAOPjXeN8Txp","tlshash":"4f32bfcd4c91dffc97bc5da67d52f91822a90c11c1c93c8bec8279007a35999a0b0b9a","first_seen":"2026-03-14T22:06:30.29354Z","last_seen":"2026-09-23T09:44:41.908964Z","times_seen":38,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":0,"dns":5,"connect":21,"send":0,"wait":481,"receive":3,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.oneinvestment.com.au/wp-content/uploads/2018/04/maxresdefault-e1523239998378.jpg","fqdn":"www.oneinvestment.com.au","domain":"oneinvestment.com.au","tld":"com.au"},"ip":{"addr":"104.21.0.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.826Z","timestamp":1789325999826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneinvestment.com.au","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 00:21:34 GMT","end":"Fri, 13 Nov 2026 01:21:27 GMT"},"fingerprint":{"sha1":"F7:61:CA:C6:B2:7B:FA:1E:BE:CA:1C:1C:F0:B3:98:CD:0F:32:EC:5B","sha256":"50:B7:CF:F1:6B:1E:C9:84:90:65:F2:D9:61:3B:BA:A7:CC:96:9D:0B:D5:0D:F6:69:9F:D5:EE:FD:22:E6:59:1D"}}},"request":{"raw":"GET /wp-content/uploads/2018/04/maxresdefault-e1523239998378.jpg HTTP/1.1\r\nHost: www.oneinvestment.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 13 Sep 2026 19:00:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 74098\r\nset-cookie: __cf_bm=PV.2UJ6fk3aUdfXDR6wMP_Cn3KVtay5yOVtVswOEZ4Y-1789325999.8545198-1.0.1.1-hm_kBx_gpOYBxJKMENROWm3v9p4SIolPQsoxNB8TqRjmpwCMDB_8vyJQ9vk7TzWnPjhq5CVV63Xx3KClTULItdgroFxK5cYmIlpQa6e91DTjvKb2g3_lUzRO_wQ5eNBw; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.oneinvestment.com.au; Expires=Sun, 13 Sep 2026 19:30:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6eoMphJq0qaF2WcJmpGFAVD0cRNE%2B6tFi8Oi6g0a0VEiBNGZulD1UA1%2FksAiYaw16AqjwVKCqbXlgJDRNF1EXk9LiLeCfNr5UGI%2F3LEkx%2B1mJMYhN6BGD3qQjn5i60J1CbV7KYmnaxMwwQ%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\netag: \"5b8a61cc-12172\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Sat, 01 Sep 2018 09:54:20 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nki-cf-cache-status: HIT\r\nki-edge-o2o: yes\r\nx-content-type-options: nosniff\r\nx-edge-location-klb: 1\r\nki-cache-tag: d5d04bf4-345a-48ef-a99c-1c1ef92bc121,e9343e6ed1518b9cbe10d9e4c8a8df53e644ff2a9a82d17f7523438fafdde803\r\nki-cache-type: CDN\r\nki-edge: v=28.5.0;mv=99.9.9\r\nki-origin: g1p\r\ncf-ray: a3a9646af8e37a70-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"PV.2UJ6fk3aUdfXDR6wMP_Cn3KVtay5yOVtVswOEZ4Y-1789325999.8545198-1.0.1.1-hm_kBx_gpOYBxJKMENROWm3v9p4SIolPQsoxNB8TqRjmpwCMDB_8vyJQ9vk7TzWnPjhq5CVV63Xx3KClTULItdgroFxK5cYmIlpQa6e91DTjvKb2g3_lUzRO_wQ5eNBw","quoted":false,"path":"/","domain":"www.oneinvestment.com.au","expires":"2026-09-13T19:30:00Z","raw_expires":"Sun, 13 Sep 2026 19:30:00 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=PV.2UJ6fk3aUdfXDR6wMP_Cn3KVtay5yOVtVswOEZ4Y-1789325999.8545198-1.0.1.1-hm_kBx_gpOYBxJKMENROWm3v9p4SIolPQsoxNB8TqRjmpwCMDB_8vyJQ9vk7TzWnPjhq5CVV63Xx3KClTULItdgroFxK5cYmIlpQa6e91DTjvKb2g3_lUzRO_wQ5eNBw; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.oneinvestment.com.au; Expires=Sun, 13 Sep 2026 19:30:00 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":74098,"size_decoded":75485,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 1110x396, components 3","md5":"8d2c875639dacb8f8f099cd9a3fb8bcf","sha1":"067df29b0306b31abcccaecf340120092ba88643","sha256":"ddbaea7941db17cccae4c10e48cdd2105d73bcdf373b2a28c4d8d5a087e18b84","sha512":"4c0ccaf0b3e01a08bcec567505c77bf0cc8ca01c0c7ffc2432835839a19efb1b0fb7fd37bdd00a7e07e32ff5d7d24d3125e331b5b27cbbbd70d742e7162832aa","ssdeep":"1536:bgA/CMst17QE7r9hsGbMoj3SddgzUzjYLJQpOpsBZhsUaTTSAm+fSSq8IgPqAm4h:z6Mst17F7kgSdlzjquO0sUXAXS7cSAmI","tlshash":"a57302088e91edc514c46feae4202094c51a0b22a77dfc2a9bfae741e3704c2f1e575f","first_seen":"2026-03-14T22:06:30.333552Z","last_seen":"2026-09-23T09:44:41.911119Z","times_seen":38,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/fonts/stmicons_3.ttf","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.878Z","timestamp":1789325999878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/stmicons_3.ttf HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nCookie: _ga_6DFL3R5PGW=GS2.1.s1789325999$o1$g0$t1789325999$j60$l0$h0; _ga=GA1.1.244407999.1789326000\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-21cc\"\r\nexpires: Wed, 23 Sep 2026 18:47:52 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 727\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gyz%2BGjA2%2FgSKrslb%2BYh4eDUmTfPQF8Z6wq4ph5umi3UedB9ZfToAbRwmFEtXEgPrHHVoBaE%2BVQ59zCWGs4SfxbmuTpZAwAPDM8QYjWREq61c%2BK7iL24gH2ccdYca\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a9646b4db256c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8652,"size_decoded":9434,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, stmicons   ","md5":"fae902e7ca8f8f2f477a29cb6defdf48","sha1":"98b1f2024fed612be44dfe6002cbf62e43f1bf6e","sha256":"1df6b7c4bfc8b3394909576e4519180f1198e12643084f7b60ee69d72fcdd7d0","sha512":"917409bcf0c17c3409e3cdd4a74a1866fb75cf68a9bc005bc380f63cf85dcb170eb42cea43dfc43ce3f70bc5523bba4016267375be10d26f71811ed137494d27","ssdeep":"192:zWJgJYIUINTkRjvKKmJvX7sJIw/eeyJGQfDbDukABrihKL1K:Ug+IUINTk0KyJw/+JG0PzA9G","tlshash":"59023b1e5699df5fc4a24fbd8c4a8a5c8b6dc9509317638a66ccce6aa4321400dfdf0e","first_seen":"2023-04-11T08:32:15Z","last_seen":"2026-09-23T09:44:41.932327Z","times_seen":64,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/js/jquery.min.js","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.223Z","timestamp":1789325999223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/js/jquery.min.js HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3AYBDEl7a9L3yY%2BpgttRjb%2Bl5nSzqWSzFljN7Gf4Q%2FVTFa2VFC2v%2BihDrvCNdXzlOtccPzTW1FgwuhnT0QsMB9WT%2BOhcUtthS9rXHp6RUFOyfdbaJd8R%2BvEHrRO4\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec5ba5-15601\"\r\nexpires: Wed, 23 Sep 2026 07:19:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 42030\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a964672d8656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":31209,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-15T02:37:58.810418Z","times_seen":1109332,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MJMSMFP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.358Z","timestamp":1789325999358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtm.js?id=GTM-MJMSMFP HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\nexpires: Sun, 13 Sep 2026 18:59:59 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 13 Sep 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 129682\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":371598,"size_decoded":130332,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4971)","md5":"88e6660a6787b5b73e13f230dde5836a","sha1":"602595aef38821b0db9caa3d8df08eb75ae154e9","sha256":"d2d08f840dd84e5adb77b006ff598f3f5ace4a9959c34c4b37799d747759029f","sha512":"7eecae3746047ece4154ee834b8fd671f4c2266421275e206c7da9d735a54837552790f603e79799d385068459fe2342dbe3b2e64207df3a1956d917a9e84c5f","ssdeep":"6144:Gpf1L6SbQEm6qy/vd80vcTPbNELR3/jHvumtK4xZ:GraFyrvXL3","tlshash":"2e841acdb3d6b42283a3b574903f014bb23a7992b84cd894f286d9d42d3465a9237f7d","first_seen":"2026-09-13T19:00:41.571643Z","last_seen":"2026-09-13T19:00:41.571643Z","times_seen":1,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":39,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/fonts/stmicons_4.ttf","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.467Z","timestamp":1789325999467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/stmicons_4.ttf HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-3510\"\r\nexpires: Wed, 23 Sep 2026 18:47:52 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 727\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VEOaSZhZmkBtzo%2B%2BCakVYX172P0UyaTW3mvXFk%2BZTUfb%2FLteM6GlX%2BzRgWDxIeo3WxTUoCUwbvpo0leXZugPkGuzOHIGEMGosjWphOpebRnCmyftXWpUkGclsO1s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a96468ad9856c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13584\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13584,"size_decoded":14367,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, stmicons   ","md5":"94256942e5d031083d6dff8bec2edf4c","sha1":"883d146bcbc89150cdd905c2a626e0ea134083da","sha256":"4f648805ee9fe341ed8f66bd31ce56aea6095a3cc85fb84a9904fada1687a7ab","sha512":"b9e8a27732099d68871d99cb95262d33cdabdf63947e723b85b4cd7d4ab48ddaf3c7ae7e35cf9c4c172cac39850efd58a75eba514a8ce84728800f49ef33a124","ssdeep":"384:wXfb0mLHPHAfK4PAPHxAo5x1yGaZFCuzsWgisz2d438rkx6+kkppDXJ7yg:wXfb0aHPHAfpPI1yGaZgNWgiszq4MrBI","tlshash":"ce5219282ae1cdabc59ac97d1c9f5260836bec102307970bb65208637b7b5d57ec03ed","first_seen":"2023-04-11T00:32:33Z","last_seen":"2026-10-12T17:07:28.717963Z","times_seen":208,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.468Z","timestamp":1789325999468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kespoy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:10 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 376129\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-10-15T02:15:00.263559Z","times_seen":68958,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/fonts/fa-brands-400.woff2","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.474Z","timestamp":1789325999474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-12668\"\r\nexpires: Wed, 23 Sep 2026 18:47:52 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 727\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q7vnUBFHtVaH6CetErA0GF7WNrO6EJt2SiUvs3TUIssoryVPYmdVYUv9kXtSyifFeogNAE%2B4YQ0whf4rnBwkk6MFAdB11URDnk8zNjLltUV9vyL2IEQT7gMUuAct\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a96468bd9b56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 75368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75368,"size_decoded":76130,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 75368, version 330.32636","md5":"859c4002d9954718cac1ddea5555698f","sha1":"2392ce297c92bcf2c7d5a4c461a582dadc8039c8","sha256":"5054ab369966fea3657ac6af00c3bc47bdc9e7b5114e61d1764be06213ca9781","sha512":"83ca3cb14df9d05e3ab2a45042524733790977e5e1df9a47dd52394d4e209da643728ab47ccebb56c1f9ad85501cf074ceb0f2cc5ae3f6ac6a81d967590d13bf","ssdeep":"1536:3votzoJ1K9hFGhTaNK2T2Ihn/KqymF7nTDAYbbaufVZZXyme0kml695:Q81EakQ2T2Ih/bjcY/aCZXvj6z","tlshash":"127312252ed02e2eb70585f7548b8c1bba191420f3d4f0a1ef1b3bbe185e6d5726122b","first_seen":"2023-04-05T13:50:09Z","last_seen":"2026-10-14T22:19:49.992996Z","times_seen":3505,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/fonts/stmicons_2.ttf","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.635Z","timestamp":1789325999635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/stmicons_2.ttf HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-fc7c\"\r\nexpires: Wed, 23 Sep 2026 18:47:52 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 727\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ceecSelY1xcmscFyBEyYBb23SYd%2BIhMAcidWba71jxopzHw%2FDB1aJ2gQiQ%2Bxc54%2B5R7%2BqgmzYG%2BDDZoXtHK4pgXic7ZnP50NwXsHPH7JaF3RgHHPG3kuXF8Tnzsl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a96469bda556c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 64636\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64636,"size_decoded":65421,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, stmicons   ","md5":"d1842dee8de5526cd6c680ffe4da647e","sha1":"49889cd615e17d50a480847f85e11d86de02d197","sha256":"c640b4f47c03e843d03b668dfb3f415f2f153316cf088d4a59faed6665a53098","sha512":"4029d0cc32c50879a737907bbdef7f20bb9c1e6b28d96d2801ee4a1b28b2d5a8a941623c07bc27b04c771b04b1da5df6df65326057dfde9b1c18dfd4b134b8e8","ssdeep":"1536:2R7U3EXJdeK9hXLMCqtryJTy988P6AWgD9TVk0jX:i7qIhjArtWxwxWg5T6+","tlshash":"e5536b43235effafc49239ab6c1421370d96e2885b373be195c99d0486056b94cb4baf","first_seen":"2026-03-14T22:06:30.326198Z","last_seen":"2026-09-23T09:44:41.906276Z","times_seen":39,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/js/lazyload.min.js","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.228Z","timestamp":1789325999228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/js/lazyload.min.js HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Q%2ByNKzl8T6BBj9vo7D%2FeSomkqocnbaAyEmjefol0bcMSDF%2BB1n6CudogSt1%2BdRsWdoUWSfVFx2C6q0fHuPTWQH4aP91U2bagnN7FZfK1DIIYYHt%2BlPqalBg2vg6\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ec5ba5-1ed2\"\r\nexpires: Wed, 23 Sep 2026 07:19:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 42030\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a964672d8856c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7890,"size_decoded":3491,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7889)","md5":"d18523e4a4aaa9420a86e4dddfb07554","sha1":"fa22a3d38dc3c87ca92f1456846682abeb696b96","sha256":"6e86a52a9858206302e32036d89907e3ac87762055e7f9c6364aec33221b3e41","sha512":"5290650d7a2a12b6c2bb65b0a46bfcee46d4058afdd0999d7bec1c7db5acd35038ac6a820e3dc2fd1d3dca50776e9a2690bb0476f63fd1746564cb7d7329ecf5","ssdeep":"192:hXVUD75/K/x4sGDkPq4rL6Z3jGXnxMXR5blzw7fu4:hFUx/KLG4qV3jGuB8u4","tlshash":"0af1ed0df95ab52e3d23b4b5531f120a773a244374434454a6ace6d4ae7c88f2963fbc","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-10-15T02:55:53.168497Z","times_seen":10153,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.045Z","timestamp":1789325999045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q8HWnGhO2ToQdfJfOEsTeWmMbtBktf2oQu1suxFZBs0fIt6lLESlJGt07rTZWzRPbSHYVtRvQUeHpF5sSa6XaLvbGom05IIXW0o37PeuuNiZOZgyzNYYe9cUlZsS\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec5ba5-1b67a6\"\r\nexpires: Wed, 23 Sep 2026 07:19:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 42030\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a964661d6b56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1796006,"size_decoded":240602,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3f51ad5812e69d6b349269ece8fb45db","sha1":"2e67f8e068498b11c1aafb4d7995383963b17141","sha256":"9451e1c8dcbb1637716c3e7a73d59a6295a2c158a237b2232fa44a617f7110a7","sha512":"7a5a9ebd889625a19df057f6319815ae4a22bbd89337d9e92821e12949fc96d51491d9ff522f6decab292396330f084625f413721422069a0e97ea2c14150719","ssdeep":"6144:9kCQg5MQB+qehN2pUk46UmtauOKPoKd+tcXsB/06DD1:9kCQg5MQB+qehN2pUk46lOKP7KB/06DJ","tlshash":"6825e7a0f4a024ef3367cd7db1d0f6492a1711e2d6820fbfb0a6d4584e8955e21b7b39","first_seen":"2026-03-14T22:06:30.314768Z","last_seen":"2026-09-23T09:44:41.902736Z","times_seen":39,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/js/api.js","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.227Z","timestamp":1789325999227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/js/api.js HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eilzFbNElx2QfbDkfjhSJTTSH%2FNH%2BUVdgYHg99i684I27Q2s2yShoOo%2F23IKjl2jlEspifrI1BpPk07MGIMWkMM9HhjKT39Gm0YW%2FEdMn3WCgyyl6BnFsM0sb9Xt\"}]}\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 23 Sep 2026 07:19:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ec5ba5-388\"\r\nage: 42030\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3a964672d8756c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":904,"size_decoded":1377,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (904), with no line terminators","md5":"5b89c7b075cfa2c6674a1efdac61eccb","sha1":"447a4523a7c83c18e875eed387dbeeab8a9c071d","sha256":"e8fdf9ceb2e0e67d350912156ee1e2841ec16088f50d4e72f5a65286332394ce","sha512":"f9aba0ddc753b6ee2a11de767dae0680caeebc25f45740495dffc66d7e8ec6468706ee394898bd52ab1b76d301c4e4cbfbaa392331f014914be96e674469b82f","ssdeep":"","tlshash":"3d1140ba1514b0315f231af4e4fbdfe1f481a028f12888d08415ee842e798d7ce15985","first_seen":"2026-03-14T22:06:30.321926Z","last_seen":"2026-09-23T09:44:41.905206Z","times_seen":39,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/fonts/stmicons_5.ttf","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.684Z","timestamp":1789325999684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/stmicons_5.ttf HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-d09c\"\r\nexpires: Wed, 23 Sep 2026 18:47:52 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 727\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qbnIPDsTQNpDYvLGIJPcbIzoCrLFJ3u3QaVq0efG89KjQI6KKMDjJs8fgdK1wN36%2BCL26wd0U8tSKOqqQdL5DXGQwD6HAC4uFrnhZ73fuPrqlLa3fNVVEbuJzSwl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a9646a0da656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 53404\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53404,"size_decoded":54179,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, stmicons   ","md5":"091840296f772e8d68d6547e2b6c3043","sha1":"214718f9ae9038b92c53ff59cab7da60a2a09e87","sha256":"20fe3a5bb993ea3503bbdda2aad0ba3aaa979768301a771f2bdf818b195fb1c4","sha512":"7f2897ec12bb61a11fb8571bed62215ac6dc6015f55cdf4968f68f4bede568bc8ad53953993b2aba9f57f43803e6515aa5ca866d7c1664801753414c710ff05b","ssdeep":"1536:XShyGkFNTdYqnnMPSAxEPYArfBMQYbYKsAUK9Wta/CfKn1YaKWxR:XShyGkFddQPSAxEPYArfBMQEYKsAUKim","tlshash":"dc33083be6f3fe65d945eefbb444f05009ff8220427e87ce568a492ad0090709d68b9d","first_seen":"2023-04-11T00:32:33Z","last_seen":"2026-10-12T17:07:28.817217Z","times_seen":206,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/fonts/stmicons_6.ttf","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.685Z","timestamp":1789325999685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/stmicons_6.ttf HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-5bcc\"\r\nexpires: Wed, 23 Sep 2026 18:47:52 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 727\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dzSJauP6i3qMFRV2Ba%2FhEOKP96rtJyjmPYpOWxZK54XzFxP5x2jAS%2FkN4FXS67Gz0F%2BLpSZRGcZks6mkTs8W9KPNlybJ6quQiLCtwSNTN7hAPEVu544CYnG7%2FHFX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a9646a0da856c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23500\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23500,"size_decoded":24281,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, stmicons   ","md5":"b5982c58f5e9563e626c8a41608553dd","sha1":"a7be67297c6194c621754efb1b61dd9ced0285dc","sha256":"0a5865af71fcea416a14ee388332dd370ff4c4e0a09ee688d5d7c3a1f8039508","sha512":"68db1e14dcaa030c3b3506627f187edb9089c958032d61bdd1cfea7e9d546636722737c14379a6ad7f8493cb7de25ffcf2f0adf7edef93a1788ae09cb706f08f","ssdeep":"384:6QmONjgg2zJzOuBixHw1Aouc0ZYp79mjXQ3jXR/el6YhNvwCqmnH5iT:6QmO+Jtgwyouc0ZYpwz6/el6YhyCVHq","tlshash":"1fb25b2763d7cf1ad1065b7e102222f10daee431a73a660ba6d30c66ee2e6b445dc74d","first_seen":"2023-04-11T00:32:33Z","last_seen":"2026-10-12T17:07:28.714904Z","times_seen":199,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.oneinvestment.com.au/wp-content/uploads/2018/04/phillip-st-parramatta.jpg","fqdn":"www.oneinvestment.com.au","domain":"oneinvestment.com.au","tld":"com.au"},"ip":{"addr":"104.21.0.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.828Z","timestamp":1789325999828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneinvestment.com.au","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 00:21:34 GMT","end":"Fri, 13 Nov 2026 01:21:27 GMT"},"fingerprint":{"sha1":"F7:61:CA:C6:B2:7B:FA:1E:BE:CA:1C:1C:F0:B3:98:CD:0F:32:EC:5B","sha256":"50:B7:CF:F1:6B:1E:C9:84:90:65:F2:D9:61:3B:BA:A7:CC:96:9D:0B:D5:0D:F6:69:9F:D5:EE:FD:22:E6:59:1D"}}},"request":{"raw":"GET /wp-content/uploads/2018/04/phillip-st-parramatta.jpg HTTP/1.1\r\nHost: www.oneinvestment.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 13 Sep 2026 19:00:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49137\r\nset-cookie: __cf_bm=ENUli1PoUopFWACNR.Iab6d9PFtuBc0FlfSUqsAPQAk-1789325999.8590574-1.0.1.1-k6XpopMpoK9vawubWZS1DPS79B0OeYpXkr1b278RrDvcHZ8DMSMn16xVeB5HZfE_npYpk62q2QzMG5RqxdS8i8lTciJT2rW2tSGyVoKD6ZNCkWoVKHPHZNbzSWIX6sGK; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.oneinvestment.com.au; Expires=Sun, 13 Sep 2026 19:30:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dbcmVsT7xNUEjR8A2GYElQjob%2BeFoxZqnQr3LpXJUmiJEPrtF%2BcqsPEX03OtpofIj4j0z9ZouysEzRzyQOtA6t%2FsBQRyn7Hwg2zsgYsLx7yf%2FamFXm4EZhzwbH3VGXGq2%2FKZtKcRT1bLwA%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\netag: \"5b8a6155-bff1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Sat, 01 Sep 2018 09:52:21 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nki-cf-cache-status: HIT\r\nki-edge-o2o: yes\r\nx-content-type-options: nosniff\r\nx-edge-location-klb: 1\r\nki-cache-tag: d5d04bf4-345a-48ef-a99c-1c1ef92bc121,a63fe4e21074b7c844d740d06cdcfb32bc00f8044b62a51a84f40f46d244e034\r\nki-cache-type: CDN\r\nki-edge: v=28.5.0;mv=99.9.9\r\nki-origin: g1p\r\ncf-ray: a3a9646af8fa7a70-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"ENUli1PoUopFWACNR.Iab6d9PFtuBc0FlfSUqsAPQAk-1789325999.8590574-1.0.1.1-k6XpopMpoK9vawubWZS1DPS79B0OeYpXkr1b278RrDvcHZ8DMSMn16xVeB5HZfE_npYpk62q2QzMG5RqxdS8i8lTciJT2rW2tSGyVoKD6ZNCkWoVKHPHZNbzSWIX6sGK","quoted":false,"path":"/","domain":"www.oneinvestment.com.au","expires":"2026-09-13T19:30:00Z","raw_expires":"Sun, 13 Sep 2026 19:30:00 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=ENUli1PoUopFWACNR.Iab6d9PFtuBc0FlfSUqsAPQAk-1789325999.8590574-1.0.1.1-k6XpopMpoK9vawubWZS1DPS79B0OeYpXkr1b278RrDvcHZ8DMSMn16xVeB5HZfE_npYpk62q2QzMG5RqxdS8i8lTciJT2rW2tSGyVoKD6ZNCkWoVKHPHZNbzSWIX6sGK; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.oneinvestment.com.au; Expires=Sun, 13 Sep 2026 19:30:00 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":49137,"size_decoded":50525,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x357, components 3","md5":"fbddf08f0d2d6d45174e91d971a7d0df","sha1":"9d107e3393ff6835647b842e8535a4dd6b9e3439","sha256":"b0795091730fc57e97d95d2899f5215eea19d6a8e22530c52d4344588c5cc38a","sha512":"c6bc7a26068d12770cb230b0fc8a422c326900e7ca068a50099381dcaaef52951b451d73b304b54023e488c47b16bed07de766af7d88d3f42110939b871bc831","ssdeep":"768:W/1pGKjD1CDr5fQERON2ql/XRQRIZPHmbpGUckPwVR5Ew0yZ+3fpqDEHDtkfAFfU:WOKnOrGE020/mRePbULU7/g3fpqDEj+T","tlshash":"21230286f71cb968c4a279303a104f712f19e9ea387507a1302abf977e557e081e72f5","first_seen":"2026-03-14T22:06:30.334794Z","last_seen":"2026-09-23T09:44:41.937419Z","times_seen":38,"resource_available":false,"data":null}},"time_used":1793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":1351,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.378Z","timestamp":1789325999378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kespoy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:10 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 376129\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-10-15T02:15:00.263559Z","times_seen":68958,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":21,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.380Z","timestamp":1789325999380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kespoy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:10 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 376129\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-10-15T02:15:00.263559Z","times_seen":68958,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":29,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.470Z","timestamp":1789325999470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kespoy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 10 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 290541\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-10-15T02:35:23.559923Z","times_seen":328212,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.oneinvestment.com.au/wp-content/uploads/2018/03/Sydneys-Airport-Train-Airport-Link-International-Terminal-Station-Level-e1392634085116-960x360.jpg","fqdn":"www.oneinvestment.com.au","domain":"oneinvestment.com.au","tld":"com.au"},"ip":{"addr":"104.21.0.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.827Z","timestamp":1789325999827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneinvestment.com.au","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 00:21:34 GMT","end":"Fri, 13 Nov 2026 01:21:27 GMT"},"fingerprint":{"sha1":"F7:61:CA:C6:B2:7B:FA:1E:BE:CA:1C:1C:F0:B3:98:CD:0F:32:EC:5B","sha256":"50:B7:CF:F1:6B:1E:C9:84:90:65:F2:D9:61:3B:BA:A7:CC:96:9D:0B:D5:0D:F6:69:9F:D5:EE:FD:22:E6:59:1D"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/Sydneys-Airport-Train-Airport-Link-International-Terminal-Station-Level-e1392634085116-960x360.jpg HTTP/1.1\r\nHost: www.oneinvestment.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 13 Sep 2026 19:00:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 54942\r\nset-cookie: __cf_bm=3wklOYoBMUM.8Yldlk4LzuIaJLzosjCpVCEYmQ1E00g-1789325999.8570278-1.0.1.1-lrF0s3R08dfL7g3aO_y0J9IsBaAL3lYqCOZ7LaTf_sFGuqPlpjWav6mwbLN6bIxbFqjAILm2Sm9QsCjkR5Bh5_C78ZRIuPY.fnjz1DTe9swhkdFtK9kcs6BKW9cIDgKs; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.oneinvestment.com.au; Expires=Sun, 13 Sep 2026 19:30:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iT8J86O5VqI41mZ7pBHFxOiWOwNAczmbynECS4fJxq8yeB4lSkqcr3GXd%2Fg8Xkh0YtCMjM5bGPbEKX5icOBRyolR0CdOYbgc5kjhBEqscvM0UgqZItQCGXoaSXoCQ6fMc0yy%2FfWsw8IVJA%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\netag: \"5b8a649d-d69e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Sat, 01 Sep 2018 10:06:21 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nki-cf-cache-status: HIT\r\nki-edge-o2o: yes\r\nx-content-type-options: nosniff\r\nx-edge-location-klb: 1\r\nki-cache-tag: d5d04bf4-345a-48ef-a99c-1c1ef92bc121,ee1b4c9c1b933636283c1fe46f6327e9384c416d91acc46c9715bfb0b9e469dc\r\nki-cache-type: CDN\r\nki-edge: v=28.5.0;mv=99.9.9\r\nki-origin: g1p\r\ncf-ray: a3a9646af8e77a70-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"3wklOYoBMUM.8Yldlk4LzuIaJLzosjCpVCEYmQ1E00g-1789325999.8570278-1.0.1.1-lrF0s3R08dfL7g3aO_y0J9IsBaAL3lYqCOZ7LaTf_sFGuqPlpjWav6mwbLN6bIxbFqjAILm2Sm9QsCjkR5Bh5_C78ZRIuPY.fnjz1DTe9swhkdFtK9kcs6BKW9cIDgKs","quoted":false,"path":"/","domain":"www.oneinvestment.com.au","expires":"2026-09-13T19:30:00Z","raw_expires":"Sun, 13 Sep 2026 19:30:00 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=3wklOYoBMUM.8Yldlk4LzuIaJLzosjCpVCEYmQ1E00g-1789325999.8570278-1.0.1.1-lrF0s3R08dfL7g3aO_y0J9IsBaAL3lYqCOZ7LaTf_sFGuqPlpjWav6mwbLN6bIxbFqjAILm2Sm9QsCjkR5Bh5_C78ZRIuPY.fnjz1DTe9swhkdFtK9kcs6BKW9cIDgKs; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.oneinvestment.com.au; Expires=Sun, 13 Sep 2026 19:30:00 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54942,"size_decoded":56324,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x360, components 3","md5":"ec948012d1f084528ebd8b6831631c3f","sha1":"82f3c6346f9064441d3456f88cbb14849daf12e5","sha256":"ecf61e5432718509cff80c06b28f1dc23cdaaed5e7fb1fdc60122b6f050e6c4d","sha512":"079ad5566bffe5e4eacee258a678347f11816eaa459d6f23b27750aecd4fac2382e317a766f3718ed9b57d84f2a41b8520dde7d622195de947948671e826aef5","ssdeep":"1536:BWKUl5/2JxnrmdXyD1/WDxwClxMCz3qlJBb:EKy2PqRIINwxCmLb","tlshash":"7233018d925d8fc70d39e7387eb418edb134e2569106eb70f928e907de1e2806527c8e","first_seen":"2026-03-14T22:06:30.342132Z","last_seen":"2026-09-23T09:44:41.917744Z","times_seen":38,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/fonts/fa-solid-900.woff2","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.473Z","timestamp":1789325999473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-127f0\"\r\nexpires: Wed, 23 Sep 2026 18:47:52 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 727\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JZi2rTP4n%2FDB2GfUnFcP2G%2B8DS4xOkWp%2FMAUteIiO0rvfVR8UQuEgz%2BjNiBOPUb6hn2fsG3mXYJ77wrPna83APYNLM%2F8SCEUjvF%2F0WcryYtWfwT3AaFNfrPkCGL%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a96468bd9a56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 75760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75760,"size_decoded":76534,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 75760, version 330.32636","md5":"832f6e62aaf3909d6b94c8a9c1e4dd51","sha1":"4a06418cb56a66af5a1c0f59791469dea1dc87fa","sha256":"8556fd48cf33ca3028e3fff4042979f224987ee317cc9032dd5bba996b363009","sha512":"6ddcd01a3c660f62049415c24c76492d2ac99af465e09bd26c426b2a3c1b66878381cb9a7f2d50fa56b7ba1baa2be64558c7723f3c20d575a3fcb32e120c147a","ssdeep":"1536:eDCuynfMqYjuMdpP1pYdx/Ox3QCm5Ryt4nDcr1hPbvPX/1fD:OWnfUj5XtpYdh8CR/QPbZ","tlshash":"eb73128f784611876cce9eeab50ddce57f6982d8200b962517c7517aef5ca1eb310037","first_seen":"2023-04-05T16:07:24Z","last_seen":"2026-10-14T22:19:49.849283Z","times_seen":5511,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/fonts/stmicons.ttf","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.879Z","timestamp":1789325999879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/stmicons.ttf HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nCookie: _ga_6DFL3R5PGW=GS2.1.s1789325999$o1$g0$t1789325999$j60$l0$h0; _ga=GA1.1.244407999.1789326000\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:00:00 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-18d48\"\r\nexpires: Wed, 23 Sep 2026 18:47:52 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 727\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mHG8OnKNec%2Bt7LbQard4Hc1j40B%2FRxyABZoBoHj842iETkbrTiFs8pcIOfRemreNlFCV7Tny3M9ns%2FY18ZhBVzSL6Xn%2F6s0AKIQ%2BthCS3CIWnzI265Z5vHPL8gPz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a9646b4db356c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 101704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101704,"size_decoded":102489,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, stmicons   ","md5":"59c8d4ceb52f178f072abd520ecdd7ac","sha1":"92c7cc680c67895315bdefe933251f660edcc900","sha256":"6e00ae0800a05eeaf082032723acd8ce33d65adbcdaba52d683ec37b128b0aa0","sha512":"9f6c46ffbcbb57557a1319da3de753416009b3c0b035e6557c293c32775a8e36215e737bd8ae018a6da87a6d93c1a580492fb19fcc5d72d5ab49abe89709154d","ssdeep":"3072:9eFYEoAn9MkHhoIbimbF092/MnkXENRnnxMpdWWWWVa1U0rWejcItq:9eSrQ9MGhoIbiuq92ZXEnnxMpdWWWWCa","tlshash":"75a37c07639bdfcac08766fe4d2460634df6d9151b2feb27698a4c14e1150e88cb87af","first_seen":"2023-04-11T08:32:15Z","last_seen":"2026-10-12T17:07:28.779106Z","times_seen":58,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/images/bx_loader.gif","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.929Z","timestamp":1789325999929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/images/bx_loader.gif HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nCookie: _ga_6DFL3R5PGW=GS2.1.s1789325999$o1$g0$t1789325999$j60$l0$h0; _ga=GA1.1.244407999.1789326000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=4,i\r\netag: \"67ec5ba5-1ce1\"\r\nexpires: Wed, 23 Sep 2026 07:19:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 42029\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ckBrV%2B4MeeHlqzP%2FnTaiu%2BeI0c8OoadLsnzvwFGvUyf2LJrb5ZHUKdxx8302H0%2Bw2eEDCuROE2GeilQCcv6WZ%2BZ6Mi26s7qtFmAweuzZK6PcsA9Hbdg8XY%2FN7SVH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a9646b8dbd56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7393\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7393,"size_decoded":8161,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"522ddedafe08a5b8be1af7bf07d198f1","sha1":"e267a02ed18cef220bd1cf21ae2a00fb25bf6c01","sha256":"e431bf8a8f32c7f74b782c625624dcb483a7a091d4bcdfb7afcf6e0c0dd8bb2b","sha512":"7ce165ca363853eb831e2c4057262c69529254df5f8db49f8fb7aaa92e15a990a4236260d3483b400aae5963d2d7fab1f2ccfe0afc90a723f78a876ceacdb8ee","ssdeep":"192:nTuBnR4FgyOFIf8H4V4IFUwt3Nm+kqhlRJY:nTuBnmFO+fk4swt3NLnC","tlshash":"36e14b56909a500dfcd8e5716fac2098c5df9be061f8b09ded9d57032b2f39221887c7","first_seen":"2023-05-16T22:18:54Z","last_seen":"2026-10-10T23:06:15.489247Z","times_seen":173,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.980Z","timestamp":1789325999980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kespoy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 10 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 290541\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-10-15T02:35:23.559923Z","times_seen":328212,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%3A100%2C200%2C300%2C400%2C400i%2C500%2C600%2C700%2C800%2C900%7CRaleway%3A100%2C200%2C300%2C400%2C400i%2C500%2C600%2C700%2C800%2C900\u0026ver=3.4.3#038;subset=latin%2Clatin-ext\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.221Z","timestamp":1789325999221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Roboto%3A100%2C200%2C300%2C400%2C400i%2C500%2C600%2C700%2C800%2C900%7CRaleway%3A100%2C200%2C300%2C400%2C400i%2C500%2C600%2C700%2C800%2C900\u0026ver=3.4.3 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://kespoy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 13 Sep 2026 18:59:59 GMT\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71420,"size_decoded":3301,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"10d762a63f425568f82a73458a7c5b9f","sha1":"973f088828a38eb5111bb4049f6195258ad22a01","sha256":"fa8aba87c148623d7b3c8e6fa80cb172816de8f9df8a798be1757f4c579c8c78","sha512":"9ea0e2eff64a59751568a4c5637410314d40a885896ca3df0673e80794056e89c70d0fb5597dfc03c7af9013deba5c7efadeeaeda70f1a8938b9bea44e3a8481","ssdeep":"768:G2yr/XlkbrhE49q6IFZFCFHFHFY4FRLFuFWFnaHQQY9RUj7MFsbbYSRv4wFMl22w:FYSRIH2Vc7j","tlshash":"ff631da108179400ab835cd223ce7e31fe4f92147046d075abfd9babaddbc6652a835d","first_seen":"2026-03-14T22:06:30.317287Z","last_seen":"2026-09-23T09:44:41.929233Z","times_seen":39,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":39,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/images/20_hunter_st.jpg","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.405Z","timestamp":1789325999405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/images/20_hunter_st.jpg HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=4,i\r\netag: \"67ec5ba5-d9b7\"\r\nexpires: Wed, 23 Sep 2026 07:19:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 42030\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UhLOnZzJ%2BG%2FYSLhilin4FGP6gU1COQc8j83WDaKRns%2BELk%2FmmXo0fJuSRvCjTVyFSf0maKosbYRdj%2B9LJalOyD7BkNqVJMR%2BIGerzVuklPSlOeHpfs2aJQcEqBCc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a964684d9356c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55735\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55735,"size_decoded":56505,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 620x350, components 3","md5":"5bebaa311a092cacc9cb28c27a4e315c","sha1":"669ec3dd526adf8ea56d24ff20b73a5ddc4c6dbb","sha256":"c0e37a0a2d7e17814bc47a028d3e36c617da5fec64fa0223444beff4f8bc9ee8","sha512":"789e7eda3b235270e48da1da1a3497a1a86cbcabb9a8ffd462c683672c6c14324047d2c431c52f5fcdde7fd703621cb217fb95c93d887200b4938ec47a3b25ee","ssdeep":"1536:jk7dlAvxjTB9+zqpiXWfOJ+cssmuFzHaVfGpsbh2d/IezN:wsyqpNOwceu8hGpWh2dBN","tlshash":"b843027e93efbd08a6901823d18c5d17fd0291539643b476ee5c2e88e9ce618b0c262a","first_seen":"2026-03-14T22:06:30.345112Z","last_seen":"2026-09-23T09:44:41.941192Z","times_seen":38,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.556Z","timestamp":1789325999556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:00:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 3157629\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:11:46 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gi9xdgGwE35pkV4QJW65XjBb1p0OPOyE4UZtZr4Rs1xcZqPhO%2FHRhFih%2FzYBjWu0FlAeZUTayP8I89%2FV7P4ILUHU0fFhX6cNuRHBAW6Uf0VTOOGPPtyezSJura%2Fmh%2B6BYkxoNKMo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3a9646ee82656ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1046\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2771,"size_decoded":2068,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2609)","md5":"d5843dbdc71ff8014a5eafd346a262da","sha1":"127e1d971efab9341db8079f10663dc28e8e0a2f","sha256":"8e73a30d35c83ea6a597c3343324d2b7df097ad26e67b62efb5266ee12d317b5","sha512":"ac28dfa1a6fd09528e1ffc3f4fa19b0719c01f9033872e3eab51175b95c451179f1db22445b43ef9947e1810a5a37fdddeae7cdd7fe03b814a98e16e8642ab74","ssdeep":"","tlshash":"7e514241671662f381f60f36b12fb642713ad015140328b2b9bd9d90aba6deb5363d1e","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-10-15T00:31:41.110791Z","times_seen":17295,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":4,"connect":10,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/js/gtm.js","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.047Z","timestamp":1789325999047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/js/gtm.js HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N5D%2FKVjpaEIANyj7ApslWGgZyrXZNbpTL3hbbGzwOoe0fFH2ZheuBN5tt1nmORYmRbqg6knrF3BsOw4fimj2q%2Fg8izEp0D0Q2MtxShlvzpHMZek6QtugMbo3FcL9\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ec5ba5-351f5\"\r\nexpires: Wed, 23 Sep 2026 07:19:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 42030\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a964661d6c56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217589,"size_decoded":78152,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2345)","md5":"d58ca22ccde496f0fc4d941952609e0c","sha1":"2ae7348becb448b3dee9085e956fbc71c3ba63dd","sha256":"cb38b203ea6362301c00a506f5c4094f214ecd7c0638c3dd4cefeb1542724de2","sha512":"cd65f8cfc7fb8908cb3bbf7ed0fb1b1e653e2c5deac9e578fe19728de6c960be6beef06de4b0d5b5ed937bbb9fa262c18132f2efe8d132c96efeb66440a65bce","ssdeep":"3072:gBax8eulMYeHToG00clXoldVQbQwM87NzgOsEemtJeN0ZzVDlGL:0pmFslqdUd7DsEemvemzo","tlshash":"ff2408d8b7d6b42683a36478503f014bf17a6dd2f80cd894e146d4d82e74aa9427bf7c","first_seen":"2026-03-14T22:06:30.328627Z","last_seen":"2026-09-23T09:44:41.931126Z","times_seen":39,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/fonts/fa-regular-400.woff2","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.471Z","timestamp":1789325999471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-34fc\"\r\nexpires: Wed, 23 Sep 2026 18:47:52 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 727\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eJbKx817lE%2B9BwbHId%2B2xKc5kt%2FmjTpAje9BhKBewf9Uj2da333tnBsusj3GRZQun5nJb716BErvjKhU3pRzzwxbGqU9Y3A0oj%2F%2FScEcKh0%2FqoTeNwe5Of9Wlnzt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a96468bd9956c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13564\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13564,"size_decoded":14335,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13564, version 330.32636","md5":"e7d4bfa72a1f7d352fa6605501a3e2f2","sha1":"afd94b571eff9da7d85490bdb4c9874419cd260d","sha256":"d144631af733437b73fba8e784ab694a97fab80476e82325f7a58f6408b28850","sha512":"073251ecb758fec4077474e741765ed080adb016b9580d130ce2f5262e2cf2235143439f7d387a4a8d3937ea3b61e3449752038aefcf37fed0890bdab1681704","ssdeep":"384:qxPlVb9GS6S7RzoTcC6mxHnTI4p3seFfigi:qJlVb9GTSmv6mZnrxsWRi","tlshash":"1052cf83841355fcc6863effcea2fd246058e58cf3127659bc598d85a26e1934faa11c","first_seen":"2023-04-07T02:44:41Z","last_seen":"2026-10-14T21:16:34.265957Z","times_seen":2487,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/fonts/stmicons_1.ttf","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.686Z","timestamp":1789325999686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/stmicons_1.ttf HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-8208\"\r\nexpires: Wed, 23 Sep 2026 18:47:52 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 727\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZphLUNc6qOkmuBGYHpaU82c3Vh6T13oa6CyvGwdKHCY%2BSx%2FLDiREVWfQRE%2FSoTaYGMyunO968pJmPjMVf5PNEwxM%2FaadHVgrGPV%2FqkffnRQqbJ6WI%2B%2BbLAOY3DFg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a9646a0da956c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33288\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33288,"size_decoded":34075,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, stmicons   ","md5":"08dbc63b0533b273b43cfec59b07675a","sha1":"d41bbede3f53d6edeb8cd76f626696c916be9b13","sha256":"039cc4d530c09aae9d80da27f0b1a9bdf9885d961413ff5af751d29a3644542f","sha512":"5981a2de1588ab1d3a001cf63d7d60f379c6cb9a13c8216c083e62b142b74e4385889d1889f996ab96b679eed9f6b1c76abe128cece2dfc281addbc3773e34c4","ssdeep":"384:ieNn9DprmU/8HxLABPttPA+6OrXlvJVPiYKMCVLcRfQE/KT9QS1eCqzw8tkXSTg/:ieN9lrmRLABQixVPmMCNcRvCqcRCu","tlshash":"62e2a4c5c33dfd40f6189739a3daaa171abdb202fa6e0b699cc204cd14d88d3d9d991c","first_seen":"2023-04-11T00:32:33Z","last_seen":"2026-10-12T17:07:28.762722Z","times_seen":198,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/lander/hochu-spatb/images/cropped-OIG_logo_black_sq-32x32.png","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kespoy.com/","date":"2026-09-13T19:00:00.456Z","timestamp":1789326000456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET /lander/hochu-spatb/images/cropped-OIG_logo_black_sq-32x32.png HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/\r\nCookie: _ga_6DFL3R5PGW=GS2.1.s1789325999$o1$g0$t1789325999$j60$l0$h0; _ga=GA1.1.244407999.1789326000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:00:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=6,i=?0\r\netag: \"67ec5ba5-43c\"\r\nexpires: Wed, 23 Sep 2026 07:19:30 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 42029\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=38fb5cAD8q9SykvyrzzO3v79sTQB4CalFFSqGhFzJVtVYPTKqrSheVfsPLlbkwgNro67%2Fx7CzI%2BSVDJPyEVJLAc%2BgVxUVIewaWcWvw3dRykHVbcEvYXiVaWfzgMV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a9646ede2556c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1084,"size_decoded":1848,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"0383246fa1a5cc5e585a523ed5f9530b","sha1":"efd7bcc0737a4e44a688c0b3b76d8e96c4eaa7cb","sha256":"f90f2703149218dec4e98b4c80caab4aea10d10a905a20589663a2f33fb94432","sha512":"32ba0bb6afc76bd2c824efff7f775ce31ac19a7b7c0aa9f54e296785f334bd67faad1c4f5de92d38f3f6c519e49d83a746b02046536443a3bed877bf850d7ea7","ssdeep":"","tlshash":"7111863783073e28db4e16b7b920aa37edf4e2b01ad409c81477a5f999bd001c5d3b92","first_seen":"2026-03-14T22:06:30.327349Z","last_seen":"2026-09-23T09:44:41.939491Z","times_seen":38,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kespoy.com/","fqdn":"kespoy.com","domain":"kespoy.com","tld":"com"},"ip":{"addr":"104.21.6.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T18:59:58.713Z","timestamp":1789325998713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kespoy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 12:17:59 GMT","end":"Tue, 01 Dec 2026 13:16:22 GMT"},"fingerprint":{"sha1":"CB:73:63:93:38:8A:CD:7C:F9:CD:F0:E5:D6:C5:95:2E:FF:0A:FD:20","sha256":"D1:67:23:2F:B3:0C:DB:B2:EC:3E:61:E2:2B:D4:48:4A:D8:0A:44:72:D7:95:39:5D:60:6C:73:B7:CD:3B:01:A5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kespoy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:59:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7uJhWHdpJO8RFx6VCFChqPzmLRi3DgR59%2FxNqPCjiIsL1n%2BFWqDHZZ9pDqlVqoXjmbE8qWO0MD%2BUv%2BTWMXYVca1C6tJ%2B51guBwOHp7%2FgkLvvgKsRRiUdGUsfbWeH\"}]}\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 13 Sep 2026 18:59:58 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3a964642d5556c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress:6.6.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Site Kit:1.121.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Elementor:3.24.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":127996,"size_decoded":22661,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (41703)","md5":"2822b4072c226cc4e0bd1eeb74f2e18f","sha1":"5ac3787e02faf267a79f2440dc7eac9ef57ffe98","sha256":"330813e896edcd7ec0919b9ccc643df6bb44930d071ff0a03074264b9ffbd186","sha512":"b6f5d849a2992b3c91c1f4b7dad7dea7cf9bd404f54bb6d54268ad0ab3ac76376fa437a6a334dc5ebd479d5ff5e36e7cb9d2fe1776879a26cf001ee20da0733e","ssdeep":"1536:rAYdlGdZnSflECuD5weu/SkN78jHUEwheHiKisanwL84KNge8dAj+N5fy5:86kdZGEBlweUhVnwL2Z","tlshash":"24c396b218a6243b571b05d5e159eb2ab7c3815dcf420a91a3f8d3accfd1ddab62310d","first_seen":"2026-03-14T22:06:30.336257Z","last_seen":"2026-09-23T09:44:41.900652Z","times_seen":39,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":16,"connect":16,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kespoy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-55BFW9XC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.225Z","timestamp":1789325999225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=GT-55BFW9XC HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kespoy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 13 Sep 2026 18:59:59 GMT\r\nexpires: Sun, 13 Sep 2026 18:59:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 174811\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":522296,"size_decoded":175415,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"5895b470c8d4172ec709d32b213c54ad","sha1":"60079dc0799c34d2f137c44b0003a019b17ca479","sha256":"71a4397e084d92c6e8a97516cb4cd0e7c3f95cb2af4329c7667e1ab1a2f4b8db","sha512":"4f337bc665222ff03d6f9a752854019de8736630c06eb926d2b0c60258fdd979d17a8e5787d6afa2b14a19a19bd9540d5ff1e70838c18c97cc5b3257b7b5bdb8","ssdeep":"6144:Yj4f1L6SSxQhmgyyEydQV80ucTPbNELR3/jbxWS3PKNS3IhZ:2K0yAynNxJPiSc","tlshash":"8ab409ce73d674229396f078903f01cba57b29a2b49cc896f18adce02e3455a5167f7c","first_seen":"2026-09-13T18:48:37.085728Z","last_seen":"2026-09-13T19:00:41.612984Z","times_seen":2,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":3,"connect":17,"send":0,"wait":35,"receive":50,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kespoy.com/","date":"2026-09-13T18:59:59.466Z","timestamp":1789325999466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kespoy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:10 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 376129\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-10-15T02:15:00.263559Z","times_seen":68958,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}