{"report_id":"b8d4439c-cb1c-48c7-b0db-a3435dd7ae57","version":0,"status":"done","tags":["malicious","clickfix"],"date":"2026-07-12T19:34:43Z","url":{"schema":"http","addr":"kaloed.pro","fqdn":"kaloed.pro","domain":"kaloed.pro","tld":"pro"},"ip":{"addr":"104.21.72.29","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kaloed.pro/","fqdn":"kaloed.pro","domain":"kaloed.pro","tld":"pro"},"title":"Just a moment...","dom":{"size":343135,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (56075)","md5":"89362188be578910faffecae3b2c5a2e","sha1":"ca64f9adb533d2b51d328c0adcf21ff26994b89c","sha256":"bee7824e92ea85d3d8d30be0fa20a149ca11d94a1540f60275912f3ff808c8cc","sha512":"0c96441e13999de81b20fbdd5a76d171fca2246236e798dfcad908ff17800b931e2dec105f64ad0262cf8e052eeda4df82e96f23acc5087783569a88672a40dc","ssdeep":"6144:dOt8uGgr23Ot8uGgr2wOt8uGgr2hOt8uGgr2d:ci/grZi/groi/grfi/grm","tlshash":"4074e033921f2d8a76170d90e41427082de9bc9fba24da98fdcc0596d7fd620cd9d8b6","dom_hash":"domhasha9700eff9b0f637727d57c79da26fc41","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kaloed.pro","fqdn":"kaloed.pro","domain":"kaloed.pro","tld":"pro"},"ip":{"addr":"104.21.72.29","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T19:34:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":9}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null},{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"summary":[{"fqdn":"kaleda.pro","ip":{"addr":"104.21.55.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-12T11:00:21.852531Z","last_seen":"2026-07-12T11:00:21.852531Z","alert_count":21,"request_count":5,"received_data":430119,"sent_data":2465,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kaloed.pro","ip":{"addr":"104.21.72.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-07T14:31:12.284599Z","last_seen":"2026-07-07T14:31:15.573026Z","alert_count":16,"request_count":3,"received_data":22478,"sent_data":1516,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"polygon-bor-rpc.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":2163006,"first_seen":"2024-04-26T08:35:48Z","last_seen":"2026-07-11T09:02:11.852478Z","alert_count":0,"request_count":1,"received_data":739,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"gateway.tenderly.co","ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-05-11","domain_rank":1960624,"first_seen":"2022-05-12T13:13:46Z","last_seen":"2026-07-10T21:58:14.251072Z","alert_count":0,"request_count":1,"received_data":539,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"polygon.gateway.tenderly.co","ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-05-11","domain_rank":0,"first_seen":"2025-08-03T10:23:07.273214Z","last_seen":"2026-07-07T05:23:09.651656Z","alert_count":0,"request_count":1,"received_data":539,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"rpc.ankr.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2026-07-07T14:16:14.753648Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":485,"comment":"","tags":null,"fingerprints":null},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-07-06T15:13:52.241954Z","alert_count":0,"request_count":1,"received_data":65381,"sent_data":571,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"polygon.lava.build","ip":{"addr":"104.18.24.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-09-14","domain_rank":7157037,"first_seen":"2025-08-27T09:05:44.919474Z","last_seen":"2026-07-05T19:32:09.368489Z","alert_count":0,"request_count":1,"received_data":1390,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"polygon.drpc.org","ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":0,"first_seen":"2023-12-16T03:46:28Z","last_seen":"2026-07-12T11:00:22.499648Z","alert_count":0,"request_count":1,"received_data":783,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"kaloed.pro/","fqdn":"kaloed.pro","domain":"kaloed.pro","tld":"pro"},"ip":{"addr":"104.21.72.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"814368230b134e5641a54e81d8d83c52","sha1":"d8fbbba47cd5f16177b93835bd503791eb6ca133","sha256":"3813ba3ce3c7300f0f0ed45afe9883d38075260c18097123aa6ef12dc52080db","sha512":"a3985cb7a49b09c355e52e690a975144e09243a4cbce41d75e0d20590ca1ef5b9110305fd9241b09a9c13eced21793d3353058512649dd2b0fb23b8f6192b45f","ssdeep":"384:b45tiRQMiewAaMdBDaWg5/cM54tLShlXz6xRnX/GehQu74adkz6lfLYKTyBUK4lp:bwtTeX9g5/uGy+emu0vm9LYKUAhqO3a2","tlshash":"dd924c45c6b488e14daf63c79d7abb9b8e4193306653f5c578442b428d21b62b3bce0f","size":19660,"data":"","first_seen":"2026-06-08T23:28:53.88929Z","last_seen":"2026-07-17T05:17:47.599652Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaloed.pro/","fqdn":"kaloed.pro","domain":"kaloed.pro","tld":"pro"},"ip":{"addr":"104.21.72.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fb8e9bfeacfd29716f1c32d2d0f687f","sha1":"b6487fa94fd9a68eb771f7d5d871a48b62de3993","sha256":"4d9d3b33d127b748ecc95b5b89bffc85075dfe83947b25759b0d7824433892c4","sha512":"003af815281f59e150635040ffe9de7aad0cd6e9ae5e383ad087e416680267f4bf0e825e4c96f8d916f151424d30ad1dd0e1887f7b6ff78ab041d32106386227","ssdeep":"","tlshash":"b1f0e90d34157d228bfab9b3810f9643b03764129d975dca1bae5be05830e8c9b53a60","size":523,"data":"","first_seen":"2026-06-25T03:13:38.190989Z","last_seen":"2026-07-17T05:17:47.601427Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaloed.pro/","fqdn":"kaloed.pro","domain":"kaloed.pro","tld":"pro"},"ip":{"addr":"104.21.72.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3e09bb7c05732697c10c998af4324353","sha1":"49ca91255ae207b5e311d6a1e9688a8594f60189","sha256":"e23d7ab5508f4b537708ff089d945fc33b44f5460415da9161132d5519b6e488","sha512":"18df0234cc7f277a0937ea6491a6ba5bcdce4b103abc2ba612e0c9b56b961ae1e927b352e9a5f742fff0bebfe4eb915f74ae960765073257d5f2a424f2a1aee4","ssdeep":"192:USSHiqaK5bb58NuXQKkw90mt74W8S7fcT9A7bFJ4B7dWkTC2qgMLdUeTlqcs34ws:hlcr90W84bn4B7dWk+2qgMC34RNYzdo","tlshash":"8852c794356791b543e70ee0002e5544fd3bea023d8cc4a0b2ab4ec7179f6b6a1b7a7d","size":14420,"data":"","first_seen":"2026-06-08T23:28:53.890862Z","last_seen":"2026-07-17T05:17:47.781288Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaleda.pro/cf.js?v=2","fqdn":"kaleda.pro","domain":"kaleda.pro","tld":"pro"},"ip":{"addr":"104.21.55.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"329c73a0ee715e911a82001960c41d33","sha1":"70641931f9fc6d28aaf0d908855cdae21ed36f8e","sha256":"e0039cca62601cae2334cf31e188549a50c79eabb3f99361edd3c0132de05b8a","sha512":"e6c921e71b62751a55bd7495bb76a9801d7b84e5acbfa7031fbbccce32b9297a35215dfdc68940b93217ee722e688bda7e1edabfd8bd8ce982f9b67b0a107ae3","ssdeep":"6144:yXOt8uGgr25Ot8uGgr2QOt8uGgr2HOt8uGgr2pknHco3qD:y+i/grRi/grGi/grXi/grIknHco+","tlshash":"0094d077596f2e1425175c9590092b143cf938abfa00cae4bcdd48a66fe8630dd3eaf4","size":426171,"data":"","first_seen":"2026-06-25T03:13:38.179327Z","last_seen":"2026-07-17T05:17:47.361703Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"polygon.lava.build/","fqdn":"polygon.lava.build","domain":"lava.build","tld":"build"},"ip":{"addr":"104.18.24.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kaloed.pro/","date":"2026-07-12T19:34:17.308Z","timestamp":1783884857308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lava.build","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 14:42:06 GMT","end":"Tue, 22 Sep 2026 14:42:05 GMT"},"fingerprint":{"sha1":"8A:8E:7D:2C:B5:2A:05:E2:FB:54:48:81:D1:E6:9D:D5:10:54:BB:33","sha256":"10:AB:85:27:B2:25:A4:3D:F5:D8:AA:92:2D:A8:9B:2D:24:4C:64:27:F8:7E:69:6E:D3:CF:32:E9:9C:0C:7F:A1"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.lava.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://kaloed.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaloed.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 19:34:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 91\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nlava-provider-address: lava@1w3qs6ksgzy66rjljmsjnetlqpvvhl9qkvntf0a\r\nprovider-latest-block: 90119908\r\nlava-guid: 14661829884942229519\r\nlava-user-request-type: eth_call\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\nlava-origin: mainnet-iprpc-eu-3\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=ry5DYLYgVNT_swqnyzhOoDTFpMGVMZ7bcudC2U.3DqE-1783884857.3516738-1.0.1.1-7kuxbM.wmXyk30i628Xaccj308ALAsO8rzMLy14hzxeR7TdoyIhhUvIakiQPzNw8RdOhDFHm_e6.1WegymZ2DoOnEuKHKsgP_rNlJb1ZJbxEqHw.0xIm7TF2UHvTGyuD; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build; Expires=Sun, 12 Jul 2026 20:04:17 GMT\n_cfuvid=XtWda0HDKNqe8L2.DkxEpcnflg6kpBwKQJWofWlfIvA-1783884857.3516738-1.0.1.1-0_VjOSGNyB5efRfFQptdSAxBlGuHbKiEJiCIykb0CcA; HttpOnly; SameSite=None; Secure; Path=/; Domain=lava.build\r\npriority: u=3,i=?0\r\ncf-ray: a1a27c067a5d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":230,"size_decoded":1251,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0632abbda30114e67501e1eeb12269c1","sha1":"59985c156fa2fc70f6497028e0021dc67067d410","sha256":"d7eae8152439bb9f3bd9933f271f786d03b89d08d2312ec612a1d10fb7e95b37","sha512":"12b8635cc41f01e2a7f316c17d462d90ef436a4bf600bb061294f900927c97d409207cf2bf5745d4c723f15805b795694e934b3b771d1207492fbd8d5f68e18d","ssdeep":"","tlshash":"83d00299964e8732dc4d5c1de058784123957a9a4bc41f82558e1a5413c926b561a222","first_seen":"2026-07-12T11:00:26.658731Z","last_seen":"2026-07-13T18:48:06.809262Z","times_seen":10,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":8,"connect":30,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaleda.pro/api/index.php?q=DSTxt2nugGPWjibXUw","fqdn":"kaleda.pro","domain":"kaleda.pro","tld":"pro"},"ip":{"addr":"104.21.55.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kaloed.pro/","date":"2026-07-12T19:34:17.866Z","timestamp":1783884857866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaleda.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:13:49 GMT","end":"Fri, 09 Oct 2026 14:12:35 GMT"},"fingerprint":{"sha1":"10:BE:4C:0F:C5:FB:A5:90:EC:BA:ED:CF:8A:BA:6F:FE:5C:62:F8:95","sha256":"A9:7B:9A:C4:CA:F0:61:EE:92:A6:AF:69:B9:E1:CF:78:8F:C2:02:0C:D6:2D:16:76:44:2F:16:E2:5F:63:46:37"}}},"request":{"raw":"POST /api/index.php?q=DSTxt2nugGPWjibXUw HTTP/1.1\r\nHost: kaleda.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 177\r\nOrigin: https://kaloed.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaloed.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":177,"data":"{\"eventType\":\"view\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"screen\":\"1280x1024\",\"domain\":\"kaloed.pro\"}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Sun, 12 Jul 2026 19:34:18 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IAEMzRGjsqCQmHjNJtdPmNaXj6zQFfQ0jaIM6h2CVw%2B6NAp%2FrILXyeAxGgq1mP2x9Va%2F1rFsdXz%2BbXXFx9X4ePkTpTGjrAUy%2B63jlTPon5gI%2FCoCa5o%2FXU9URs%2F2\"}]}\r\ncf-ray: a1a27c0a2d2a56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1372,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T05:40:19.241944Z","times_seen":17306852,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaleda.pro/api/index.php?q=DSTxt2nugGPWjibXUw","fqdn":"kaleda.pro","domain":"kaleda.pro","tld":"pro"},"ip":{"addr":"104.21.55.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kaloed.pro/","date":"2026-07-12T19:34:17.871Z","timestamp":1783884857871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaleda.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:13:49 GMT","end":"Fri, 09 Oct 2026 14:12:35 GMT"},"fingerprint":{"sha1":"10:BE:4C:0F:C5:FB:A5:90:EC:BA:ED:CF:8A:BA:6F:FE:5C:62:F8:95","sha256":"A9:7B:9A:C4:CA:F0:61:EE:92:A6:AF:69:B9:E1:CF:78:8F:C2:02:0C:D6:2D:16:76:44:2F:16:E2:5F:63:46:37"}}},"request":{"raw":"OPTIONS /api/index.php?q=DSTxt2nugGPWjibXUw HTTP/1.1\r\nHost: kaleda.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://kaloed.pro/\r\nOrigin: https://kaloed.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Sun, 12 Jul 2026 19:34:17 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EEYtasnLooIIeNmm2HnLFbNmNJWraU0ZwqfXZUQ4JI1wqqAKKnufDMsjGDONAis5qGjtLgoudAvSOFaATaRIfQpgogZFhViRmtsIYRClOjGSiRl1xIF0WdqYPobd\"}]}\r\ncf-ray: a1a27c09bd2256c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":663,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T05:40:19.241944Z","times_seen":17306852,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaleda.pro/api/index.php?q=tDW2trzMeQj30Jjogxk\u0026src=kaloed.pro","fqdn":"kaleda.pro","domain":"kaleda.pro","tld":"pro"},"ip":{"addr":"104.21.55.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kaloed.pro/","date":"2026-07-12T19:34:17.873Z","timestamp":1783884857873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaleda.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:13:49 GMT","end":"Fri, 09 Oct 2026 14:12:35 GMT"},"fingerprint":{"sha1":"10:BE:4C:0F:C5:FB:A5:90:EC:BA:ED:CF:8A:BA:6F:FE:5C:62:F8:95","sha256":"A9:7B:9A:C4:CA:F0:61:EE:92:A6:AF:69:B9:E1:CF:78:8F:C2:02:0C:D6:2D:16:76:44:2F:16:E2:5F:63:46:37"}}},"request":{"raw":"GET /api/index.php?q=tDW2trzMeQj30Jjogxk\u0026src=kaloed.pro HTTP/1.1\r\nHost: kaleda.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://kaloed.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaloed.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 19:34:18 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\nx-captcha-mode: 2\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JVLhuspdeOBlIuEsZ19GMxwNS3suM3Zoid%2Bn44cmF50%2FJlKakyFtxkrf5sSLet9fSvfpdUkJu4YY0rt5KEu5dJD1CMxbzaAIFW%2B6BwQ590qZ%2F6gNKCzN0G0fBlgl\"}]}\r\ncontent-type: text/plain;charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a27c09bd2356c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194,"size_decoded":941,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"3d84a966d17a5c76b3e39f7a1254ee4f","sha1":"bdabe18f4e0d81ee9296cf888fd54359951da17f","sha256":"3dab12b87a9fef1a65e60eec3e4274a4d65eb9ebb84dfb2e8be8d54fad1f67a0","sha512":"1c0680e6c6a9c9f443f32c8045b2757f3866e8c471dbd6523fe0c008a4955acbf10cd9e737ef07594c25db9dd2a172c275d8d52b018b626b83ec742bfeccdc3d","ssdeep":"","tlshash":"8ec022221424a32cebf480429d808a42906285ac638a2fb4ab5491862a2a3f62115464","first_seen":"2026-07-12T19:34:45.882746Z","last_seen":"2026-07-12T19:34:45.882746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaloed.pro/","fqdn":"kaloed.pro","domain":"kaloed.pro","tld":"pro"},"ip":{"addr":"104.21.72.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T19:34:16.637Z","timestamp":1783884856637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaloed.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 09:17:23 GMT","end":"Mon, 05 Oct 2026 10:15:59 GMT"},"fingerprint":{"sha1":"79:8D:4F:49:44:BD:43:93:E0:CB:5A:07:F9:80:C2:36:84:F1:42:9A","sha256":"B4:1F:E6:83:4F:2E:31:99:4D:2A:30:06:B8:36:19:42:DB:16:E0:60:8B:31:B8:B7:0F:67:89:D0:5F:03:EE:DF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kaloed.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 19:34:16 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R27zfT5rSogqxfXdKW6F3Q85QqwNLDgq%2BXE6oUfzS%2BaA161astTqJwDKU6SzEans6aIin9KhmRNniF0KP1fLRiEHOxBhPx4pPgphosmNXlDdPoWjvu2wWm0hJNtl\"}]}\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a27c029b95b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20343,"size_decoded":9194,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (19660)","md5":"62bf0e118b66295843fef4b1789fd2ea","sha1":"c2cc54ebdcac3934ddc7f4e1b5c9a76ed9276309","sha256":"34e85a89c4a01bf0689d53a5681db509dbe03b6a39f23dc8414dd3a1dfff8d74","sha512":"11db66f707c58a1878c247e35936f4c6f80a7d54a0aab0ca3ad2a54edc43f98d1dc44753a5b0b1fdc32a38154196abaff5778466ba65244ce6746ef1fe7d5faa","ssdeep":"384:g45tiRQMiewAaMdBDaWg5/cM54tLShlXz6xRnX/GehQu74adkz6lfLYKTyBUK4lp:gwtTeX9g5/uGy+emu0vm9LYKUAhqO3aW","tlshash":"3e925d45c6b488e14daf63c79d7abb9b9e4193306693f5c478442b418d21b62b37ce0f","first_seen":"2026-06-25T03:13:38.187934Z","last_seen":"2026-07-17T05:17:47.395039Z","times_seen":110,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":76,"connect":15,"send":0,"wait":74,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"polygon.drpc.org/","fqdn":"polygon.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kaloed.pro/","date":"2026-07-12T19:34:17.302Z","timestamp":1783884857302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 23:01:08 GMT","end":"Sun, 13 Sep 2026 00:00:59 GMT"},"fingerprint":{"sha1":"7F:E5:3C:EC:15:AC:2B:17:FE:8B:3B:16:E4:25:9A:40:37:43:63:45","sha256":"DF:D3:75:05:E3:1C:E5:C2:B8:D6:2A:66:75:39:9A:D3:91:D6:86:E7:7B:11:D6:84:3E:A1:0F:FF:79:47:06:19"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://kaloed.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaloed.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 19:34:17 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Origin, accept-encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: ff9983f9e005cc04f1923017ab719276\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a1a27c064ca44e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":636,"mime_type":"application/json","magic":"JSON text data","md5":"3cc6261d3c28c3bbcef1946d19f832fc","sha1":"c410f211f0f77bb1385025cb8330f4652c2d3f0e","sha256":"92bdac6903e08f19308e1b72c24a85feca95ac6008a7dcfbe07f75f8e5109ab3","sha512":"560e3347fdca6649e2e283591550b2bf7b7eaae49f0721e66eeae17d57d933401d135a71af4fac7987c034c8b82a166ff2ba21231567751ed17e6287b5c7b142","ssdeep":"","tlshash":"16d022c8820e8332cc0c0c0ce00838002288330a0bc00f02820e020003c822b020a202","first_seen":"2026-07-12T11:00:26.655026Z","last_seen":"2026-07-13T18:48:06.745435Z","times_seen":10,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":5,"connect":21,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polygon-bor-rpc.publicnode.com/","fqdn":"polygon-bor-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kaloed.pro/","date":"2026-07-12T19:34:17.306Z","timestamp":1783884857306,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 01:05:04 GMT","end":"Mon, 07 Sep 2026 02:05:00 GMT"},"fingerprint":{"sha1":"39:B4:D5:B4:26:71:60:64:13:47:CC:54:ED:BC:AD:E1:33:77:19:00","sha256":"65:A9:40:31:FB:2A:25:C7:3B:B6:B3:F0:4E:96:B9:08:CE:FC:27:5A:F6:DB:32:E8:7E:64:C7:51:34:DA:93:85"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon-bor-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://kaloed.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaloed.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:34:20 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a1a27c19c844a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":231,"size_decoded":579,"mime_type":"application/json","magic":"JSON text data","md5":"6d4d5c1da6e419a0d3cde4d920ecc5f8","sha1":"36600405768e8f26896739b41bb66d2e85f314f9","sha256":"2e8d72508c65f4df281212a496ceb8c9ccc7c1a120c7a1e07be4e4c2564a9e72","sha512":"8e2cf8b1b63fed81d8990ae0dfabfdff38fe75771eba2dd847ed5904da083fee3359e31690865940dff8fa790a0fe8b7e97f9cd9d45a9a9ba39976c08c152260","ssdeep":"","tlshash":"3bd00299964e8732dc4d5c1de05878412395ba9a4fc41f82558e1a5413c926b571a222","first_seen":"2026-07-12T11:00:26.663864Z","last_seen":"2026-07-13T18:48:06.800243Z","times_seen":10,"resource_available":false,"data":null}},"time_used":3176,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":39,"receive":0,"ssl":3132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.tenderly.co/public/polygon","fqdn":"gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kaloed.pro/","date":"2026-07-12T19:34:17.317Z","timestamp":1783884857317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 18:01:31 GMT","end":"Sun, 13 Sep 2026 18:01:30 GMT"},"fingerprint":{"sha1":"9A:41:E5:34:79:91:EC:A6:18:2C:A5:9B:64:A2:94:81:A0:74:A3:57","sha256":"DD:73:B2:F2:0C:93:E6:AC:22:8B:33:E7:18:12:2F:78:95:14:EF:D9:E1:B3:D5:59:5A:73:0E:1B:07:B3:90:E9"}}},"request":{"raw":"POST /public/polygon HTTP/1.1\r\nHost: gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://kaloed.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaloed.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\ndate: Sun, 12 Jul 2026 19:34:17 GMT\r\ncontent-length: 230\r\nx-envoy-upstream-service-time: 4\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":230,"size_decoded":539,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3cc6261d3c28c3bbcef1946d19f832fc","sha1":"c410f211f0f77bb1385025cb8330f4652c2d3f0e","sha256":"92bdac6903e08f19308e1b72c24a85feca95ac6008a7dcfbe07f75f8e5109ab3","sha512":"560e3347fdca6649e2e283591550b2bf7b7eaae49f0721e66eeae17d57d933401d135a71af4fac7987c034c8b82a166ff2ba21231567751ed17e6287b5c7b142","ssdeep":"","tlshash":"16d022c8820e8332cc0c0c0ce00838002288330a0bc00f02820e020003c822b020a202","first_seen":"2026-07-12T11:00:26.655026Z","last_seen":"2026-07-13T18:48:06.745435Z","times_seen":10,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":39,"connect":13,"send":0,"wait":49,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaleda.pro/cf.js?v=2","fqdn":"kaleda.pro","domain":"kaleda.pro","tld":"pro"},"ip":{"addr":"104.21.55.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaloed.pro/","date":"2026-07-12T19:34:17.633Z","timestamp":1783884857633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaleda.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:13:49 GMT","end":"Fri, 09 Oct 2026 14:12:35 GMT"},"fingerprint":{"sha1":"10:BE:4C:0F:C5:FB:A5:90:EC:BA:ED:CF:8A:BA:6F:FE:5C:62:F8:95","sha256":"A9:7B:9A:C4:CA:F0:61:EE:92:A6:AF:69:B9:E1:CF:78:8F:C2:02:0C:D6:2D:16:76:44:2F:16:E2:5F:63:46:37"}}},"request":{"raw":"GET /cf.js?v=2 HTTP/1.1\r\nHost: kaleda.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaloed.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 19:34:17 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Jun 2026 17:51:08 GMT\r\netag: \"680bd-654ef6764dabf-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y8ZW5im%2B4pG8amAagsU3Al8V36fXd3ZxHQ4ww0IEtq%2ByHUdpqNMha3MH03CU7esDs49KZBdXDB%2BTBvnPlKv7kdBWObi6i31JXbkRwOyI5oJJG2Eo%2B1bsneiThas0\"}]}\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\ncf-cache-status: BYPASS\r\ncf-ray: a1a27c084c5c569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":426173,"size_decoded":265847,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51534)","md5":"329c73a0ee715e911a82001960c41d33","sha1":"70641931f9fc6d28aaf0d908855cdae21ed36f8e","sha256":"e0039cca62601cae2334cf31e188549a50c79eabb3f99361edd3c0132de05b8a","sha512":"e6c921e71b62751a55bd7495bb76a9801d7b84e5acbfa7031fbbccce32b9297a35215dfdc68940b93217ee722e688bda7e1edabfd8bd8ce982f9b67b0a107ae3","ssdeep":"6144:yXOt8uGgr25Ot8uGgr2QOt8uGgr2HOt8uGgr2pknHco3qD:y+i/grRi/grGi/grXi/grIknHco+","tlshash":"0094d077596f2e1425175c9590092b143cf938abfa00cae4bcdd48a66fe8630dd3eaf4","first_seen":"2026-06-25T03:13:38.179327Z","last_seen":"2026-07-17T05:17:47.361703Z","times_seen":111,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":81,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"polygon.gateway.tenderly.co/","fqdn":"polygon.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kaloed.pro/","date":"2026-07-12T19:34:17.311Z","timestamp":1783884857311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 18:01:31 GMT","end":"Sun, 13 Sep 2026 18:01:30 GMT"},"fingerprint":{"sha1":"9A:41:E5:34:79:91:EC:A6:18:2C:A5:9B:64:A2:94:81:A0:74:A3:57","sha256":"DD:73:B2:F2:0C:93:E6:AC:22:8B:33:E7:18:12:2F:78:95:14:EF:D9:E1:B3:D5:59:5A:73:0E:1B:07:B3:90:E9"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: polygon.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://kaloed.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaloed.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x08207B087F61d7e95E441E15fd6d40BEfd6eD308\",\"data\":\"0x38bcdc1c\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\ndate: Sun, 12 Jul 2026 19:34:17 GMT\r\ncontent-length: 230\r\nx-envoy-upstream-service-time: 4\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":230,"size_decoded":539,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3cc6261d3c28c3bbcef1946d19f832fc","sha1":"c410f211f0f77bb1385025cb8330f4652c2d3f0e","sha256":"92bdac6903e08f19308e1b72c24a85feca95ac6008a7dcfbe07f75f8e5109ab3","sha512":"560e3347fdca6649e2e283591550b2bf7b7eaae49f0721e66eeae17d57d933401d135a71af4fac7987c034c8b82a166ff2ba21231567751ed17e6287b5c7b142","ssdeep":"","tlshash":"16d022c8820e8332cc0c0c0ce00838002288330a0bc00f02820e020003c822b020a202","first_seen":"2026-07-12T11:00:26.655026Z","last_seen":"2026-07-13T18:48:06.745435Z","times_seen":10,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":26,"connect":17,"send":0,"wait":47,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/polygon","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kaloed.pro/","date":"2026-07-12T19:34:17.326Z","timestamp":1783884857326,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /polygon HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 136\r\nOrigin: https://kaloed.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaloed.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T05:40:19.241944Z","times_seen":17306852,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaloed.pro/favicon.ico","fqdn":"kaloed.pro","domain":"kaloed.pro","tld":"pro"},"ip":{"addr":"104.21.72.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kaloed.pro/","date":"2026-07-12T19:34:18.309Z","timestamp":1783884858309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaloed.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 09:17:23 GMT","end":"Mon, 05 Oct 2026 10:15:59 GMT"},"fingerprint":{"sha1":"79:8D:4F:49:44:BD:43:93:E0:CB:5A:07:F9:80:C2:36:84:F1:42:9A","sha256":"B4:1F:E6:83:4F:2E:31:99:4D:2A:30:06:B8:36:19:42:DB:16:E0:60:8B:31:B8:B7:0F:67:89:D0:5F:03:EE:DF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kaloed.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaloed.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 12 Jul 2026 19:34:18 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TgewO3EBYTxAo%2BExG0PO2now7cdtBqIJkQNVVePy45ttb1qo0wgdpU18gLHDu5tHNWQIxrtvp4A50VvHCqJckYVbXGJ2Gy07vHnAq8RFgmEly3iVXdsSmqRVEodA\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a27c0c7d82b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":828,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4b7b922a8d2e99dee1ef40efab5b1776","sha1":"b38180683b2d7eab0ea5ffa7139262e0297b2adf","sha256":"8bd5d50b6b0d6c88d76483447031d081e6ad1aacc715a65704f812a593d7207a","sha512":"ace3dcd71f218740aa04cb41dbecec9b2235c4401a1a14c40f8f9b21732b72e7850b784963b1018472ceeeada26feac2d6b8dbc34f2fb11b5bf5bd5707872bd8","ssdeep":"","tlshash":"81d02b9e9053a287481224a039c115c2264d12faa43a81a83dc6d887529893ecd9a9c8","first_seen":"2026-07-09T20:11:29.444045Z","last_seen":"2026-07-12T19:34:45.893268Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaloed.pro/log.php?t=pageview\u0026src=\u0026dv=desktop\u0026r=\u0026_=1783884856997","fqdn":"kaloed.pro","domain":"kaloed.pro","tld":"pro"},"ip":{"addr":"104.21.72.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kaloed.pro/","date":"2026-07-12T19:34:17.335Z","timestamp":1783884857335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaloed.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 09:17:23 GMT","end":"Mon, 05 Oct 2026 10:15:59 GMT"},"fingerprint":{"sha1":"79:8D:4F:49:44:BD:43:93:E0:CB:5A:07:F9:80:C2:36:84:F1:42:9A","sha256":"B4:1F:E6:83:4F:2E:31:99:4D:2A:30:06:B8:36:19:42:DB:16:E0:60:8B:31:B8:B7:0F:67:89:D0:5F:03:EE:DF"}}},"request":{"raw":"GET /log.php?t=pageview\u0026src=\u0026dv=desktop\u0026r=\u0026_=1783884856997 HTTP/1.1\r\nHost: kaloed.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaloed.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 19:34:17 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0oz4X4PzwI4pXzW%2BOUn5RapdkfZTTkMpLMnDf1UeZ8FvgtvfqrDECrnzcolwtazoVRfhwEBb5B84AwTGJP9vRs4tYncjGNFqD7uvIQpTUe9jPpLa9nMn4%2B31TQ8m\"}]}\r\ncontent-type: image/gif\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a27c065c4cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":680,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-17T05:40:33.040774Z","times_seen":992787,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaloed.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaleda.pro/api/index.php?q=FoX20S9gxYYHUv87xw","fqdn":"kaleda.pro","domain":"kaleda.pro","tld":"pro"},"ip":{"addr":"104.21.55.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kaloed.pro/","date":"2026-07-12T19:34:17.450Z","timestamp":1783884857450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaleda.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:13:49 GMT","end":"Fri, 09 Oct 2026 14:12:35 GMT"},"fingerprint":{"sha1":"10:BE:4C:0F:C5:FB:A5:90:EC:BA:ED:CF:8A:BA:6F:FE:5C:62:F8:95","sha256":"A9:7B:9A:C4:CA:F0:61:EE:92:A6:AF:69:B9:E1:CF:78:8F:C2:02:0C:D6:2D:16:76:44:2F:16:E2:5F:63:46:37"}}},"request":{"raw":"GET /api/index.php?q=FoX20S9gxYYHUv87xw HTTP/1.1\r\nHost: kaleda.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://kaloed.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaloed.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 19:34:17 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, User-Agent\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wd8RwSTRaeAgzrbnj0xnAVXUgjeNCV5fFaZzDQlh4fSyjl9wH%2ByRv%2BuDZUd4llR0JBjA7X9SJqAHXwBxqqzDZ39IEtUkX91lMjOmZiaoaNTdE9C11Q8jQ0YqGn1d\"}]}\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a27c079cfc56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154,"size_decoded":886,"mime_type":"application/json","magic":"JSON text data","md5":"362ad954bbf9cbae5519d043a40a73e1","sha1":"d0343a22b6756975fa375b36baa69f594930a7d1","sha256":"89f5ea37d1c028fba9ee74be7823713e4ba2e62b61cd9f13a5cfcb3311d86b6f","sha512":"a898e0aa8575ad957e7cfe725dcd6cb4576e36d395df2a34e5ff0db9880db0ea6454819b9ec941374dc1abbdf9109672e53a83aa10e33c5de801248688f45018","ssdeep":"","tlshash":"b5c02ba1c24f4b21fc4483cd362b5e8445249b3534f60c4a31822df113d6498cac22fe","first_seen":"2026-07-12T19:34:45.895148Z","last_seen":"2026-07-12T19:34:45.895148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":69,"connect":13,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kaleda.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/9/94/Cloudflare_Logo.png","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kaloed.pro/","date":"2026-07-12T19:34:17.876Z","timestamp":1783884857876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 05:24:58 GMT","end":"Thu, 10 Sep 2026 05:24:57 GMT"},"fingerprint":{"sha1":"5B:35:4A:25:C6:4D:17:23:8B:63:A3:F7:CE:52:1B:B7:22:06:BF:1B","sha256":"FE:D1:85:EF:B6:D0:7E:42:4F:F4:62:C9:8C:A3:BA:2C:88:5E:47:EB:9A:03:3D:30:4B:E3:63:FF:11:AD:F6:0D"}}},"request":{"raw":"GET /wikipedia/commons/9/94/Cloudflare_Logo.png HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaloed.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nx-object-meta-sha1base36: tqzc3404i3b6qqllzyx20sg0c8awofx\r\nlast-modified: Thu, 25 Nov 2021 22:52:08 GMT\r\ncontent-length: 63290\r\ndate: Sun, 12 Jul 2026 00:01:29 GMT\r\nx-ratelimit-limit: 10000, 10000;w=1\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1\r\nserver: envoy\r\netag: 05982e81981f0f4d317c59d3008727fc\r\nage: 70368\r\naccept-ranges: bytes\r\nx-cache: cp3077 hit, cp3077 hit/113\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\ncontent-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nx-content-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nset-cookie: WMF-Uniq=NNIvcTV1e_x-0jTzSnTRaAObAAAAAFvdhrFuvjzM-XdfGGpH0EaT7BV3cfr_lCBm;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Mon, 12 Jul 2027 00:00:00 GMT\r\nx-request-id: 08b5eac8-82bf-4a7a-94af-aa00d47fce37\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":63290,"size_decoded":65381,"mime_type":"image/png","magic":"PNG image data, 1368 x 1368, 8-bit/color RGBA, non-interlaced","md5":"05982e81981f0f4d317c59d3008727fc","sha1":"feae211bf6d65d064a33c7a87d46ee0b7c616dbd","sha256":"c3916862cfead3af678d0fe7cfcc90cdf69713c1d95bdb988320ffba20a57f0e","sha512":"3c7372405356ad6835968c2c227614a45cc3bc2f7296ff7dd8db5b979babb119aded114cb97a3a55774e05754ae22c7a2df03ce1eb71b65cb6261059388dced1","ssdeep":"768:k2L/oWPZzSgt4YwA0GUHz+sCoFEjzPQYclFK0flKkVFHoJfs/Ryo:km/LPc0wA07HZFEHPQYCFK14HoJq","tlshash":"9353be4acb59227bb5510019b7a3689398b12c733001de1e5bc7b46f5b07fb0ee72d92","first_seen":"2025-03-07T13:54:30.635821Z","last_seen":"2026-07-17T05:17:47.312345Z","times_seen":611,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":4,"connect":23,"send":0,"wait":43,"receive":25,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}