{"report_id":"c337d5a8-6463-41a0-986e-9c9c7c3a4070","version":0,"status":"done","tags":["netflix","phishing"],"date":"2026-07-17T12:25:40Z","url":{"schema":"http","addr":"kjo-krufg.net/login","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"64.29.17.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"kjo-krufg.net/login","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"title":"Netflix","dom":{"size":7599,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7595), with no line terminators","md5":"0fd225622962794b9b06f3699f35e51f","sha1":"8189f7818fcd457c061c4334ac765a091ddeb6e8","sha256":"c91a7d85f6c1b49eb2c188bc6b622db67d9644cb56728036d8cfedd1c9205909","sha512":"f28cde3377e62aefb7dced005b2ac2aaa2abf7f58d99cf3e4a9e53f38b610c7d8095e96b9f9b0c71c1ea3a89c787c788b9c7d01f1092a87f9f029dac07975fd8","ssdeep":"192:G1W+i2cZuDZmnXo3+lqxUtt5Ra24bo/1wir76y:4CuE9xtWyD36y","tlshash":"15f162b48d01cd4bdc27695db43eef7810cd852bd76bce5862ecce482391c721a989e1","dom_hash":"domhash95e9636c5a0f9dc732d0316dbe727ad4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kjo-krufg.net/login","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"64.29.17.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T12:25:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"kjo-krufg.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"kjo-krufg.net","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-07-15","domain_rank":0,"first_seen":"2026-07-17T12:25:40.99319Z","last_seen":"2026-07-17T12:25:40.99319Z","alert_count":55,"request_count":11,"received_data":557668,"sent_data":5333,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"kjo-krufg.net/login","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-07-19T12:20:18.003216Z","times_seen":98429,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kjo-krufg.net/login","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"adc1308061aa82e301dabf704b53a813","sha1":"ed406d01fbaac3d8a99a9266fd7327a1712f0fcc","sha256":"b48cece92971ff1cf779fa9a4f96179529c1fc4aced7f4049fab715f1d3cc031","sha512":"b1ae7f2fc4c45beadbd33b43c5e7691c06ef27b65e97f081c9c775790dc70f252edbe2c8596731ee9e63fa87f3b55d2ce9f4de7288f9b40be2126fafd4d9c584","ssdeep":"","tlshash":"73a01228c008dc5942300047003e1910809cc60d5290504423b4d5dd4090cb82284c84","size":86,"data":"","first_seen":"2026-01-13T00:15:05.623663Z","last_seen":"2026-07-17T19:12:19.930787Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kjo-krufg.net/login","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f29633275df3e1dc8004dc7265adadd6","sha1":"0cbf45ae9a16fc77ee6d1b9126906f29ad31f9dd","sha256":"3549836f3ccca9ae6f5b502dbc2bdaeeb0fcd7c39834269773c50a0452aa399e","sha512":"39ad13570b040c6d3f2eca76e3e44847c1b2b2b1b18d494addcfb7d5e49b2fa107745d40f64cc3aebaaa85c92dd569d65d187dc95e3c1516a100e70cce9cee04","ssdeep":"","tlshash":"b5415a6f9906dd87dc7e3d59467e9c3624cc8c3b0761ceb8829ecf081a065792bdad80","size":2005,"data":"","first_seen":"2026-07-17T12:25:44.369826Z","last_seen":"2026-07-17T19:12:19.931437Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kjo-krufg.net/login","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a7206db1994b57e639a1f8bd6bd39a9","sha1":"2073aaa88feb224242b5b6f46571556c6a006551","sha256":"ee98c27f81a1d9566d593e9e163c6469af170ae964dec966e8305c724fc01483","sha512":"54ea96a8d33ac3afc88fc9ef34975a7630a8f082aea24f424d8cd320f9a9dd2ca2582bb36825aebcdddf8e35dc16b834c673d0d962b132cecc1a7eb9332f9a8d","ssdeep":"","tlshash":"b4e0cd619c01dd1dc75b5f651c3f1c7920ddc3794245964699c4dd140943e754af2ec5","size":316,"data":"","first_seen":"2026-01-13T00:15:05.629311Z","last_seen":"2026-07-17T19:12:19.932617Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kjo-krufg.net/_next/static/chunks/app/login/page-481ee601ac8222c1.js","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4ee656bfb2e7cae030f2b6621b0908d","sha1":"ff04b7dc6694ffccfc5fea94c58db3018c5c9795","sha256":"412a97632de9f1280c5bf051ad766a342d4f8c598ea1d33b5b5fab0eb15106aa","sha512":"03e0fd5443903cae2b97696facd8ea117f9fc4ea8ce72e0835088c3e24e58217e4a73e6f0381cc943c0b36d8fb319bf7ad78064b4633d91a7e1749995464f569","ssdeep":"","tlshash":"15818f04f191afdcf9a708a4656fa44cb12f4a9ace4f49b5bab4a41125c309c3a03fc9","size":4075,"data":"","first_seen":"2026-02-11T02:34:01.782066Z","last_seen":"2026-07-17T19:12:19.92391Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kjo-krufg.net/_next/static/chunks/main-app-2dcde4753ea0d175.js","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ace3268523ca829896f160bf5401feab","sha1":"4062a8402cf24a1ccd0d38752462535e922f4cf8","sha256":"d7008163f1ed16ecb840d251190ac8a9d02132df87f25781faef1499945f9bdc","sha512":"f784ee7190413f445f0e16ed2f564f87c8183172462889739ac3f812be0e9d14762bcf1e55e794e14a8a62e6e3348f6b5c008efb66c7a2692cca98b742287486","ssdeep":"","tlshash":"def082992b4c702f2913ad24fdd35c2e255e416428a719501a04ddb12c336a893f1c39","size":461,"data":"","first_seen":"2024-10-04T10:20:35.510701Z","last_seen":"2026-07-19T11:06:29.97031Z","times_seen":1575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kjo-krufg.net/_next/static/chunks/webpack-616e068a201ad621.js","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d74a644fc97f243177af570fd8f3d18","sha1":"c40b16a6d44660005a41b3c041835f1c57919511","sha256":"bf28d495c109c504cdf3b257f6c71d74066a167cf6946b025a586872ffac92d2","sha512":"97f5cce6eebbbac848a3b0925718e9ace6ddace8949b42234eff6e270a207efe19566c6a3f625132884fa3b521865b6e97ecf96cd6e64333dd5f23bf4734fe2a","ssdeep":"","tlshash":"1181a7ed7161f9b9178350e1403fe456f63b24b2295ee4a4ca1dd8f8fc349488513fa9","size":3996,"data":"","first_seen":"2026-07-17T12:25:44.364295Z","last_seen":"2026-07-17T19:12:19.920929Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kjo-krufg.net/_next/static/chunks/117-8da57966bdd63c53.js","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13e87eb771cb1dc6c862544c92dd720","sha1":"846bf0013f880dd962a499008ad7b3c7fba8937f","sha256":"7bd6f41cfe0ce8b68c0fcfc0c580bf3f21c9d7b49f22665e6b21bb5ef49b476a","sha512":"1ba96f22742f8333dbe47235b5a037bb8c4764d0554ab1d6d1edad2fc722d6dbbdef50f5c89cb5daa9f8f6e684bcf53db54a3a7e237b1ed218b832bb75d809a7","ssdeep":"768:fO9P55e7wbSlPftVDK//d9icrEAKH1ag8xxqKjj3fOpDKdlr/NaO8Qr93UsGoROz:Ugw2l+Wc3mY5jFdl/iPsibn2kJ51oCv7","tlshash":"bcc3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","size":124364,"data":"","first_seen":"2025-12-16T15:37:48.63769Z","last_seen":"2026-07-19T11:37:58.340674Z","times_seen":2051,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kjo-krufg.net/_next/static/chunks/fd9d1056-1f9bd2c1b1f9ce48.js","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d70ea42503ecdf865cc5b50951e7a260","sha1":"d6024cc44a508c5e42bccc99aa6939490273b3a3","sha256":"b8bddf9481d859d648e1e050f8322eb3defe3dd3f9bd13f4c44dd6f2ecf5ab80","sha512":"c38885a712287d6c88b14f3a78df8b03c671a1e8fe71ec680edad591b056eabd5cc510e7cf2b565d94779bbb258ca49068d31adb94d343d59c653c57e77035ee","ssdeep":"1536:PVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:3zug758kkEiXjOAprX2wd5WjguGOK","tlshash":"50f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172834,"data":"","first_seen":"2025-01-18T11:47:06.649614Z","last_seen":"2026-07-19T12:15:42.29589Z","times_seen":4273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kjo-krufg.net/_next/static/chunks/145-79cf2224e3b5e4f0.js","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ee423bfd61fe11f929f20babc9fac04","sha1":"27495b0f342c553aa662fe9ee383bb1fb8e4d803","sha256":"95bb4d4907c1756f6f9f623af126bed3d6c00d03142a36ce7aa11db9b557e4e9","sha512":"739e42fb872d7e5cf6b37584422d3dd0bb292d81f695c0d08acd59457ce3af83958c64373fee1c7fe0a3e92b41a72480fbe0d00d5abc5cd95418be1817af1bc4","ssdeep":"192:FGr9W25JmtJ6/khfI2BjlwJY13M8nuFIaHDtau27fcMRFVYxu4BvqK4:FI8CJm9hfRoGOht47fdd4h2","tlshash":"7b522a7731d4f8ea238b80d1987f000df3755d76662ab14467a9c8c9e6f0158b163fba","size":14205,"data":"","first_seen":"2025-06-03T03:41:47.581082Z","last_seen":"2026-07-17T19:12:19.927409Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kjo-krufg.net/_next/static/chunks/145-79cf2224e3b5e4f0.js","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kjo-krufg.net/login","date":"2026-07-17T12:25:12.916Z","timestamp":1784291112916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kjo-krufg.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 03:13:54 GMT","end":"Wed, 14 Oct 2026 03:13:53 GMT"},"fingerprint":{"sha1":"D9:51:AB:33:93:0D:E4:D3:5E:75:B9:C8:DF:A4:F7:1B:49:25:79:C4","sha256":"D5:BB:38:E5:09:09:A4:7D:2E:6A:98:8B:F3:42:9F:08:47:F4:03:34:35:E8:18:02:AB:8A:BB:C3:1D:D3:FD:14"}}},"request":{"raw":"GET /_next/static/chunks/145-79cf2224e3b5e4f0.js HTTP/1.1\r\nHost: kjo-krufg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kjo-krufg.net/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 41883\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"145-79cf2224e3b5e4f0.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 12:25:12 GMT\r\netag: W/\"9ee423bfd61fe11f929f20babc9fac04\"\r\nlast-modified: Fri, 17 Jul 2026 00:47:09 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/145-79cf2224e3b5e4f0.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jrrzd-1784291112921-c418713309d7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":14205,"size_decoded":6131,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14205), with no line terminators","md5":"9ee423bfd61fe11f929f20babc9fac04","sha1":"27495b0f342c553aa662fe9ee383bb1fb8e4d803","sha256":"95bb4d4907c1756f6f9f623af126bed3d6c00d03142a36ce7aa11db9b557e4e9","sha512":"739e42fb872d7e5cf6b37584422d3dd0bb292d81f695c0d08acd59457ce3af83958c64373fee1c7fe0a3e92b41a72480fbe0d00d5abc5cd95418be1817af1bc4","ssdeep":"192:FGr9W25JmtJ6/khfI2BjlwJY13M8nuFIaHDtau27fcMRFVYxu4BvqK4:FI8CJm9hfRoGOht47fdd4h2","tlshash":"7b522a7731d4f8ea238b80d1987f000df3755d76662ab14467a9c8c9e6f0158b163fba","first_seen":"2025-06-03T03:41:47.581082Z","last_seen":"2026-07-17T19:12:19.927409Z","times_seen":39,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"kjo-krufg.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"kjo-krufg.net/_next/static/chunks/app/login/page-481ee601ac8222c1.js","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kjo-krufg.net/login","date":"2026-07-17T12:25:12.918Z","timestamp":1784291112918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kjo-krufg.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 03:13:54 GMT","end":"Wed, 14 Oct 2026 03:13:53 GMT"},"fingerprint":{"sha1":"D9:51:AB:33:93:0D:E4:D3:5E:75:B9:C8:DF:A4:F7:1B:49:25:79:C4","sha256":"D5:BB:38:E5:09:09:A4:7D:2E:6A:98:8B:F3:42:9F:08:47:F4:03:34:35:E8:18:02:AB:8A:BB:C3:1D:D3:FD:14"}}},"request":{"raw":"GET /_next/static/chunks/app/login/page-481ee601ac8222c1.js HTTP/1.1\r\nHost: kjo-krufg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kjo-krufg.net/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 41883\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-481ee601ac8222c1.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 12:25:12 GMT\r\netag: W/\"f4ee656bfb2e7cae030f2b6621b0908d\"\r\nlast-modified: Fri, 17 Jul 2026 00:47:09 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/app/login/page-481ee601ac8222c1.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pcgfg-1784291112923-9f5d8c91607b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4075,"size_decoded":2133,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4073), with no line terminators","md5":"f4ee656bfb2e7cae030f2b6621b0908d","sha1":"ff04b7dc6694ffccfc5fea94c58db3018c5c9795","sha256":"412a97632de9f1280c5bf051ad766a342d4f8c598ea1d33b5b5fab0eb15106aa","sha512":"03e0fd5443903cae2b97696facd8ea117f9fc4ea8ce72e0835088c3e24e58217e4a73e6f0381cc943c0b36d8fb319bf7ad78064b4633d91a7e1749995464f569","ssdeep":"","tlshash":"15818f04f191afdcf9a708a4656fa44cb12f4a9ace4f49b5bab4a41125c309c3a03fc9","first_seen":"2026-02-11T02:34:01.782066Z","last_seen":"2026-07-17T19:12:19.92391Z","times_seen":13,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"kjo-krufg.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"kjo-krufg.net/_next/image?url=%2Fbg.jpg\u0026w=1920\u0026q=75","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kjo-krufg.net/login","date":"2026-07-17T12:25:12.923Z","timestamp":1784291112923,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kjo-krufg.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 03:13:54 GMT","end":"Wed, 14 Oct 2026 03:13:53 GMT"},"fingerprint":{"sha1":"D9:51:AB:33:93:0D:E4:D3:5E:75:B9:C8:DF:A4:F7:1B:49:25:79:C4","sha256":"D5:BB:38:E5:09:09:A4:7D:2E:6A:98:8B:F3:42:9F:08:47:F4:03:34:35:E8:18:02:AB:8A:BB:C3:1D:D3:FD:14"}}},"request":{"raw":"GET /_next/image?url=%2Fbg.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: kjo-krufg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kjo-krufg.net/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 135573\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bg.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Fri, 17 Jul 2026 12:25:13 GMT\r\nlast-modified: Wed, 15 Jul 2026 22:45:38 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept\r\nx-matched-path: /bg.jpg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::prxlp-1784291112928-0b5028c1f6f8\r\ncontent-length: 206426\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":206426,"size_decoded":206985,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"055b504a32357ffedd49404bbbf8458c","sha1":"701dc0790208981455160925ad60d513ee24810f","sha256":"198b23173ce49888ea02eb5153b92bebfa74301490cb30648d7436398a23e2ad","sha512":"87a5257264f31394450ae19ab60b82f6490d814621d656080a6e37cf63817bcaca921c8b5dde63839d0604e2abbe843e164dbb3e126fd7c77e9375458664d1f8","ssdeep":"6144:rPhswFo+b+3GfIITuhyNjc55sAsS0PKrd:rPuA5qwFiY45npZrd","tlshash":"0e1422de61cfac15101ba6e3e758c7a28a863773210f1abe5109ab0dd9bd1c750ce4e7","first_seen":"2026-01-13T00:15:05.573096Z","last_seen":"2026-07-17T19:12:19.925141Z","times_seen":21,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"kjo-krufg.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"kjo-krufg.net/favicon.ico","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kjo-krufg.net/login","date":"2026-07-17T12:25:13.077Z","timestamp":1784291113077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kjo-krufg.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 03:13:54 GMT","end":"Wed, 14 Oct 2026 03:13:53 GMT"},"fingerprint":{"sha1":"D9:51:AB:33:93:0D:E4:D3:5E:75:B9:C8:DF:A4:F7:1B:49:25:79:C4","sha256":"D5:BB:38:E5:09:09:A4:7D:2E:6A:98:8B:F3:42:9F:08:47:F4:03:34:35:E8:18:02:AB:8A:BB:C3:1D:D3:FD:14"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kjo-krufg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kjo-krufg.net/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\naccess-control-allow-origin: *\r\nage: 42971\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"404\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 17 Jul 2026 12:25:13 GMT\r\netag: W/\"c42c6921a0e31c1d02e4ee09397c140c\"\r\nlast-modified: Fri, 17 Jul 2026 00:29:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /404\r\nx-next-error-status: 404\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bxmdn-1784291113083-a54fe3f51934\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3599,"size_decoded":1770,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3593), with no line terminators","md5":"c42c6921a0e31c1d02e4ee09397c140c","sha1":"911bf54685113dddc313b151b535237b4a30226b","sha256":"949410d3ecf5406c3852450977d97fa2c93dde6eea928fc8239a17a920931731","sha512":"1535dd6602412dbf7bba5c2b115518e025dc6545661f3d998d85e888612b010d320bd77e8d8418990db68fe94398e233981acf836bd0610b5dfd468be738d8bd","ssdeep":"","tlshash":"7c71e17b9c06dd4bdd7a3d6d443eac3a14ddc83b8b25c95842ddce0916426792bcadc0","first_seen":"2026-07-17T12:25:44.36223Z","last_seen":"2026-07-17T19:12:19.929372Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"kjo-krufg.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"kjo-krufg.net/_next/static/css/4badee37d02622ff.css","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kjo-krufg.net/login","date":"2026-07-17T12:25:12.908Z","timestamp":1784291112908,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kjo-krufg.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 03:13:54 GMT","end":"Wed, 14 Oct 2026 03:13:53 GMT"},"fingerprint":{"sha1":"D9:51:AB:33:93:0D:E4:D3:5E:75:B9:C8:DF:A4:F7:1B:49:25:79:C4","sha256":"D5:BB:38:E5:09:09:A4:7D:2E:6A:98:8B:F3:42:9F:08:47:F4:03:34:35:E8:18:02:AB:8A:BB:C3:1D:D3:FD:14"}}},"request":{"raw":"GET /_next/static/css/4badee37d02622ff.css HTTP/1.1\r\nHost: kjo-krufg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kjo-krufg.net/login\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 124596\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"4badee37d02622ff.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 17 Jul 2026 12:25:12 GMT\r\netag: W/\"7d8bed8a07312d227b3367bb277d8c62\"\r\nlast-modified: Thu, 16 Jul 2026 01:48:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/css/4badee37d02622ff.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pcgfg-1784291112913-c69fe858f227\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":11239,"size_decoded":3631,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11239), with no line terminators","md5":"7d8bed8a07312d227b3367bb277d8c62","sha1":"4873e611adb8df686d8490ea028e0e59a1331d5c","sha256":"7e1757abcc3f5ef5b7230057772d0197cf5efdf88e1fbe027209440029dc1875","sha512":"080c18f16b7601837c6edb6dbe27c9788375ea4e6d4da776959a3ba8f82c0c3ab9d93f635b7edad8279c6429dbcff5134f092a626d7f6ed9214906c3842da602","ssdeep":"96:oStw7m4rBebdVm7y9eP7J+OY/AT37J+OY/ATgVcbnPWanyRcnU7knv7P60mDMilr:oGw2s7JXYS7JXYiVkSSHtBie","tlshash":"3a32841da611053a7c2784fbd5a4fa59b026a0c2de3ad7e7ad836500fbe67f718d3204","first_seen":"2026-01-13T00:15:05.611549Z","last_seen":"2026-07-17T19:12:19.914393Z","times_seen":21,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"kjo-krufg.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"kjo-krufg.net/_next/static/chunks/webpack-616e068a201ad621.js","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kjo-krufg.net/login","date":"2026-07-17T12:25:12.909Z","timestamp":1784291112909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kjo-krufg.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 03:13:54 GMT","end":"Wed, 14 Oct 2026 03:13:53 GMT"},"fingerprint":{"sha1":"D9:51:AB:33:93:0D:E4:D3:5E:75:B9:C8:DF:A4:F7:1B:49:25:79:C4","sha256":"D5:BB:38:E5:09:09:A4:7D:2E:6A:98:8B:F3:42:9F:08:47:F4:03:34:35:E8:18:02:AB:8A:BB:C3:1D:D3:FD:14"}}},"request":{"raw":"GET /_next/static/chunks/webpack-616e068a201ad621.js HTTP/1.1\r\nHost: kjo-krufg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kjo-krufg.net/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 41884\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-616e068a201ad621.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 12:25:12 GMT\r\netag: W/\"9d74a644fc97f243177af570fd8f3d18\"\r\nlast-modified: Fri, 17 Jul 2026 00:47:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/webpack-616e068a201ad621.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dc26x-1784291112914-b0c1ed8e3411\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3996,"size_decoded":2562,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3557)","md5":"9d74a644fc97f243177af570fd8f3d18","sha1":"c40b16a6d44660005a41b3c041835f1c57919511","sha256":"bf28d495c109c504cdf3b257f6c71d74066a167cf6946b025a586872ffac92d2","sha512":"97f5cce6eebbbac848a3b0925718e9ace6ddace8949b42234eff6e270a207efe19566c6a3f625132884fa3b521865b6e97ecf96cd6e64333dd5f23bf4734fe2a","ssdeep":"","tlshash":"1181a7ed7161f9b9178350e1403fe456f63b24b2295ee4a4ca1dd8f8fc349488513fa9","first_seen":"2026-07-17T12:25:44.364295Z","last_seen":"2026-07-17T19:12:19.920929Z","times_seen":3,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"kjo-krufg.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"kjo-krufg.net/_next/static/chunks/fd9d1056-1f9bd2c1b1f9ce48.js","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kjo-krufg.net/login","date":"2026-07-17T12:25:12.911Z","timestamp":1784291112911,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kjo-krufg.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 03:13:54 GMT","end":"Wed, 14 Oct 2026 03:13:53 GMT"},"fingerprint":{"sha1":"D9:51:AB:33:93:0D:E4:D3:5E:75:B9:C8:DF:A4:F7:1B:49:25:79:C4","sha256":"D5:BB:38:E5:09:09:A4:7D:2E:6A:98:8B:F3:42:9F:08:47:F4:03:34:35:E8:18:02:AB:8A:BB:C3:1D:D3:FD:14"}}},"request":{"raw":"GET /_next/static/chunks/fd9d1056-1f9bd2c1b1f9ce48.js HTTP/1.1\r\nHost: kjo-krufg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kjo-krufg.net/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 41884\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"fd9d1056-1f9bd2c1b1f9ce48.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 12:25:12 GMT\r\netag: W/\"d70ea42503ecdf865cc5b50951e7a260\"\r\nlast-modified: Fri, 17 Jul 2026 00:47:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/fd9d1056-1f9bd2c1b1f9ce48.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fzn42-1784291112917-520eae887341\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":172834,"size_decoded":55671,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d70ea42503ecdf865cc5b50951e7a260","sha1":"d6024cc44a508c5e42bccc99aa6939490273b3a3","sha256":"b8bddf9481d859d648e1e050f8322eb3defe3dd3f9bd13f4c44dd6f2ecf5ab80","sha512":"c38885a712287d6c88b14f3a78df8b03c671a1e8fe71ec680edad591b056eabd5cc510e7cf2b565d94779bbb258ca49068d31adb94d343d59c653c57e77035ee","ssdeep":"1536:PVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:3zug758kkEiXjOAprX2wd5WjguGOK","tlshash":"50f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2025-01-18T11:47:06.649614Z","last_seen":"2026-07-19T12:15:42.29589Z","times_seen":4273,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"kjo-krufg.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"kjo-krufg.net/_next/static/chunks/main-app-2dcde4753ea0d175.js","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kjo-krufg.net/login","date":"2026-07-17T12:25:12.915Z","timestamp":1784291112915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kjo-krufg.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 03:13:54 GMT","end":"Wed, 14 Oct 2026 03:13:53 GMT"},"fingerprint":{"sha1":"D9:51:AB:33:93:0D:E4:D3:5E:75:B9:C8:DF:A4:F7:1B:49:25:79:C4","sha256":"D5:BB:38:E5:09:09:A4:7D:2E:6A:98:8B:F3:42:9F:08:47:F4:03:34:35:E8:18:02:AB:8A:BB:C3:1D:D3:FD:14"}}},"request":{"raw":"GET /_next/static/chunks/main-app-2dcde4753ea0d175.js HTTP/1.1\r\nHost: kjo-krufg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kjo-krufg.net/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 42971\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-app-2dcde4753ea0d175.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 12:25:12 GMT\r\netag: \"ace3268523ca829896f160bf5401feab\"\r\nlast-modified: Fri, 17 Jul 2026 00:29:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/main-app-2dcde4753ea0d175.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::prxlp-1784291112919-830023e1602e\r\ncontent-length: 461\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":461,"size_decoded":1083,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (461), with no line terminators","md5":"ace3268523ca829896f160bf5401feab","sha1":"4062a8402cf24a1ccd0d38752462535e922f4cf8","sha256":"d7008163f1ed16ecb840d251190ac8a9d02132df87f25781faef1499945f9bdc","sha512":"f784ee7190413f445f0e16ed2f564f87c8183172462889739ac3f812be0e9d14762bcf1e55e794e14a8a62e6e3348f6b5c008efb66c7a2692cca98b742287486","ssdeep":"","tlshash":"def082992b4c702f2913ad24fdd35c2e255e416428a719501a04ddb12c336a893f1c39","first_seen":"2024-10-04T10:20:35.510701Z","last_seen":"2026-07-19T11:06:29.97031Z","times_seen":1575,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"kjo-krufg.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"kjo-krufg.net/_next/image?url=%2Flogo.png\u0026w=128\u0026q=75","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kjo-krufg.net/login","date":"2026-07-17T12:25:12.925Z","timestamp":1784291112925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kjo-krufg.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 03:13:54 GMT","end":"Wed, 14 Oct 2026 03:13:53 GMT"},"fingerprint":{"sha1":"D9:51:AB:33:93:0D:E4:D3:5E:75:B9:C8:DF:A4:F7:1B:49:25:79:C4","sha256":"D5:BB:38:E5:09:09:A4:7D:2E:6A:98:8B:F3:42:9F:08:47:F4:03:34:35:E8:18:02:AB:8A:BB:C3:1D:D3:FD:14"}}},"request":{"raw":"GET /_next/image?url=%2Flogo.png\u0026w=128\u0026q=75 HTTP/1.1\r\nHost: kjo-krufg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kjo-krufg.net/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 135911\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Fri, 17 Jul 2026 12:25:12 GMT\r\nlast-modified: Wed, 15 Jul 2026 22:40:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept\r\nx-matched-path: /logo.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jrrzd-1784291112930-8cf6593fa51f\r\ncontent-length: 2542\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2542,"size_decoded":3103,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b4b0b4342b798b8977dbcac4500ee304","sha1":"5f7128f182547c67c70efc7382a15f1e3e9635bc","sha256":"c91e5c7489cdb50120781aac98954801fbe6ef06c35bc5720433d14fbf88590d","sha512":"a9ac7b1610e7da5eb52e2775ab0c4b762281a0b8ba8871d9ea519695d4ad9331b87dbc2d49aab533cd2b1f15920d82c5611a407f00c6f40382e5881afc03dde9","ssdeep":"","tlshash":"c3514ccb12e4273d1a9b4010b4c75af3e0158c240724ee72f1b9c97c44d5ab05f42618","first_seen":"2026-02-11T02:34:01.786097Z","last_seen":"2026-07-17T19:12:19.928638Z","times_seen":13,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"kjo-krufg.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"kjo-krufg.net/login","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T12:25:12.563Z","timestamp":1784291112563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kjo-krufg.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 03:13:54 GMT","end":"Wed, 14 Oct 2026 03:13:53 GMT"},"fingerprint":{"sha1":"D9:51:AB:33:93:0D:E4:D3:5E:75:B9:C8:DF:A4:F7:1B:49:25:79:C4","sha256":"D5:BB:38:E5:09:09:A4:7D:2E:6A:98:8B:F3:42:9F:08:47:F4:03:34:35:E8:18:02:AB:8A:BB:C3:1D:D3:FD:14"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: kjo-krufg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 135615\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 17 Jul 2026 12:25:12 GMT\r\netag: W/\"b8f02daa25c7d99845dbb72d7c5e5420\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /login\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jhqsk-1784291112638-2d190c4d99bc\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":7553,"size_decoded":2986,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7549), with no line terminators","md5":"396c3a5809b5f7c6ee5a54b8caa681c9","sha1":"56accbcc2759082fb30db1a6b5f2fac76f1f97e9","sha256":"56e86c9c0448be6f34ee215a11b34243597429d2c53969a440edaac3004bee78","sha512":"df431690601045fe520b76c837df90e6a2bef6bd4a6a4bfcd61513157cd066d2ed764f892d468e7bf0b0209c1c027a237a000387e261a2cea09f5fbed89f76dd","ssdeep":"192:AX+CHcUOuZfn3hX+lqvoUtQ/Ra24bo/1wir76u:QtOSSyQUyD36u","tlshash":"73f172a4de01cd4bdc27689db43eef7810cd892bc76bce5862ecce482391d721a949d1","first_seen":"2026-07-17T12:25:44.36701Z","last_seen":"2026-07-17T19:12:19.92638Z","times_seen":2,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":36,"connect":1,"send":0,"wait":11,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"kjo-krufg.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"kjo-krufg.net/_next/static/chunks/117-8da57966bdd63c53.js","fqdn":"kjo-krufg.net","domain":"kjo-krufg.net","tld":"net"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kjo-krufg.net/login","date":"2026-07-17T12:25:12.913Z","timestamp":1784291112913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kjo-krufg.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 03:13:54 GMT","end":"Wed, 14 Oct 2026 03:13:53 GMT"},"fingerprint":{"sha1":"D9:51:AB:33:93:0D:E4:D3:5E:75:B9:C8:DF:A4:F7:1B:49:25:79:C4","sha256":"D5:BB:38:E5:09:09:A4:7D:2E:6A:98:8B:F3:42:9F:08:47:F4:03:34:35:E8:18:02:AB:8A:BB:C3:1D:D3:FD:14"}}},"request":{"raw":"GET /_next/static/chunks/117-8da57966bdd63c53.js HTTP/1.1\r\nHost: kjo-krufg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kjo-krufg.net/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 41884\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"117-8da57966bdd63c53.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 12:25:12 GMT\r\netag: W/\"d13e87eb771cb1dc6c862544c92dd720\"\r\nlast-modified: Fri, 17 Jul 2026 00:47:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/117-8da57966bdd63c53.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pxcjx-1784291112918-99a7f200898e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":124364,"size_decoded":33552,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d13e87eb771cb1dc6c862544c92dd720","sha1":"846bf0013f880dd962a499008ad7b3c7fba8937f","sha256":"7bd6f41cfe0ce8b68c0fcfc0c580bf3f21c9d7b49f22665e6b21bb5ef49b476a","sha512":"1ba96f22742f8333dbe47235b5a037bb8c4764d0554ab1d6d1edad2fc722d6dbbdef50f5c89cb5daa9f8f6e684bcf53db54a3a7e237b1ed218b832bb75d809a7","ssdeep":"768:fO9P55e7wbSlPftVDK//d9icrEAKH1ag8xxqKjj3fOpDKdlr/NaO8Qr93UsGoROz:Ugw2l+Wc3mY5jFdl/iPsibn2kJ51oCv7","tlshash":"bcc3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","first_seen":"2025-12-16T15:37:48.63769Z","last_seen":"2026-07-19T11:37:58.340674Z","times_seen":2051,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"kjo-krufg.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"kjo-krufg.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}