{"report_id":"c5d9d43c-b570-4565-bfb9-ad6506d61276","version":6,"status":"done","tags":[],"date":"2026-02-01T16:41:50Z","url":{"schema":"https","addr":"kysmilecoin.com/","fqdn":"kysmilecoin.com","domain":"kysmilecoin.com","tld":"com"},"ip":{"addr":"118.27.146.13","port":0,"asn":135161,"as":"GMO-Z com NetDesign Holdings Co., Ltd.","country":"Japan","country_code":"JP"},"final":{"url":{"schema":"https","addr":"kysmilecoin.com/login","fqdn":"kysmilecoin.com","domain":"kysmilecoin.com","tld":"com"},"title":"HAWK Smile Coin - Login","dom":{"size":9734,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (536)","md5":"006776ab86942e313d62b136a36cbcdc","sha1":"49e97973178ebbef3d63ce6076b19f7d4f0b084b","sha256":"357774133636ef7486cabc20d8612455cebc387b822cad23f64784d61e24a003","sha512":"112b96bc4c87a3cceac4dcb2d902688cbb4702a3d728186ffbefed4fd38ce8db4e3f81501e8c047fc1372a7d0d73b2dedc865e2514ca016e767d5289bf320e5c","ssdeep":"96:n8+R/QJ0UKtrJpxqqLtneeEH5XbbZ/mbn5Ehi1JZuHFP+mMc:8+R/QJ0UKtrJpvBOpx/QtBuHFGmd","tlshash":"bd12867a15f5113a6083c2f179e1be99ed8bc60bcb4b919af19c86c52f83d93dd03258","dom_hash":"domhash8e857d943b4016e5e246cf6fa55b4898","first_seen":"2026-02-01T16:41:52.5786Z","last_seen":"2026-02-01T16:41:52.5786Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"kysmilecoin.com/","fqdn":"kysmilecoin.com","domain":"kysmilecoin.com","tld":"com"},"ip":{"addr":"118.27.146.13","port":0,"asn":135161,"as":"GMO-Z com NetDesign Holdings Co., Ltd.","country":"Japan","country_code":"JP"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T16:41:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"kysmilecoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.bunny.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"1999-11-22","domain_rank":56787,"first_seen":"2022-03-21T07:38:02Z","last_seen":"2026-01-26T01:42:39.577484Z","alert_count":0,"request_count":1,"received_data":3992,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":1,"received_data":14949,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"kysmilecoin.com","ip":{"addr":"118.27.146.13","port":443,"asn":135161,"as":"GMO-Z com NetDesign Holdings Co., Ltd.","country":"Japan","country_code":"JP"},"domain_registered":"2026-01-26","domain_rank":0,"first_seen":"2026-02-01T01:41:28.793322Z","last_seen":"2026-02-01T01:41:28.793322Z","alert_count":7,"request_count":7,"received_data":266777,"sent_data":7534,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":4,"received_data":160733,"sent_data":2202,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kysmilecoin.com/build/assets/app-CiZ6hk-B.js","fqdn":"kysmilecoin.com","domain":"kysmilecoin.com","tld":"com"},"ip":{"addr":"118.27.146.13","port":443,"asn":135161,"as":"GMO-Z com NetDesign Holdings Co., Ltd.","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"be3ede27cc21584aad33ea342592f98a","sha1":"869c40329fcdd7afe732cf8d75ce1fb8c14ef225","sha256":"8b70fda1d3a45c4707e69275ab96b7516d31cb76559a1155f7f033836d495a39","sha512":"06be98fa2db4b87c9cdf4326c2169a814fead0da8c5095fde86c418c0df4fd3556d6959820cf72e9a4801d7b00f8e6d50f8c6373930255139c2707363ed117b3","ssdeep":"1536:nyK3yDxoMh65DBKUIaDnV8dHnkfeBQ4EOGARHrnHqvK6D:nyK32mMkpBKU9DnAHnkfeBzEjiHrnIb","tlshash":"0883f8e972d6b03283ea11f150bf0606f3396954780e44a4b52ce8eb386648d96f7f7d","size":81834,"data":"","first_seen":"2026-01-03T03:14:07.6289Z","last_seen":"2026-07-20T23:54:01.739392Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Orbitron:wght@400;500;700;900\u0026family=Inter:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kysmilecoin.com/login","date":"2026-02-01T16:41:30.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Orbitron:wght@400;500;700;900\u0026family=Inter:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kysmilecoin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 01 Feb 2026 16:41:31 GMT\r\ndate: Sun, 01 Feb 2026 16:41:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14263,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"806f1812600df67c64b8dbaed3c97f93","sha1":"ac5c1117176852e607d2fdb9a6f94afb48b96e61","sha256":"3b0129db56e5d59379d36fdc3893b180274e6e54bfd204b81a6ee9fcc3b2f3df","sha512":"2dbc7871e2006c9956b10ff942fe947a4ba66885d3a78985b7cbd1f74f64ba6baf4f87dcfa4c193363aed4a54b345c5b96dc878538698459f6968a692fbcc5c5","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGngwg6gMgB:8KYXuM0p2+D","tlshash":"9352bb92002be500ab931dc233cf7f3aae8e50886485d5795ffd0cc5acead66436976d","first_seen":"2025-10-24T13:13:16.15089Z","last_seen":"2026-07-04T21:03:38.917783Z","times_seen":33,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":103,"dns":1,"connect":20,"send":0,"wait":38,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kysmilecoin.com/build/assets/app-CiZ6hk-B.js","fqdn":"kysmilecoin.com","domain":"kysmilecoin.com","tld":"com"},"ip":{"addr":"118.27.146.13","port":443,"asn":135161,"as":"GMO-Z com NetDesign Holdings Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kysmilecoin.com/login","date":"2026-02-01T16:41:30.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.kysmilecoin.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:26:49 GMT","end":"Tue, 28 Apr 2026 10:26:48 GMT"},"fingerprint":{"sha1":"F9:1F:E3:45:15:73:75:4C:34:1A:64:CE:78:6A:15:F9:E9:27:68:60","sha256":"CB:CD:DD:BE:10:39:ED:FE:CA:56:10:88:DF:9C:8C:7C:F7:DF:8C:18:72:33:B3:D4:37:83:7C:0A:49:4F:32:88"}}},"request":{"raw":"GET /build/assets/app-CiZ6hk-B.js HTTP/1.1\r\nHost: kysmilecoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kysmilecoin.com/login\r\nCookie: XSRF-TOKEN=eyJpdiI6IkpsTWNyNDNFRitmZTFJamNqR2ZvYWc9PSIsInZhbHVlIjoiT05HRk54TkNrZVZ2VGFQOVF3RC81WVdMemlnSTNkTXZxUFVoM3BYanh5cUx3TmZQTXZpUEFKRzI4bmp2QXRSZ2pNVCt2RTJLSTVaQTFEN0o1bHBWb1NvOE95NlBkZmV6ZElTZ2o3cEUwTlBhWWc5Y2xkNUMzT2h5RTdYOWhJenAiLCJtYWMiOiJlMTQ3YmI1MDE2YjBmYTFhNjY0NmM4NzBmNjJiNmFkNDcwNTE4MmNlNTQ4MjdmMTUxODRhNGMxN2I3NjNiNTU3IiwidGFnIjoiIn0%3D; laravel-session=eyJpdiI6ImNsYlZCVmxDOW1qR3d3S3MrdTlNZHc9PSIsInZhbHVlIjoiYzZONHlYYytOYjNQZ1VZaXBkUnlYL3pXUWlDVE5XRFpZek0xQmxuZGQ2MjdvdEhtT2NpSHFEd3FQTi8wV3dEQ3hIamlHdzNqZS9nRTBkeTZheVNENm5TS2pDNDdEam00NXhhbzB1VzZseWJaR2ZFTXBmaEtDTldTR00rWEpjemsiLCJtYWMiOiI2ZGMwNDlhMTUzMzI1MWU3ZDBmOTZiNzRlZDhhM2JmZmI4MmVjYmE5YzdlMjI5M2Y4MzRhOTIwYzc1NWRiZmZkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 28 Jan 2026 10:20:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29863\r\ndate: Sun, 01 Feb 2026 16:41:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":81834,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (23843)","md5":"be3ede27cc21584aad33ea342592f98a","sha1":"869c40329fcdd7afe732cf8d75ce1fb8c14ef225","sha256":"8b70fda1d3a45c4707e69275ab96b7516d31cb76559a1155f7f033836d495a39","sha512":"06be98fa2db4b87c9cdf4326c2169a814fead0da8c5095fde86c418c0df4fd3556d6959820cf72e9a4801d7b00f8e6d50f8c6373930255139c2707363ed117b3","ssdeep":"1536:nyK3yDxoMh65DBKUIaDnV8dHnkfeBQ4EOGARHrnHqvK6D:nyK32mMkpBKU9DnAHnkfeBzEjiHrnIb","tlshash":"0883f8e972d6b03283ea11f150bf0606f3396954780e44a4b52ce8eb386648d96f7f7d","first_seen":"2026-01-03T03:14:07.6289Z","last_seen":"2026-07-20T23:54:01.739392Z","times_seen":18,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"kysmilecoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kysmilecoin.com/login","date":"2026-02-01T16:41:31.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kysmilecoin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11800\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 23:18:25 GMT\r\nexpires: Thu, 28 Jan 2027 23:18:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 321786\r\nlast-modified: Thu, 04 Sep 2025 17:04:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11800,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.0","md5":"5d281085f7277a3ec9c7586dd2f24a13","sha1":"d686c7f2bfeb693a91baf3aaa3b6e70aa1a5bcc3","sha256":"c25a9f9da5d9f3db1bf2a01474722dc9b377675b7bbab6d0dfda6902794fd1ed","sha512":"7a31ed0d967a47d8f6135b5889c2af595b1ed3993ee3e2e2f522875e6384773b1f9f96ac891c068599580a543001443b1a1d565563a13010d40e1dbac4142220","ssdeep":"192:oufNGqi8O6lHWqR+OVLlB2AynsvBhJo/WO9UrApcn4UwLqJhPCGSlkeLlM:vCjKBBB250BhJol9UB48SeeBM","tlshash":"fc32c067623046e2fc22b53001fc4500466865bfd140f1bfd66349e7766e9606eb2a3e","first_seen":"2025-06-03T09:08:22.59014Z","last_seen":"2026-08-11T18:06:26.288299Z","times_seen":8228,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":69,"dns":2,"connect":23,"send":0,"wait":17,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kysmilecoin.com/image/hawk.jpg","fqdn":"kysmilecoin.com","domain":"kysmilecoin.com","tld":"com"},"ip":{"addr":"118.27.146.13","port":443,"asn":135161,"as":"GMO-Z com NetDesign Holdings Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kysmilecoin.com/login","date":"2026-02-01T16:41:31.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.kysmilecoin.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:26:49 GMT","end":"Tue, 28 Apr 2026 10:26:48 GMT"},"fingerprint":{"sha1":"F9:1F:E3:45:15:73:75:4C:34:1A:64:CE:78:6A:15:F9:E9:27:68:60","sha256":"CB:CD:DD:BE:10:39:ED:FE:CA:56:10:88:DF:9C:8C:7C:F7:DF:8C:18:72:33:B3:D4:37:83:7C:0A:49:4F:32:88"}}},"request":{"raw":"GET /image/hawk.jpg HTTP/1.1\r\nHost: kysmilecoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kysmilecoin.com/login\r\nCookie: XSRF-TOKEN=eyJpdiI6IkpsTWNyNDNFRitmZTFJamNqR2ZvYWc9PSIsInZhbHVlIjoiT05HRk54TkNrZVZ2VGFQOVF3RC81WVdMemlnSTNkTXZxUFVoM3BYanh5cUx3TmZQTXZpUEFKRzI4bmp2QXRSZ2pNVCt2RTJLSTVaQTFEN0o1bHBWb1NvOE95NlBkZmV6ZElTZ2o3cEUwTlBhWWc5Y2xkNUMzT2h5RTdYOWhJenAiLCJtYWMiOiJlMTQ3YmI1MDE2YjBmYTFhNjY0NmM4NzBmNjJiNmFkNDcwNTE4MmNlNTQ4MjdmMTUxODRhNGMxN2I3NjNiNTU3IiwidGFnIjoiIn0%3D; laravel-session=eyJpdiI6ImNsYlZCVmxDOW1qR3d3S3MrdTlNZHc9PSIsInZhbHVlIjoiYzZONHlYYytOYjNQZ1VZaXBkUnlYL3pXUWlDVE5XRFpZek0xQmxuZGQ2MjdvdEhtT2NpSHFEd3FQTi8wV3dEQ3hIamlHdzNqZS9nRTBkeTZheVNENm5TS2pDNDdEam00NXhhbzB1VzZseWJaR2ZFTXBmaEtDTldTR00rWEpjemsiLCJtYWMiOiI2ZGMwNDlhMTUzMzI1MWU3ZDBmOTZiNzRlZDhhM2JmZmI4MmVjYmE5YzdlMjI5M2Y4MzRhOTIwYzc1NWRiZmZkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:41:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 31 Jan 2026 15:33:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24859\r\ndate: Sun, 01 Feb 2026 16:41:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24859,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x640, components 3","md5":"af69ff2632c9c4239e4d1597c28d2eb6","sha1":"2f21da79486086855d32c6e65636f195baecc4ae","sha256":"e2f6fc737c419eaebe1a74112888e1c34359fd75db754ea5eba0b70e09f29ca6","sha512":"4ac1e5b4650dc5dacf60f3dc6e4378a773c8fc53b99736949cd1c87967f781aee921fd7cd218c4d9b84b05acbd307a583f3b2082fbcf4c6814a01492d4d426b0","ssdeep":"384:ooLhNlLcH73Jg/i/SWJyjCR4v4yUH5Vgnh0gBH2E2jv9K4uSJ2yPo:flErSWJu/vnWVgnhFBebtUyQ","tlshash":"09b2d0b227304159fb90973adc27441483316f18685c1a87e5a78a92c8ddb7b8df0ee3","first_seen":"2026-02-01T01:41:33.930409Z","last_seen":"2026-02-01T16:41:52.582016Z","times_seen":2,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"kysmilecoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kysmilecoin.com/","fqdn":"kysmilecoin.com","domain":"kysmilecoin.com","tld":"com"},"ip":{"addr":"118.27.146.13","port":443,"asn":135161,"as":"GMO-Z com NetDesign Holdings Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T16:41:29.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.kysmilecoin.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:26:49 GMT","end":"Tue, 28 Apr 2026 10:26:48 GMT"},"fingerprint":{"sha1":"F9:1F:E3:45:15:73:75:4C:34:1A:64:CE:78:6A:15:F9:E9:27:68:60","sha256":"CB:CD:DD:BE:10:39:ED:FE:CA:56:10:88:DF:9C:8C:7C:F7:DF:8C:18:72:33:B3:D4:37:83:7C:0A:49:4F:32:88"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kysmilecoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nx-powered-by: PHP/8.4.15\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nlocation: https://kysmilecoin.com/login\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ik0xbWhIdkRXREtuaWxENGxyZ1p6TGc9PSIsInZhbHVlIjoiQzd4NmdjeW1PWTlrdWFzdkk5M0F0Z1JWNDhOSkhzYms4ZlpDb2xHSzRUWCtNcmtMNWQyN2JXeThrNHNyT1RTNm1sVlB3K01mMkpybHllQ0UrYmhHWklvOEFScUtSK1ZxWjVKb2tVQjZJSkowYkhxT3VCVFFNQ0M1VUVPTStseEYiLCJtYWMiOiI5Y2ZjMTNhZGIyM2EyYzI5ZjcxNWQ0ZWM5ZmZiNDM3NzQwZDE3MTYwMzFlY2UxYTU2ZGY2ZTljMGUwNjIxMDQ3IiwidGFnIjoiIn0%3D; expires=Sun, 01 Feb 2026 18:41:30 GMT; Max-Age=7200; path=/; secure; samesite=lax\nlaravel-session=eyJpdiI6Ino1Zmp6eVYwbmZLTlFQNU1oYjdCa2c9PSIsInZhbHVlIjoiK2s3ZTVqZUpGSElDU1hrYXVTcC90UG14NUNqVFZ1bC81ZzJ3SzFxKzkrY3NDL1p2MlVIQ1p6akp1TTdiSzFMVTJ0Mk02THpDYisxSHlBUm1YMkV5UU5PMFJxYkEvRzdwZERzdzZkNzJGdFNIS0trclgwSGZqTmlscTd2K3g1T0QiLCJtYWMiOiI0MGQwYWEzNTU0NmJlZTA0ZGQ0MmYwZGIyOTgyYTI4ZWYzNDJkZDMyZWJlOWIwOThiNjcwOGI2ZmFiNTAwZTM1IiwidGFnIjoiIn0%3D; expires=Sun, 01 Feb 2026 18:41:30 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 01 Feb 2026 16:41:30 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10130,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":2024,"timings":{"blocked":797,"dns":394,"connect":200,"send":0,"wait":426,"receive":0,"ssl":205},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"kysmilecoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kysmilecoin.com/login","fqdn":"kysmilecoin.com","domain":"kysmilecoin.com","tld":"com"},"ip":{"addr":"118.27.146.13","port":443,"asn":135161,"as":"GMO-Z com NetDesign Holdings Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T16:41:30.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.kysmilecoin.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:26:49 GMT","end":"Tue, 28 Apr 2026 10:26:48 GMT"},"fingerprint":{"sha1":"F9:1F:E3:45:15:73:75:4C:34:1A:64:CE:78:6A:15:F9:E9:27:68:60","sha256":"CB:CD:DD:BE:10:39:ED:FE:CA:56:10:88:DF:9C:8C:7C:F7:DF:8C:18:72:33:B3:D4:37:83:7C:0A:49:4F:32:88"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: kysmilecoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik0xbWhIdkRXREtuaWxENGxyZ1p6TGc9PSIsInZhbHVlIjoiQzd4NmdjeW1PWTlrdWFzdkk5M0F0Z1JWNDhOSkhzYms4ZlpDb2xHSzRUWCtNcmtMNWQyN2JXeThrNHNyT1RTNm1sVlB3K01mMkpybHllQ0UrYmhHWklvOEFScUtSK1ZxWjVKb2tVQjZJSkowYkhxT3VCVFFNQ0M1VUVPTStseEYiLCJtYWMiOiI5Y2ZjMTNhZGIyM2EyYzI5ZjcxNWQ0ZWM5ZmZiNDM3NzQwZDE3MTYwMzFlY2UxYTU2ZGY2ZTljMGUwNjIxMDQ3IiwidGFnIjoiIn0%3D; laravel-session=eyJpdiI6Ino1Zmp6eVYwbmZLTlFQNU1oYjdCa2c9PSIsInZhbHVlIjoiK2s3ZTVqZUpGSElDU1hrYXVTcC90UG14NUNqVFZ1bC81ZzJ3SzFxKzkrY3NDL1p2MlVIQ1p6akp1TTdiSzFMVTJ0Mk02THpDYisxSHlBUm1YMkV5UU5PMFJxYkEvRzdwZERzdzZkNzJGdFNIS0trclgwSGZqTmlscTd2K3g1T0QiLCJtYWMiOiI0MGQwYWEzNTU0NmJlZTA0ZGQ0MmYwZGIyOTgyYTI4ZWYzNDJkZDMyZWJlOWIwOThiNjcwOGI2ZmFiNTAwZTM1IiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.4.15\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkpsTWNyNDNFRitmZTFJamNqR2ZvYWc9PSIsInZhbHVlIjoiT05HRk54TkNrZVZ2VGFQOVF3RC81WVdMemlnSTNkTXZxUFVoM3BYanh5cUx3TmZQTXZpUEFKRzI4bmp2QXRSZ2pNVCt2RTJLSTVaQTFEN0o1bHBWb1NvOE95NlBkZmV6ZElTZ2o3cEUwTlBhWWc5Y2xkNUMzT2h5RTdYOWhJenAiLCJtYWMiOiJlMTQ3YmI1MDE2YjBmYTFhNjY0NmM4NzBmNjJiNmFkNDcwNTE4MmNlNTQ4MjdmMTUxODRhNGMxN2I3NjNiNTU3IiwidGFnIjoiIn0%3D; expires=Sun, 01 Feb 2026 18:41:30 GMT; Max-Age=7200; path=/; secure; samesite=lax\nlaravel-session=eyJpdiI6ImNsYlZCVmxDOW1qR3d3S3MrdTlNZHc9PSIsInZhbHVlIjoiYzZONHlYYytOYjNQZ1VZaXBkUnlYL3pXUWlDVE5XRFpZek0xQmxuZGQ2MjdvdEhtT2NpSHFEd3FQTi8wV3dEQ3hIamlHdzNqZS9nRTBkeTZheVNENm5TS2pDNDdEam00NXhhbzB1VzZseWJaR2ZFTXBmaEtDTldTR00rWEpjemsiLCJtYWMiOiI2ZGMwNDlhMTUzMzI1MWU3ZDBmOTZiNzRlZDhhM2JmZmI4MmVjYmE5YzdlMjI5M2Y4MzRhOTIwYzc1NWRiZmZkIiwidGFnIjoiIn0%3D; expires=Sun, 01 Feb 2026 18:41:30 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 01 Feb 2026 16:41:30 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10130,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (535)","md5":"3a0efa4cebd5cd6b65944610d3185613","sha1":"7cbd8a464c461a30ce9b1240a7adea7d520833d0","sha256":"500f94767710fc5006046d6f53264c5ccefabf8673b215bd32d20e1eaf0846f7","sha512":"8ecc8e87adc40dd8f950bcefcc29b18a5331db5516430ab2db4fe18197837faf332f2476a3696ed75852c30718cd7e4974795ff5886c899d0f3d29ff94fbeb64","ssdeep":"96:s+R/xUKVFdoJpzUqNtxm2EH/Xbb3/mbR5mi1JjuHFPmyMJu:s+R/xUK9oJpN3W/f/0r7uHFuyuu","tlshash":"a122537a15f5113a5083c1f1b9f2be99ad8bc60bca4b919ef19c86c52f82d92dd03258","first_seen":"2026-02-01T16:41:52.583644Z","last_seen":"2026-02-01T16:41:52.583644Z","times_seen":1,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"kysmilecoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kysmilecoin.com/build/assets/app-BjGd3i0f.css","fqdn":"kysmilecoin.com","domain":"kysmilecoin.com","tld":"com"},"ip":{"addr":"118.27.146.13","port":443,"asn":135161,"as":"GMO-Z com NetDesign Holdings Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kysmilecoin.com/login","date":"2026-02-01T16:41:30.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.kysmilecoin.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:26:49 GMT","end":"Tue, 28 Apr 2026 10:26:48 GMT"},"fingerprint":{"sha1":"F9:1F:E3:45:15:73:75:4C:34:1A:64:CE:78:6A:15:F9:E9:27:68:60","sha256":"CB:CD:DD:BE:10:39:ED:FE:CA:56:10:88:DF:9C:8C:7C:F7:DF:8C:18:72:33:B3:D4:37:83:7C:0A:49:4F:32:88"}}},"request":{"raw":"GET /build/assets/app-BjGd3i0f.css HTTP/1.1\r\nHost: kysmilecoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kysmilecoin.com/login\r\nCookie: XSRF-TOKEN=eyJpdiI6IkpsTWNyNDNFRitmZTFJamNqR2ZvYWc9PSIsInZhbHVlIjoiT05HRk54TkNrZVZ2VGFQOVF3RC81WVdMemlnSTNkTXZxUFVoM3BYanh5cUx3TmZQTXZpUEFKRzI4bmp2QXRSZ2pNVCt2RTJLSTVaQTFEN0o1bHBWb1NvOE95NlBkZmV6ZElTZ2o3cEUwTlBhWWc5Y2xkNUMzT2h5RTdYOWhJenAiLCJtYWMiOiJlMTQ3YmI1MDE2YjBmYTFhNjY0NmM4NzBmNjJiNmFkNDcwNTE4MmNlNTQ4MjdmMTUxODRhNGMxN2I3NjNiNTU3IiwidGFnIjoiIn0%3D; laravel-session=eyJpdiI6ImNsYlZCVmxDOW1qR3d3S3MrdTlNZHc9PSIsInZhbHVlIjoiYzZONHlYYytOYjNQZ1VZaXBkUnlYL3pXUWlDVE5XRFpZek0xQmxuZGQ2MjdvdEhtT2NpSHFEd3FQTi8wV3dEQ3hIamlHdzNqZS9nRTBkeTZheVNENm5TS2pDNDdEam00NXhhbzB1VzZseWJaR2ZFTXBmaEtDTldTR00rWEpjemsiLCJtYWMiOiI2ZGMwNDlhMTUzMzI1MWU3ZDBmOTZiNzRlZDhhM2JmZmI4MmVjYmE5YzdlMjI5M2Y4MzRhOTIwYzc1NWRiZmZkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:41:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 28 Jan 2026 10:20:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12069\r\ndate: Sun, 01 Feb 2026 16:41:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":86112,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e8dc0f9a34e532bb0cc8f5a3cee23416","sha1":"c2c9d02bb176bfb55ba068f8340d53cdf6456a7d","sha256":"edaeb418e0545691810528e2a99da7c4f1ec760ee94df2d45e74160c22204c03","sha512":"f8a773887d6d26a1eeee66aa969768711898a2643e17d284e09d0391c3a79b91e93376a9c2e3759cf1590dd48e042f6a12ff105b0068a881e89d8acfad7cc4a2","ssdeep":"384:k2g+ukRJojAO3E+SphE1yb+H6tUenLwxU3VMxy/0LjHR+SZ/y/m/T/Hxrf5ZhUGf:PRJojAO3jGEP6tzVMjxrf5Zh12esQ","tlshash":"2d83323d6aa0003b7c53a1f5e698b95dfa1bb1d1df3e56aafc81121067e23f24c57a04","first_seen":"2026-02-01T01:41:33.940854Z","last_seen":"2026-02-01T16:41:52.584501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"kysmilecoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kysmilecoin.com/image/hawk.jpg","fqdn":"kysmilecoin.com","domain":"kysmilecoin.com","tld":"com"},"ip":{"addr":"118.27.146.13","port":443,"asn":135161,"as":"GMO-Z com NetDesign Holdings Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kysmilecoin.com/login","date":"2026-02-01T16:41:30.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.kysmilecoin.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:26:49 GMT","end":"Tue, 28 Apr 2026 10:26:48 GMT"},"fingerprint":{"sha1":"F9:1F:E3:45:15:73:75:4C:34:1A:64:CE:78:6A:15:F9:E9:27:68:60","sha256":"CB:CD:DD:BE:10:39:ED:FE:CA:56:10:88:DF:9C:8C:7C:F7:DF:8C:18:72:33:B3:D4:37:83:7C:0A:49:4F:32:88"}}},"request":{"raw":"GET /image/hawk.jpg HTTP/1.1\r\nHost: kysmilecoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kysmilecoin.com/login\r\nCookie: XSRF-TOKEN=eyJpdiI6IkpsTWNyNDNFRitmZTFJamNqR2ZvYWc9PSIsInZhbHVlIjoiT05HRk54TkNrZVZ2VGFQOVF3RC81WVdMemlnSTNkTXZxUFVoM3BYanh5cUx3TmZQTXZpUEFKRzI4bmp2QXRSZ2pNVCt2RTJLSTVaQTFEN0o1bHBWb1NvOE95NlBkZmV6ZElTZ2o3cEUwTlBhWWc5Y2xkNUMzT2h5RTdYOWhJenAiLCJtYWMiOiJlMTQ3YmI1MDE2YjBmYTFhNjY0NmM4NzBmNjJiNmFkNDcwNTE4MmNlNTQ4MjdmMTUxODRhNGMxN2I3NjNiNTU3IiwidGFnIjoiIn0%3D; laravel-session=eyJpdiI6ImNsYlZCVmxDOW1qR3d3S3MrdTlNZHc9PSIsInZhbHVlIjoiYzZONHlYYytOYjNQZ1VZaXBkUnlYL3pXUWlDVE5XRFpZek0xQmxuZGQ2MjdvdEhtT2NpSHFEd3FQTi8wV3dEQ3hIamlHdzNqZS9nRTBkeTZheVNENm5TS2pDNDdEam00NXhhbzB1VzZseWJaR2ZFTXBmaEtDTldTR00rWEpjemsiLCJtYWMiOiI2ZGMwNDlhMTUzMzI1MWU3ZDBmOTZiNzRlZDhhM2JmZmI4MmVjYmE5YzdlMjI5M2Y4MzRhOTIwYzc1NWRiZmZkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:41:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 31 Jan 2026 15:33:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24859\r\ndate: Sun, 01 Feb 2026 16:41:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24859,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x640, components 3","md5":"af69ff2632c9c4239e4d1597c28d2eb6","sha1":"2f21da79486086855d32c6e65636f195baecc4ae","sha256":"e2f6fc737c419eaebe1a74112888e1c34359fd75db754ea5eba0b70e09f29ca6","sha512":"4ac1e5b4650dc5dacf60f3dc6e4378a773c8fc53b99736949cd1c87967f781aee921fd7cd218c4d9b84b05acbd307a583f3b2082fbcf4c6814a01492d4d426b0","ssdeep":"384:ooLhNlLcH73Jg/i/SWJyjCR4v4yUH5Vgnh0gBH2E2jv9K4uSJ2yPo:flErSWJu/vnWVgnhFBebtUyQ","tlshash":"09b2d0b227304159fb90973adc27441483316f18685c1a87e5a78a92c8ddb7b8df0ee3","first_seen":"2026-02-01T01:41:33.930409Z","last_seen":"2026-02-01T16:41:52.582016Z","times_seen":2,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"kysmilecoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kysmilecoin.com/login","date":"2026-02-01T16:41:31.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kysmilecoin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 15:23:48 GMT\r\nexpires: Sun, 31 Jan 2027 15:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 91063\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-12T03:53:40.81769Z","times_seen":256914,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":54,"dns":1,"connect":7,"send":0,"wait":10,"receive":9,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kysmilecoin.com/login","date":"2026-02-01T16:41:31.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kysmilecoin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 15:23:48 GMT\r\nexpires: Sun, 31 Jan 2027 15:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 91063\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-12T03:53:40.81769Z","times_seen":256914,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":66,"dns":1,"connect":20,"send":0,"wait":8,"receive":6,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kysmilecoin.com/login","date":"2026-02-01T16:41:31.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kysmilecoin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 15:23:48 GMT\r\nexpires: Sun, 31 Jan 2027 15:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 91063\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-12T03:53:40.81769Z","times_seen":256914,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":67,"dns":0,"connect":22,"send":0,"wait":12,"receive":4,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kysmilecoin.com/image/hawk.jpg","fqdn":"kysmilecoin.com","domain":"kysmilecoin.com","tld":"com"},"ip":{"addr":"118.27.146.13","port":443,"asn":135161,"as":"GMO-Z com NetDesign Holdings Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kysmilecoin.com/login","date":"2026-02-01T16:41:31.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.kysmilecoin.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:26:49 GMT","end":"Tue, 28 Apr 2026 10:26:48 GMT"},"fingerprint":{"sha1":"F9:1F:E3:45:15:73:75:4C:34:1A:64:CE:78:6A:15:F9:E9:27:68:60","sha256":"CB:CD:DD:BE:10:39:ED:FE:CA:56:10:88:DF:9C:8C:7C:F7:DF:8C:18:72:33:B3:D4:37:83:7C:0A:49:4F:32:88"}}},"request":{"raw":"GET /image/hawk.jpg HTTP/1.1\r\nHost: kysmilecoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kysmilecoin.com/login\r\nCookie: XSRF-TOKEN=eyJpdiI6IkpsTWNyNDNFRitmZTFJamNqR2ZvYWc9PSIsInZhbHVlIjoiT05HRk54TkNrZVZ2VGFQOVF3RC81WVdMemlnSTNkTXZxUFVoM3BYanh5cUx3TmZQTXZpUEFKRzI4bmp2QXRSZ2pNVCt2RTJLSTVaQTFEN0o1bHBWb1NvOE95NlBkZmV6ZElTZ2o3cEUwTlBhWWc5Y2xkNUMzT2h5RTdYOWhJenAiLCJtYWMiOiJlMTQ3YmI1MDE2YjBmYTFhNjY0NmM4NzBmNjJiNmFkNDcwNTE4MmNlNTQ4MjdmMTUxODRhNGMxN2I3NjNiNTU3IiwidGFnIjoiIn0%3D; laravel-session=eyJpdiI6ImNsYlZCVmxDOW1qR3d3S3MrdTlNZHc9PSIsInZhbHVlIjoiYzZONHlYYytOYjNQZ1VZaXBkUnlYL3pXUWlDVE5XRFpZek0xQmxuZGQ2MjdvdEhtT2NpSHFEd3FQTi8wV3dEQ3hIamlHdzNqZS9nRTBkeTZheVNENm5TS2pDNDdEam00NXhhbzB1VzZseWJaR2ZFTXBmaEtDTldTR00rWEpjemsiLCJtYWMiOiI2ZGMwNDlhMTUzMzI1MWU3ZDBmOTZiNzRlZDhhM2JmZmI4MmVjYmE5YzdlMjI5M2Y4MzRhOTIwYzc1NWRiZmZkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:41:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 31 Jan 2026 15:33:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24859\r\ndate: Sun, 01 Feb 2026 16:41:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24859,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x640, components 3","md5":"af69ff2632c9c4239e4d1597c28d2eb6","sha1":"2f21da79486086855d32c6e65636f195baecc4ae","sha256":"e2f6fc737c419eaebe1a74112888e1c34359fd75db754ea5eba0b70e09f29ca6","sha512":"4ac1e5b4650dc5dacf60f3dc6e4378a773c8fc53b99736949cd1c87967f781aee921fd7cd218c4d9b84b05acbd307a583f3b2082fbcf4c6814a01492d4d426b0","ssdeep":"384:ooLhNlLcH73Jg/i/SWJyjCR4v4yUH5Vgnh0gBH2E2jv9K4uSJ2yPo:flErSWJu/vnWVgnhFBebtUyQ","tlshash":"09b2d0b227304159fb90973adc27441483316f18685c1a87e5a78a92c8ddb7b8df0ee3","first_seen":"2026-02-01T01:41:33.930409Z","last_seen":"2026-02-01T16:41:52.582016Z","times_seen":2,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"kysmilecoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/css?family=figtree:400,500,600\u0026display=swap","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kysmilecoin.com/login","date":"2026-02-01T16:41:30.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 02:01:50 GMT","end":"Sun, 19 Apr 2026 02:01:49 GMT"},"fingerprint":{"sha1":"AF:D0:3B:5F:AF:FF:6C:96:AD:F8:6B:3E:7D:E9:E1:85:05:FC:8D:65","sha256":"F6:DF:31:95:6F:E1:8F:D5:7B:34:46:9E:90:B9:CA:35:74:EE:F7:C9:5E:87:1E:41:AD:FA:D8:02:48:E7:A3:E5"}}},"request":{"raw":"GET /css?family=figtree:400,500,600\u0026display=swap HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kysmilecoin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 16:41:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 21 Jan 2026 15:29:15 GMT\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/21/2026 15:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b35d53462f3444c85784bf8807f0aaf3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7b238fa25f860aa62445dab10cdc59d2","sha1":"66074cb94c302104737c71123148ea9508d3bcfa","sha256":"9c26d9155c092f800c8378cca7f462bed26bd912342a2fbe5924e5245736cc79","sha512":"ab157d3f0d99e4eb66f2571569e90dda3f1c289735f0784eabe241feecf61fcbedda5cf1f5fc22054566effdd9fec51ed6af853f884d290f48996d11be76fffb","ssdeep":"","tlshash":"6c5111f14c9a308493871d6323c6bd075f1fa11a604566b5ae261cd84ef8d3ac393bae","first_seen":"2025-01-19T23:28:28.551734Z","last_seen":"2026-08-12T04:35:31.846055Z","times_seen":855,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":48,"dns":47,"connect":1,"send":0,"wait":5,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}