{"report_id":"c7c739b6-9ee5-4637-8a29-35010bb735c5","version":0,"status":"done","tags":[],"date":"2026-08-11T07:28:40Z","url":{"schema":"http","addr":"www.kgsefboi.sbs/","fqdn":"www.kgsefboi.sbs","domain":"kgsefboi.sbs","tld":"sbs"},"ip":{"addr":"107.148.233.99","port":0,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"www.kgsefboi.sbs/","fqdn":"www.kgsefboi.sbs","domain":"kgsefboi.sbs","tld":"sbs"},"title":"网站内容审核中","dom":{"size":8304,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"fa551c2af2e0a78f309c75fea9216443","sha1":"aecab988b82d91188a609d39986dd61b67239a5f","sha256":"26a32281cf74117ddc137e58298fdd1eca4624f455eb99d46f13dcf3d87e616a","sha512":"64561299504025128b0ba4f121c8c49a99b6241cbc2ee2e3505f0173bcd5d1332f314459f0b2d90947b38b91dab13ffce1dde96e54f1c10e41cdf258d0fed7ef","ssdeep":"192:TWFdzW6BBfUQHx05zI8yJTBKqRNG1BgYcHWRfvlFG:T8HBJNUg","tlshash":"9202a23d61f30aa95557a5f25bf7a32c7d21911bc68bcd043ade46448fc3e4688a33c8","dom_hash":"domhash1fff1feb635797649a1066df5a383cdd","first_seen":"2026-08-11T07:28:50.29705Z","last_seen":"2026-08-11T07:28:50.29705Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.kgsefboi.sbs/","fqdn":"www.kgsefboi.sbs","domain":"kgsefboi.sbs","tld":"sbs"},"ip":{"addr":"107.148.233.99","port":0,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-15T07:28:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"www.kgsefboi.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-09T22:45:53.985835Z","alert_count":0,"request_count":2,"received_data":211032,"sent_data":1157,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.kgsefboi.sbs","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-02-09","domain_rank":0,"first_seen":"2026-08-11T07:28:40.601459Z","last_seen":"2026-08-11T07:28:40.601459Z","alert_count":3,"request_count":3,"received_data":18426,"sent_data":1368,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-09T23:02:50.69879Z","alert_count":0,"request_count":1,"received_data":2934803,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"www.kgsefboi.sbs/","fqdn":"www.kgsefboi.sbs","domain":"kgsefboi.sbs","tld":"sbs"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2078afeb13f5591748ba9bf626e56396","sha1":"344c82edf16476c82996826d1c47dce880acc933","sha256":"f26bcfd90676960a2d396cf358a40a38829e0db52e3a75055fbf9105ef1bf178","sha512":"9e5f4ff791b129aeb2c8522e682b1db8089262ba3c784f10da42dd67c76fdbd05289280871922b57b8f98f3aebbe7ea0f2694588336fdb5f758281156134e53c","ssdeep":"","tlshash":"a8d02e1f2c542838236a087d20baea8cb062284c547ea50080eee8144aa4fd6083eb88","size":252,"data":"","first_seen":"2026-08-11T07:28:50.30253Z","last_seen":"2026-08-14T23:08:19.321606Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.kgsefboi.sbs/","fqdn":"www.kgsefboi.sbs","domain":"kgsefboi.sbs","tld":"sbs"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"30ab9b4e92fda37e9829e0a3012c6187","sha1":"57fefea86073132fd4309054c6fe019a71cac132","sha256":"ddfd2356238d3696b54112c2012eb5c2cc5ddacbd004159d98341ff7d73877f1","sha512":"36252b76763ba9aef219d6397ea370eb0f140eee46ad6bbfd5a0fcccb1c6da694e7f4752365e47f67b37ffdf964c08d21dc76f111302b91d52081cae04dcaf82","ssdeep":"","tlshash":"4551e03872a3091dde1b39ba4bdb5268352151231cdbde0a3d5c56448fc2f1595fabcc","size":2743,"data":"","first_seen":"2026-08-11T07:28:50.303452Z","last_seen":"2026-08-14T23:08:19.323001Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.kgsefboi.sbs/","fqdn":"www.kgsefboi.sbs","domain":"kgsefboi.sbs","tld":"sbs"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-11T07:28:11.634Z","timestamp":1786433291634,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.kgsefboi.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T05:40:44.671085Z","times_seen":18091266,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"www.kgsefboi.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.kgsefboi.sbs/","fqdn":"www.kgsefboi.sbs","domain":"kgsefboi.sbs","tld":"sbs"},"ip":{"addr":"107.148.233.99","port":80,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-11T07:28:12.756Z","timestamp":1786433292756,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.kgsefboi.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 11 Aug 2026 07:28:13 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nSet-Cookie: server_name_session=a2c9422d979e03b4b4003c454f1ef7c3; Max-Age=86400; httponly; path=/\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8219,"size_decoded":3109,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9c572bbedf10a4d27f8ceb499b7fe0c3","sha1":"3f7f9c021b592c5d35cf762a8f6a5addce6249ca","sha256":"a71221202e0b75e786a135692f9e895ed1e667b3e0f3b794027994f8d4482642","sha512":"159dfec9e6027193b2e9d04fdef02514a9716f420e1679dda6b214e09a170dfde3216b6c5418de092539b9022525490195763270802144fbea287c4cfe2b7d5c","ssdeep":"192:fWFdzW6BBfUQHx05zI8yJ/BKqJdPG1BgYcHWRfvlFe:f8zBbPUg","tlshash":"b202813d21f30aa95557a5f21be7932c7d22921bc69bcd043a8e46448fc3e4688a33d8","first_seen":"2026-08-11T07:28:50.298618Z","last_seen":"2026-08-11T07:28:50.298618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":4,"connect":161,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"www.kgsefboi.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/tailwindcss@2.2.19/dist/tailwind.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.kgsefboi.sbs/","date":"2026-08-11T07:28:13.383Z","timestamp":1786433293383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/tailwindcss@2.2.19/dist/tailwind.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.kgsefboi.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.2.19\r\nx-jsd-version-type: version\r\netag: W/\"2cc503-cyTPK4s7rX9aC3Y3NNaHIxjV1fQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 11 Aug 2026 07:28:13 GMT\r\nage: 1241521\r\nx-served-by: cache-fra-eddf8230229-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 255702\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2934019,"size_decoded":256486,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fd1515a3d70a9d3d1efe23553fb559ab","sha1":"56977de783ee69a0dbd14635c5a34fa3946b2252","sha256":"9209ca41f0f277ebe6b6e87354dc667081a638b83945f4531807bf06046227c7","sha512":"d3f9747c4e662b5dc6bf2e4e88b68425f82c89cc01c4a088574bcae8fa6c9896052b26355c2a1d93f4b6e8a5a4e589378f004c8d33299a0a53e0e5e63731c78b","ssdeep":"24576:TNmEvSBlsi1KhVzbweQgx+oaiM8eMkEcnxnF/DlZKmTKvxg4hahhDAeYYL24qC0s:TNmEvSBlsi1KhV6xnF/DlZKmTKvxg4hc","tlshash":"31255f3cabb1253baca7a1e9e145fdacd50762d8ed3005e7bc9221019be13f7c947264","first_seen":"2025-07-26T19:06:20.805876Z","last_seen":"2026-08-24T21:05:41.968166Z","times_seen":4641,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":5,"connect":10,"send":0,"wait":11,"receive":30,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.kgsefboi.sbs/","date":"2026-08-11T07:28:13.386Z","timestamp":1786433293386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.kgsefboi.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 07:28:13 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 14850\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 22 Nov 2021 21:02:51 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vw6J%2BTtR61zxbJexYydx2fwJNBiysZZcT5rPzF8uTdmSwGR%2BccODd%2FG5kuUdl6hCYfP%2FOocmgnswmwGIOKkdH2qpc8aC0IbOp%2FC7Ha4iTLtCowdQJSrF59BD6y68KW49gvRPCnpD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a29585b3ca933181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83981,"size_decoded":15845,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65311)","md5":"3d5ef2bf867c4054a2f336cdbad9e1dc","sha1":"07228d1fa3245ee156a27a353f45758a3207849f","sha256":"a361e7885c36bacb3fd9cb068da207c3b9329962cac022d06e28923939f575e8","sha512":"168deb96b663fe4eee8d39c78380864760fb912b34bf82cb6a7c36aa4b18b91944ccefad71a10f428810d0a6a818ddbaff3ae7db42264750dfb8b5a73a8eda04","ssdeep":"1536:YlMVM6MVM9MVMKMVMRsVMNdhwJHQ9Kll3ITRUHrt+z:sdhgw9kITRULt+z","tlshash":"458376e8e44c05d56732c44baf55b378a1b6f73cd5810da9f02f590c29d26a822c6f7a","first_seen":"2023-04-09T08:23:50Z","last_seen":"2026-08-25T05:28:22.606694Z","times_seen":21761,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":5,"connect":11,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://www.kgsefboi.sbs/","date":"2026-08-11T07:28:13.760Z","timestamp":1786433293760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://www.kgsefboi.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 07:28:13 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 125064\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Mon, 22 Nov 2021 21:02:51 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1VlW2i2FDFeNAdtOO5i6SDWoi5AUA85Ok501vtLbU3j2CrnCkw8ADs%2BfwCq1g2Sv18HCSKKvsz%2Bh5DfmbAi%2Fwje7ZUOqBzRIbjF26%2B1SL8oOh9f%2BvqC6GULQGJRn6%2Fckbaq6daBL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nserver: cloudflare\r\ncf-ray: a29585b60af1b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125064,"size_decoded":126056,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 125064, version 768.67","md5":"57b380d27f14f16e737bcca7e849cf79","sha1":"2e4280929d4d76fc0e31601c98f167f14630c209","sha256":"94e1bbc1c2a41ebc73fa5253fd563256c0035b4d69181e48f9aef9e474a11251","sha512":"88dd2321cc4711333411a24dab612daa68caf7cc31c892405bcbb9e89629ca15fcdd781bb26d7485f5819b5b48170ec8eaa2135701f4695cf94a1cb0c15bf649","ssdeep":"3072:W0ZXsLdN0s2s3suUQwuHn6XEedsYoDAEMUdAgofJ:W0OdNj10uHwsYoMHPg+J","tlshash":"b0c3122be28d689365654613aedd23ae1e795b7d8c4b6315c1bb3046f7ac7b83003b13","first_seen":"2023-04-09T08:23:50Z","last_seen":"2026-08-25T05:26:36.115701Z","times_seen":15406,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":9,"send":0,"wait":47,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.kgsefboi.sbs/favicon.ico","fqdn":"www.kgsefboi.sbs","domain":"kgsefboi.sbs","tld":"sbs"},"ip":{"addr":"107.148.233.99","port":80,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.kgsefboi.sbs/","date":"2026-08-11T07:28:13.835Z","timestamp":1786433293835,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.kgsefboi.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.kgsefboi.sbs/\r\nCookie: server_name_session=a2c9422d979e03b4b4003c454f1ef7c3\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 11 Aug 2026 07:28:13 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 9662\r\nLast-Modified: Fri, 10 Apr 2026 15:48:28 GMT\r\nConnection: keep-alive\r\nETag: \"69d91bcc-25be\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9662,"size_decoded":9898,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"d2265cff3f32ebf5c319c268012a2e34","sha1":"a06d897d531675b1c1cd17f5577e9a1303a7cfa7","sha256":"b8e52075963acec351ebaf64501223405c788489ddb4e2bd86bfa70937d6fd9d","sha512":"88d26d4ee03f103bdae566bd7a496a5138f1db7b8801468f3aceef249075b52c228f33a141929a3b07f2848212bb3044e1e20f074d8f428a95896248dbf85b0b","ssdeep":"96:9Mdu8k+HGB+czC+QL8/LuWaPWn5zmfGMsh:uueHGcYCT4paPk5zmfGHh","tlshash":"db1220fbc55cc62fcd650234a5ea82cd137d8c87a7a19869c78b71cb0a7fe2053d1166","first_seen":"2025-09-29T17:26:25.929897Z","last_seen":"2026-08-14T23:08:19.316012Z","times_seen":23,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"www.kgsefboi.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}