{"report_id":"cac4b153-e28e-415f-9d18-5e6f7b9fbdfb","version":6,"status":"done","tags":[],"date":"2026-03-27T20:37:36Z","url":{"schema":"https","addr":"dotkbuff.com/","fqdn":"dotkbuff.com","domain":"dotkbuff.com","tld":"com"},"ip":{"addr":"104.21.73.129","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dotkbuff.com/","fqdn":"dotkbuff.com","domain":"dotkbuff.com","tld":"com"},"title":"Удобный автоматизированный сервис для анализа персонажей, статистики и обучения в компьютерных играх","dom":{"size":17040,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f0214c146191e03bff49b5b21e01f5cf","sha1":"ee778d7b0056580ac3e845696d1d5369487b4d0e","sha256":"f5505e4c7f7c2a8f66accf7e21ce3b7871b16c5396ceb0dea8e265a25a74a900","sha512":"4c6517a5aeb0e28ab03083ba744551a947ddd3cdedd37bd01b52cc9b4d7d9ce07da64690c1f0862e105ed079245df3b1d916ff33b591d3e3d0244829a2c3cdf4","ssdeep":"192:TcfvyrupJkdCrwY2fwILugw8Ene/MYQaclHbIcfVk7seqETjYjipGTrupJkd3:ewzwYQhxIcap5YepGV","tlshash":"d9728b5154f828ab0103b097d9256b0a7dea40bfab26631235bc6d7f7ff2c05d52ba0d","dom_hash":"domhashe173b19012d97213b6def0837d7976b5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dotkbuff.com/","fqdn":"dotkbuff.com","domain":"dotkbuff.com","tld":"com"},"ip":{"addr":"104.21.73.129","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-01T20:37:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"dotkbuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dotkbuff.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-16","domain_rank":0,"first_seen":"2026-03-27T19:27:08.66504Z","last_seen":"2026-03-27T19:27:08.66504Z","alert_count":13,"request_count":13,"received_data":2756015,"sent_data":5762,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AOS:2.3.1","description":"JavaScript library to animate elements on your page as you scroll.","website":"https://michalsnik.github.io/aos/","common_platform_enumeration":"","icon":"AOS.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":9108,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-03-22T23:53:46.752956Z","alert_count":0,"request_count":2,"received_data":41981,"sent_data":847,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":2,"received_data":127706,"sent_data":1467,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dotkbuff.com/js/aos-initilization.js","fqdn":"dotkbuff.com","domain":"dotkbuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c4b15dbbc0f214349697bdd9b34f435","sha1":"0a95651d490a06a4d39e516050e0c66e0506ef30","sha256":"eea3e0704c57a45f077e054460b75b021e1aaec5a4f93ebdf47db958ccfa4379","sha512":"dd710f416e7a15aa61a3c5ef51c260dd24cb9e3e733f946d15141147ea2a2db69b134c6062c60a3ae6bd136e2c044e4217639d8546924158de8d5b3b29c2715d","ssdeep":"","tlshash":"3dd052921e96a29aec3ac00102e00a0bc330235f8018846bbb310b882f37402e9c26d9","size":231,"data":"","first_seen":"2025-04-18T14:37:21.885425Z","last_seen":"2026-04-25T00:15:50.217814Z","times_seen":1557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dotkbuff.com/js/modal.js","fqdn":"dotkbuff.com","domain":"dotkbuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a0f31f82c5892d1ddb9948815a1fb5f","sha1":"afab3d2d109b590409f193a2f7a5b75d3ee82014","sha256":"c8b4037a323a7833637a58792ac5805fd54c72687e5962e7397b12a3b4cab749","sha512":"88eab0463b3d50f6ae59172d6383ed76563705991b72add9436f693a14fec3ab41b4684f4f9d19bcee4b9d5cc72d7ee6e3dee136ab5f5b924b3416bd9d3e308b","ssdeep":"","tlshash":"980194e5d4741f31450697c3f4a2667cac9504e86484ac7ea2384ed10d507b7f4d32cf","size":673,"data":"","first_seen":"2026-03-10T19:49:32.014072Z","last_seen":"2026-03-27T23:45:10.302083Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","size":14239,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-04-25T00:33:49.026086Z","times_seen":17200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"dotkbuff.com/css/style.css","fqdn":"dotkbuff.com","domain":"dotkbuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dotkbuff.com/","date":"2026-03-27T20:37:14.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotkbuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:02:44 GMT","end":"Tue, 09 Jun 2026 07:01:06 GMT"},"fingerprint":{"sha1":"EF:52:B7:5F:4C:F3:DA:5C:D2:CF:8D:45:10:2E:2D:6E:70:B9:77:6B","sha256":"16:53:22:67:85:4B:94:46:44:EC:9C:E4:F1:74:3B:03:6E:42:1F:E2:74:05:38:59:86:44:D9:DE:6B:60:EA:09"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: dotkbuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotkbuff.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 20:37:14 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Jul 2025 21:52:08 GMT\r\npriority: u=2,i=?0\r\netag: W/\"68781f08-45e9\"\r\nexpires: Sat, 28 Mar 2026 19:26:46 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 4227\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oofEGbtQL%2BMwgP1Q2GnybutVXgzDr%2FiZ7xrbebPoOJccQ3nqSk%2Ft6u8RPDEliXwKnKHvYc8jPBhgpQBGg96N92PtY9cRUHd3W18y3VvuP2EYRwBfHASCKGnQulgpRBE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31311af806120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17897,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"390771db61b32ae80ca38c236577efb7","sha1":"4182b7ac276615b627eef615d4b6904b616a6937","sha256":"026be5a92456d3a2adbc5c9e7264aa8b28a8ac057aa4b2b2b522bf7a909c7c70","sha512":"107bf92bab21e0bc5d7e5972c2b57acce69bc0cfe222781436530edbc3ea1c273ad102ee5d13c25614af415401a506e42cfd5e8af7ac312217ace24251fdc7c9","ssdeep":"192:m1xv6sKP+1sKPf1lsKPHrEI7P20wLLyWZZYsPKSVgLlK+yF:Qv11lo8yyxsPKSVrF","tlshash":"e182dc6366a652007417cc9537cb5b6a63788423844eeafc3eff650c8fda5d5829238f","first_seen":"2026-02-18T18:40:52.632997Z","last_seen":"2026-03-27T23:45:10.30123Z","times_seen":27,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"dotkbuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotkbuff.com/img/reviews/avatar-1.png","fqdn":"dotkbuff.com","domain":"dotkbuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotkbuff.com/","date":"2026-03-27T20:37:14.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotkbuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:02:44 GMT","end":"Tue, 09 Jun 2026 07:01:06 GMT"},"fingerprint":{"sha1":"EF:52:B7:5F:4C:F3:DA:5C:D2:CF:8D:45:10:2E:2D:6E:70:B9:77:6B","sha256":"16:53:22:67:85:4B:94:46:44:EC:9C:E4:F1:74:3B:03:6E:42:1F:E2:74:05:38:59:86:44:D9:DE:6B:60:EA:09"}}},"request":{"raw":"GET /img/reviews/avatar-1.png HTTP/1.1\r\nHost: dotkbuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotkbuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 20:37:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 16834\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Jul 2025 21:52:08 GMT\r\npriority: u=4,i=?0\r\netag: \"68781f08-41c2\"\r\nexpires: Sat, 28 Mar 2026 19:26:46 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 4227\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lq%2FA25sgcwTicImm50yXAjpKnOt5FEbrRL6L1S7U8RJMo%2BTVjxkJs0ITJcc7BNrsSXyTFFO2jF01MBPrYklff1SetPrIvhs%2FURDkWmarRsi3Q%2Fmgf4SCHQPEq77aAl8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31311b0840120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16834,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 240x240, components 3","md5":"7a0dd987510a5af94f85542eebd98af6","sha1":"3bd3a61262f18367fd544d4a15d67e864d39fca9","sha256":"0620e3a84b951cbbfdc365c11a67052a2b40cc659cddb7f2a8c564ac07db140e","sha512":"993097b87ba1e218572935936d02d71c762a7a84a79e9320910451ef205c181a2d0565a93ca509867a6d1bc6211772a407437950cb77db1656b921eda10d03fc","ssdeep":"384:8DR0598dfoXy0IznS2v76V/9hI8tTa1DgfL5yTD4Xp:8DRi98dfoXy0p2v7AhbtTejTDCp","tlshash":"2672c0723343942bfa2fbd3725b2c1236710e3a9d2289d6b36e6a2149539a601c4f6d4","first_seen":"2026-02-18T18:40:52.636987Z","last_seen":"2026-03-27T23:45:10.296001Z","times_seen":27,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"dotkbuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotkbuff.com/img/reviews/avatar-2.png","fqdn":"dotkbuff.com","domain":"dotkbuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotkbuff.com/","date":"2026-03-27T20:37:14.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotkbuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:02:44 GMT","end":"Tue, 09 Jun 2026 07:01:06 GMT"},"fingerprint":{"sha1":"EF:52:B7:5F:4C:F3:DA:5C:D2:CF:8D:45:10:2E:2D:6E:70:B9:77:6B","sha256":"16:53:22:67:85:4B:94:46:44:EC:9C:E4:F1:74:3B:03:6E:42:1F:E2:74:05:38:59:86:44:D9:DE:6B:60:EA:09"}}},"request":{"raw":"GET /img/reviews/avatar-2.png HTTP/1.1\r\nHost: dotkbuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotkbuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 20:37:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 66937\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Jul 2025 21:52:08 GMT\r\npriority: u=4,i=?0\r\netag: \"68781f08-10579\"\r\nexpires: Sat, 28 Mar 2026 19:26:46 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 4227\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eo31TpOtR2t7OOsViiYgouhj8owUYbggHBioTCGW2Supap6WI4smZri5KvNn%2F25e1MTtVDjdzCKJEt8yNob3XR4Gb37Fw8HpLTXERdZBNWsXQ%2F3HGBIc6Yj%2FaYsapO8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31311b0841120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66937,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 640x640, components 3","md5":"c412b5f1d23bc12ae35d0c53f77cf8cf","sha1":"5352ad4e32aab73590fe9cf87fa65f7c1e4a0bb0","sha256":"b2e900b2aa9e551e50147cf5eff1d0c4a583ffde5a6b0b563073305a15290588","sha512":"2eff919206b1e5a410fe26ccd537b13c3636b947ec363baf19aa9f74410b47060da969f5a44202c32101b06d76be562133261889d4cb66aa59982f0c82376c9b","ssdeep":"1536:7geA4K7VgRdbmMIsCFFf5cyVRVokD9Iu1ERE89cyjXj4:7gl4K7YZoDRVog+IEe89cyjXM","tlshash":"906302b7b3965143fa27e734c906a1a534e4bcf62f9b14e9dba22640bca5cc19353c11","first_seen":"2026-02-18T18:40:52.638532Z","last_seen":"2026-03-27T23:45:10.299653Z","times_seen":27,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"dotkbuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotkbuff.com/img/reviews/avatar-3.png","fqdn":"dotkbuff.com","domain":"dotkbuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotkbuff.com/","date":"2026-03-27T20:37:14.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotkbuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:02:44 GMT","end":"Tue, 09 Jun 2026 07:01:06 GMT"},"fingerprint":{"sha1":"EF:52:B7:5F:4C:F3:DA:5C:D2:CF:8D:45:10:2E:2D:6E:70:B9:77:6B","sha256":"16:53:22:67:85:4B:94:46:44:EC:9C:E4:F1:74:3B:03:6E:42:1F:E2:74:05:38:59:86:44:D9:DE:6B:60:EA:09"}}},"request":{"raw":"GET /img/reviews/avatar-3.png HTTP/1.1\r\nHost: dotkbuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotkbuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 20:37:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 50307\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Jul 2025 21:52:08 GMT\r\npriority: u=4,i=?0\r\netag: \"68781f08-c483\"\r\nexpires: Sat, 28 Mar 2026 19:26:46 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 4227\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2F65TWo52gj2CaFKZgEY2ff7NCecVEz1E84cvtdQkTPaGnJ8FDcletPJigwS5ygm8lScYQYL7fRq3SQeHcFtSDUuvLAFALECwAdIIsowSEsJ2H3VYWZoZ1TfJ02sOoI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31311b0843120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50307,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 736x736, components 3","md5":"c8b019724cfdc404f478b688edfddb94","sha1":"a78951af02bc82812f04103943f29f9094c32714","sha256":"1968c9264b098d57789df367fa12492cdc2c74f6902d442855bf298248a65d05","sha512":"775c7efe1edc9684714b0ab4de12f3bf998cbfe209069ace71924fd1229682c55ec4b6e78da5d43b43f14abeb2bd4477cbb39fa1edc3ac03b1b94024f1d2d088","ssdeep":"1536:ZlZ0hZJgds7Tzjz563EjSod4QlwiBKR/Y:qJesnd6WSZCjC/Y","tlshash":"4533f14f369cc616db04427488cd6830b957ed4869e4b3bb78741fc4ee6e29e81dc15b","first_seen":"2026-02-18T18:40:52.619506Z","last_seen":"2026-03-27T23:45:10.308274Z","times_seen":27,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"dotkbuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Roboto+Flex:opsz,wght@8..144,100..1000\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dotkbuff.com/","date":"2026-03-27T20:37:14.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Roboto+Flex:opsz,wght@8..144,100..1000\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotkbuff.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 27 Mar 2026 20:37:14 GMT\r\ndate: Fri, 27 Mar 2026 20:37:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8422,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"875470e0fc6f1e546c5f0a9aa08c22ef","sha1":"1d7d950ee56c73ea6013c5e38286d527304c2a14","sha256":"259331f7112775651ff4e838aa47d86dbc75be882e14f68978097f35ee9c40b7","sha512":"ec10f41244490e5ffec94574bdb9921e1d450e1dee44cf3166dcea4eeead8ea233bf6bb72965e9e4f65970777d5a1f752952e1c5b63d613f55c4e0e31b82232e","ssdeep":"192:vywfydyGy63gy/yFVyR73xpmj3U8fHFNHALNHwNHI3QNHxNHK5NH+:vtfcHjg8ciIbgxemeHUe","tlshash":"a002efe2146f9144bb831cd267cf7e32ad8e61126092d0796bfd1dd99cebd22026478d","first_seen":"2025-10-01T16:33:31.039205Z","last_seen":"2026-04-25T00:15:50.220853Z","times_seen":1539,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":151,"dns":1,"connect":21,"send":0,"wait":34,"receive":0,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dotkbuff.com/favicon.ico","fqdn":"dotkbuff.com","domain":"dotkbuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotkbuff.com/","date":"2026-03-27T20:37:14.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotkbuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:02:44 GMT","end":"Tue, 09 Jun 2026 07:01:06 GMT"},"fingerprint":{"sha1":"EF:52:B7:5F:4C:F3:DA:5C:D2:CF:8D:45:10:2E:2D:6E:70:B9:77:6B","sha256":"16:53:22:67:85:4B:94:46:44:EC:9C:E4:F1:74:3B:03:6E:42:1F:E2:74:05:38:59:86:44:D9:DE:6B:60:EA:09"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dotkbuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotkbuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 20:37:14 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 16 Jul 2025 21:52:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 4227\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wtPJwgyVJpAHQzGKZmQhcHqH9R0oJgzXswfokoRvVHNx7h8Pq0Fkc2oUzDCRSRjchFse58ubIHTu5g1L9D%2Fcn%2BHThSbrou5pVR7jjNAf%2FfelmktM9D4VOZXuXwuewrA%3D\"}]}\r\netag: W/\"2cbe-63a12e78097d1\"\r\ncontent-encoding: br\r\ncf-ray: 9e31311e5ad2120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11454,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 96x96, 8 bits/pixel","md5":"d714b9c2229b4d3567867cc9ea9d258e","sha1":"f7c94573d36a9e19b0076e503cbc1c538b25f62c","sha256":"1738b0db6601b0b1a9030606e721f2cdea8a8f73b4e015a6a8f424d9a62f78cd","sha512":"166480ff245f56b6b1075be274fed6ab3cc38ee8043ec49f59c5e033a3e6673ae85b47d12982255d9966c5ca11093bf64b5b85ee08dff74e33df23054897e789","ssdeep":"24:tQ7uQREw3/ZfXgtKF6aUFuFgFayF6F9wFYFQmaFKFAFNFeoFKwF4wFhFKFXFXFoI:+7ulaZ5M","tlshash":"6a324ffb8f0c5469cb9c63f9141e35c40364825619d6907bc9d500cddc9abec3466f95","first_seen":"2026-02-18T18:40:52.624586Z","last_seen":"2026-03-27T23:45:10.296967Z","times_seen":27,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"dotkbuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotkbuff.com/","fqdn":"dotkbuff.com","domain":"dotkbuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-27T20:37:13.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotkbuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:02:44 GMT","end":"Tue, 09 Jun 2026 07:01:06 GMT"},"fingerprint":{"sha1":"EF:52:B7:5F:4C:F3:DA:5C:D2:CF:8D:45:10:2E:2D:6E:70:B9:77:6B","sha256":"16:53:22:67:85:4B:94:46:44:EC:9C:E4:F1:74:3B:03:6E:42:1F:E2:74:05:38:59:86:44:D9:DE:6B:60:EA:09"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dotkbuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 20:37:13 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gv8Y%2Fx750iq11zl02afdoiQVYruEwmFzWIZo%2B4vV8c8eRiXa8UbCNM1aAb%2F37U2N3Q9dyYc6QfJ2%2F9OiTls8YtqKeAnCbCVaYRDUjN5sjVqVgphkTqrIS8a7%2B6nwmog%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e313118ee9b5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AOS:2.3.1","description":"JavaScript library to animate elements on your page as you scroll.","website":"https://michalsnik.github.io/aos/","common_platform_enumeration":"","icon":"AOS.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":17463,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"0e2963ebade437c5f953af633eb5f645","sha1":"53202bf73e35bdd36334502195b1a35b5619537f","sha256":"535776fa6f38135f9fe66ba2d7100721e98903a0f6a9844a194d489e6f0d3950","sha512":"466f7e11e5cbb0b807e67ab30088fe00b21d162727e680006bf96a9aecbe555386790e760af4468b7f0d4d2c89edc4a94d0f4e54d49287830c3120890bc2966c","ssdeep":"192:hilrWBsGCOCbw9riwKbgiJ7hz/wVlG3cKSxIvrVkX0IYzvgvC42tBsGCOq:wwgwrc6GsIv23H642a","tlshash":"38729c5064d468ab0133f08bd925ab49fda540bbab12631335bc7e6f7ff2c14d52b609","first_seen":"2026-03-10T19:49:32.01323Z","last_seen":"2026-03-27T23:45:10.306666Z","times_seen":25,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":81,"dns":70,"connect":1,"send":0,"wait":192,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"dotkbuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotkbuff.com/js/modal.js","fqdn":"dotkbuff.com","domain":"dotkbuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dotkbuff.com/","date":"2026-03-27T20:37:14.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotkbuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:02:44 GMT","end":"Tue, 09 Jun 2026 07:01:06 GMT"},"fingerprint":{"sha1":"EF:52:B7:5F:4C:F3:DA:5C:D2:CF:8D:45:10:2E:2D:6E:70:B9:77:6B","sha256":"16:53:22:67:85:4B:94:46:44:EC:9C:E4:F1:74:3B:03:6E:42:1F:E2:74:05:38:59:86:44:D9:DE:6B:60:EA:09"}}},"request":{"raw":"GET /js/modal.js HTTP/1.1\r\nHost: dotkbuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotkbuff.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 20:37:14 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Jul 2025 21:52:08 GMT\r\npriority: u=3,i=?0\r\netag: W/\"68781f08-2a1\"\r\nexpires: Sat, 28 Mar 2026 19:26:46 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 4227\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kcC6gtb%2Fp%2F7A%2FlBAk%2FkvWFXxrxw0s88CITatjnbC%2FpcWwlqNQgOsS%2Fo6KEuUdAiBXksR%2FfAj%2FUuB%2BTyHSk6c%2BJ7lIe2OtSQtIJ4e5B7Gu9aGPDaDQlSzigj6cc6QjPQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31311af831120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":673,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (351), with CRLF line terminators","md5":"8a0f31f82c5892d1ddb9948815a1fb5f","sha1":"afab3d2d109b590409f193a2f7a5b75d3ee82014","sha256":"c8b4037a323a7833637a58792ac5805fd54c72687e5962e7397b12a3b4cab749","sha512":"88eab0463b3d50f6ae59172d6383ed76563705991b72add9436f693a14fec3ab41b4684f4f9d19bcee4b9d5cc72d7ee6e3dee136ab5f5b924b3416bd9d3e308b","ssdeep":"","tlshash":"980194e5d4741f31450697c3f4a2667cac9504e86484ac7ea2384ed10d507b7f4d32cf","first_seen":"2026-03-10T19:49:32.014072Z","last_seen":"2026-03-27T23:45:10.302083Z","times_seen":25,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"dotkbuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotkbuff.com/img/info/background-2.png","fqdn":"dotkbuff.com","domain":"dotkbuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotkbuff.com/","date":"2026-03-27T20:37:14.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotkbuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:02:44 GMT","end":"Tue, 09 Jun 2026 07:01:06 GMT"},"fingerprint":{"sha1":"EF:52:B7:5F:4C:F3:DA:5C:D2:CF:8D:45:10:2E:2D:6E:70:B9:77:6B","sha256":"16:53:22:67:85:4B:94:46:44:EC:9C:E4:F1:74:3B:03:6E:42:1F:E2:74:05:38:59:86:44:D9:DE:6B:60:EA:09"}}},"request":{"raw":"GET /img/info/background-2.png HTTP/1.1\r\nHost: dotkbuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotkbuff.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 20:37:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 286918\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Jul 2025 21:52:08 GMT\r\npriority: u=4,i=?0\r\netag: \"68781f08-460c6\"\r\nexpires: Sat, 28 Mar 2026 19:26:46 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 4227\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rD7ZB8fSlpOuKme32HZtf3i3dHuRbSYLteCunLMYS0Crg10xb2lAWi7whg5jdQoYJJYNOx627Kp37xQEte%2FQuzT0OFsfAd%2BOb9kFQTzZ47c7zXNf4kDRwUud4%2FNSsts%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31311cddd9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":286918,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 440 x 540, 8-bit/color RGBA, non-interlaced","md5":"704c1ab49fc1e2e47389af27e52c35ea","sha1":"4a090d28270348e467a229da46a275110f0949f9","sha256":"7668ceaeab33afda09b03f4d18be1047c2b8b02b6144b205e50643caabfff31b","sha512":"2b7f12262bf7e82b9895f311fa785b34a7254d3198a6194ce6a0c4c805da9916d30eb0f2b2f057149e938899484eee96368ec96e5117547620c358e27fc6b5f8","ssdeep":"6144:fSsFC/7TIWYXvwSN+niQeVrubJbi0zigLQS7xIENE7jQaiIU:fSsFC/7T/YX4SN+iQB5isD0AXwC","tlshash":"ff542380a71e1c715a87d456a38b760e8dae86e94ee6c8c078dad40c223cdde61c57fd","first_seen":"2026-02-18T18:40:52.641726Z","last_seen":"2026-03-27T23:45:10.309849Z","times_seen":27,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"dotkbuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotkbuff.com/img/info/background-3.png","fqdn":"dotkbuff.com","domain":"dotkbuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotkbuff.com/","date":"2026-03-27T20:37:14.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotkbuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:02:44 GMT","end":"Tue, 09 Jun 2026 07:01:06 GMT"},"fingerprint":{"sha1":"EF:52:B7:5F:4C:F3:DA:5C:D2:CF:8D:45:10:2E:2D:6E:70:B9:77:6B","sha256":"16:53:22:67:85:4B:94:46:44:EC:9C:E4:F1:74:3B:03:6E:42:1F:E2:74:05:38:59:86:44:D9:DE:6B:60:EA:09"}}},"request":{"raw":"GET /img/info/background-3.png HTTP/1.1\r\nHost: dotkbuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotkbuff.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 20:37:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 319804\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Jul 2025 21:52:08 GMT\r\npriority: u=4,i=?0\r\netag: \"68781f08-4e13c\"\r\nexpires: Sat, 28 Mar 2026 19:26:46 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 4227\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vAgHusjskXBvtYPGHh03ASDnTADXrokeJhIyUWSNKwQH1%2BJFJxZLgX%2FNrfz9b9Od%2FUl6e5UmYLYHrWzQBOAJDm8Bi0bfXWIKfxU74fLYTxUA0ZFnjgtRkHWn1%2FU3k3U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31311cedea120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319804,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 439 x 540, 8-bit/color RGBA, non-interlaced","md5":"c3050c2218cf3012e0df55d6e588b442","sha1":"ee17a90831035aaf6af5c5846b63a7aed3ecc9e4","sha256":"ad9091e7ad3e00180a591bf6aee59cbafaf772310e627e3d4e594e6fa5323299","sha512":"4cec0baba00feef2c387f296d8aef825c166a95f05dccc20e2f884e1ab95a0ea543c9b1dae46f4176fe2c31b50f63e3a846a1c45a745ca6cb2faabb7eb54c793","ssdeep":"6144:5T0lffYT2INQ7Y3iwKtyd2wXbvKPx3PD4H+3MHj6SabUwM9f7WuC:QHYzNSYSt7wXbSPxYPmS5l7nC","tlshash":"a864235ce1301fbdda402deacb143e0f06f3a6186a7ac90852b4771e53dd51e6f6ac19","first_seen":"2026-02-18T18:40:52.630121Z","last_seen":"2026-03-27T23:45:10.310586Z","times_seen":27,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"dotkbuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dotkbuff.com/","date":"2026-03-27T20:37:14.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /aos@2.3.1/dist/aos.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotkbuff.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 20:37:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9e31311b2efdb28a-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KGVB6NBDMQ2RETKW4JBY27SJ-arn\r\naccess-control-allow-origin: *\r\nage: 26701\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 27 Mar 2027 20:37:14 GMT\r\nlast-modified: Sat, 07 Feb 2026 06:04:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8mhhK6WerRskNTu3fWZ4O8xDWv8cIr5fk8QLrDhplo4=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14239,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-04-25T00:33:49.026086Z","times_seen":17200,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":21,"dns":3,"connect":4,"send":0,"wait":14,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dotkbuff.com/js/aos-initilization.js","fqdn":"dotkbuff.com","domain":"dotkbuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dotkbuff.com/","date":"2026-03-27T20:37:14.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotkbuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:02:44 GMT","end":"Tue, 09 Jun 2026 07:01:06 GMT"},"fingerprint":{"sha1":"EF:52:B7:5F:4C:F3:DA:5C:D2:CF:8D:45:10:2E:2D:6E:70:B9:77:6B","sha256":"16:53:22:67:85:4B:94:46:44:EC:9C:E4:F1:74:3B:03:6E:42:1F:E2:74:05:38:59:86:44:D9:DE:6B:60:EA:09"}}},"request":{"raw":"GET /js/aos-initilization.js HTTP/1.1\r\nHost: dotkbuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotkbuff.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 20:37:14 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Jul 2025 21:52:08 GMT\r\npriority: u=3,i=?0\r\netag: W/\"68781f08-e7\"\r\nexpires: Sat, 28 Mar 2026 19:26:46 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 4227\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jYkbS7aXs2B4ydkc3%2BxFZGNwTsSeM2QO6mVXw8eTPDGU1DifXYR1m5yY5Ps%2FlFU%2B%2FdEArZNurvBH%2FYdbUGrbavPrt4361adcvnCJZgeWkTqtUGnI9ZMJKYlp84eDaWU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31311af82e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"3c4b15dbbc0f214349697bdd9b34f435","sha1":"0a95651d490a06a4d39e516050e0c66e0506ef30","sha256":"eea3e0704c57a45f077e054460b75b021e1aaec5a4f93ebdf47db958ccfa4379","sha512":"dd710f416e7a15aa61a3c5ef51c260dd24cb9e3e733f946d15141147ea2a2db69b134c6062c60a3ae6bd136e2c044e4217639d8546924158de8d5b3b29c2715d","ssdeep":"","tlshash":"3dd052921e96a29aec3ac00102e00a0bc330235f8018846bbb310b882f37402e9c26d9","first_seen":"2025-04-18T14:37:21.885425Z","last_seen":"2026-04-25T00:15:50.217814Z","times_seen":1557,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"dotkbuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotkbuff.com/img/hero/background.png","fqdn":"dotkbuff.com","domain":"dotkbuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotkbuff.com/","date":"2026-03-27T20:37:14.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotkbuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:02:44 GMT","end":"Tue, 09 Jun 2026 07:01:06 GMT"},"fingerprint":{"sha1":"EF:52:B7:5F:4C:F3:DA:5C:D2:CF:8D:45:10:2E:2D:6E:70:B9:77:6B","sha256":"16:53:22:67:85:4B:94:46:44:EC:9C:E4:F1:74:3B:03:6E:42:1F:E2:74:05:38:59:86:44:D9:DE:6B:60:EA:09"}}},"request":{"raw":"GET /img/hero/background.png HTTP/1.1\r\nHost: dotkbuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotkbuff.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 20:37:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1644779\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Jul 2025 21:52:08 GMT\r\npriority: u=4,i=?0\r\netag: \"68781f08-1918eb\"\r\nexpires: Sat, 28 Mar 2026 19:26:46 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 4227\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N2R7AFrf%2Bv4kCJc5PP7Jqz%2BZT%2FfbiQOkWmmVjvtmba%2FPFX%2FOrfEjo8pONweccqpX9Zg3sEXna%2BQTPfTPLCM07GW%2FYbQvvGRnVm%2BdWDjtesqOAQV6fAjO8ZiX%2FZOGbRg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31311cddc7120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1644779,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 839, 8-bit/color RGBA, non-interlaced","md5":"e478f2e722613953fbb62488e1935530","sha1":"6af64b96803299523d202530d671027148c9685d","sha256":"ba8dbb3bb997b5934124f0d469ace126a44eef5323d26be8cc58293d9e619942","sha512":"3d99536ca4ec8b50488c6313c0543cecaa7d9db4d5f6f319eca41fe89083f4afc8588421d3b0ff2d291feade1181b091a55e707d3a49190a9e0f9c40dc36c037","ssdeep":"24576:diTh8/n4fw526mFPWcGBOmgyCPSL7w94suZ001hpwet1qQ0yVw4:dAF0R7k94Zh1hkQ0yVw4","tlshash":"c62533875e414c072b4e6af4cbda3cb88169ec9e6c53f147d6ba13304dd6b8946138af","first_seen":"2026-02-18T18:40:52.628223Z","last_seen":"2026-03-27T23:45:10.30429Z","times_seen":27,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"dotkbuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotkbuff.com/img/info/background.png","fqdn":"dotkbuff.com","domain":"dotkbuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotkbuff.com/","date":"2026-03-27T20:37:14.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotkbuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:02:44 GMT","end":"Tue, 09 Jun 2026 07:01:06 GMT"},"fingerprint":{"sha1":"EF:52:B7:5F:4C:F3:DA:5C:D2:CF:8D:45:10:2E:2D:6E:70:B9:77:6B","sha256":"16:53:22:67:85:4B:94:46:44:EC:9C:E4:F1:74:3B:03:6E:42:1F:E2:74:05:38:59:86:44:D9:DE:6B:60:EA:09"}}},"request":{"raw":"GET /img/info/background.png HTTP/1.1\r\nHost: dotkbuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotkbuff.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 20:37:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 302556\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Jul 2025 21:52:08 GMT\r\npriority: u=4,i=?0\r\netag: \"68781f08-49ddc\"\r\nexpires: Sat, 28 Mar 2026 19:26:46 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 4227\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4qYfVWbyaNLYEg9QFqYPvJWtWqPyThIFSqeEGtCyB2jU3aItt6mCLc8il%2FvFHEHZFBIqKnx20m6wPITko%2FQ%2FWIEVMWSUVh9tYdHgDZLfQ0Jdr%2FzPog%2FfRo9uaLCP%2B%2Bg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31311cddca120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":302556,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 439 x 540, 8-bit/color RGBA, non-interlaced","md5":"878c29d7f39e7579d7d0593ff5f0fddc","sha1":"d57321cca1a18313d495e45e7baf5a7574a1918d","sha256":"4f5a21ab622aefad03395eef4a5270726dbd37fe919d3558eecb3d6d7cb38826","sha512":"fb563776248895de8acd8e2e94a13406085e97bd0e30cb95ddceb9cbb56e44d1c31bb99a60cab87b7dedced5cd2a3b198a761265ea6e49844cb194516a6d0ef2","ssdeep":"6144:0bYVxkknZyObfJGbBRw1dv6pmkM09c5jLzFTKoLED687G0v:0kLXnjbfJGbwv6k0c5jLpfDw","tlshash":"1054230f45130c8aee41daa557cfc8f583b21d16e4af0f61e678294ab02dde525927f1","first_seen":"2026-02-18T18:40:52.622567Z","last_seen":"2026-03-27T23:45:10.305084Z","times_seen":27,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"dotkbuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotoflex/v30/NaNNepOXO_NexZs0b5QrzlOHb8wCikXpYqmZsWI-__OGbt8jZktqc2V3Zs0KvDLdBP8SBZtOs2IifRuUZQMsPJtUsR4DEK6cULNeUx9XgTnH37Ha_FIAp4Fm0PP1hw45DntW2x0wZGzhPmr1YNMYKYn9_1IQXGwJAiUJVUMdN5YUW4O8HtSoXjC79QRyaLshNDUf3e0O-gn5rrZCu20YNau8OPF80A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dotkbuff.com/","date":"2026-03-27T20:37:14.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/robotoflex/v30/NaNNepOXO_NexZs0b5QrzlOHb8wCikXpYqmZsWI-__OGbt8jZktqc2V3Zs0KvDLdBP8SBZtOs2IifRuUZQMsPJtUsR4DEK6cULNeUx9XgTnH37Ha_FIAp4Fm0PP1hw45DntW2x0wZGzhPmr1YNMYKYn9_1IQXGwJAiUJVUMdN5YUW4O8HtSoXjC79QRyaLshNDUf3e0O-gn5rrZCu20YNau8OPF80A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dotkbuff.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 41732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 03:19:14 GMT\r\nexpires: Fri, 26 Mar 2027 03:19:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:38:15 GMT\r\ncontent-type: font/woff2\r\nage: 148680\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41732,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41732, version 1.0","md5":"60f4eaa905761696901feda4322cb621","sha1":"d25e7bf8ecaf4070abd543ad612e6737f7f4de20","sha256":"359b1c22ebe30a2e9a3269d564afaa722f168cde3bb0ce7f778e000c86b2ba8e","sha512":"3551e70177f1e2284c32965554d917990ac62f608b8d0082dc3f853186952eecf92c04ea50824ceed0341202efa2861bbb9b77a67f809e2cb14c8728e38820b2","ssdeep":"768:3xrnHYtbQeZdmYETO0Nd/Ln6v+y0sFPw97auhAyXErwg0auuor3j3:hbHYtTbmNVQLFPw9+Oqbq3","tlshash":"4713f1b93189c8da799b1f64cd607b680a81b9c7c20a1504dfaf77b3d9d70aa303dc85","first_seen":"2025-01-21T02:45:33.946688Z","last_seen":"2026-04-25T00:15:50.208491Z","times_seen":1513,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":143,"dns":1,"connect":23,"send":0,"wait":24,"receive":26,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dotkbuff.com/","date":"2026-03-27T20:37:14.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /aos@2.3.1/dist/aos.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotkbuff.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 20:37:14 GMT\r\ncontent-type: text/css\r\ncf-ray: 9e31311b2ef4b28a-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KG7ZENXCTY1A38A3KMZZY6R0-fra\r\naccess-control-allow-origin: *\r\nage: 216827\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 27 Mar 2027 20:37:14 GMT\r\nlast-modified: Fri, 30 Jan 2026 17:33:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:GqiEX9BuR1rv5zPU5Vs2qS/NSHl1BJyBcjQYJ6ycwD4=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-04-25T00:53:26.704656Z","times_seen":32913,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":20,"dns":0,"connect":1,"send":0,"wait":16,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dotkbuff.com/img/logo.png","fqdn":"dotkbuff.com","domain":"dotkbuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotkbuff.com/","date":"2026-03-27T20:37:14.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotkbuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:02:44 GMT","end":"Tue, 09 Jun 2026 07:01:06 GMT"},"fingerprint":{"sha1":"EF:52:B7:5F:4C:F3:DA:5C:D2:CF:8D:45:10:2E:2D:6E:70:B9:77:6B","sha256":"16:53:22:67:85:4B:94:46:44:EC:9C:E4:F1:74:3B:03:6E:42:1F:E2:74:05:38:59:86:44:D9:DE:6B:60:EA:09"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: dotkbuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotkbuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 20:37:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 10669\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Jul 2025 21:52:08 GMT\r\npriority: u=4,i=?0\r\netag: \"68781f08-29ad\"\r\nexpires: Sat, 28 Mar 2026 19:26:46 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 4227\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FbpURWLXTsovfGrgo0JFDLmjGEBeFBud4EPs1HtvQv6p1B8pamHt9l%2BO8xJK8bMh19ol6KOtMu1zwHaRl%2B2BQWzbnJNJJgwp6aiDyjowacUQFHvaObE7XO561uslmiI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e31311af832120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10669,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 56, 8-bit/color RGBA, non-interlaced","md5":"923f14c39cdc8d5ce6e84cccc56757aa","sha1":"89783c4a75c54a94ac064276a4194c6f967c0e2e","sha256":"b5c1fe7dd884a16d4508c2987325b12ee03aa657d454b0c7fed76effb3fac1ba","sha512":"40e041ee3a1368f25f242772b91173c2a9320e3f6faac113287279ac0211b3ba427edd4dc82e7846f268f93350a4239a62809e889e3db162f8c7eac4833e8ddc","ssdeep":"192:vSyE3X4IML7I/Gu0cj69VksNXOmDtTomlo0/yhmmAj7HCcxJC2/4HAmCk:ayAX4h700cjZsN+mDjlBk5Aj7icBbS","tlshash":"a922bf4904866f3acc8f4faf5ed493c1e3ac9fa7e48d38c3772019349556d55ca98524","first_seen":"2026-02-18T18:40:52.61745Z","last_seen":"2026-03-27T23:45:10.302822Z","times_seen":27,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"dotkbuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotoflex/v30/NaNNepOXO_NexZs0b5QrzlOHb8wCikXpYqmZsWI-__OGbt8jZktqc2V3Zs0KvDLdBP8SBZtOs2IifRuUZQMsPJtUsR4DEK6cULNeUx9XgTnH37Ha_FIAp4Fm0PP1hw45DntW2x0wZGzhPmr1YNMYKYn9_1IQXGwJAiUJVUMdN5YUW4O8HtSoXjC79QRyaLshNDUf3e0O-gn5rrZCu20YNau4OPE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dotkbuff.com/","date":"2026-03-27T20:37:14.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/robotoflex/v30/NaNNepOXO_NexZs0b5QrzlOHb8wCikXpYqmZsWI-__OGbt8jZktqc2V3Zs0KvDLdBP8SBZtOs2IifRuUZQMsPJtUsR4DEK6cULNeUx9XgTnH37Ha_FIAp4Fm0PP1hw45DntW2x0wZGzhPmr1YNMYKYn9_1IQXGwJAiUJVUMdN5YUW4O8HtSoXjC79QRyaLshNDUf3e0O-gn5rrZCu20YNau4OPE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dotkbuff.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 07:20:15 GMT\r\nexpires: Fri, 26 Mar 2027 07:20:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:41:59 GMT\r\ncontent-type: font/woff2\r\nage: 134219\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84304,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84304, version 1.0","md5":"29c5829e6a5bb1b7e04b834f09dc7cb8","sha1":"1f596e008cba8ced5dcb71a91ccf92d697c8620d","sha256":"e97ca92cebcf4df3539f6514cd652a84a827939e6d5eaf5edece6d83c8229138","sha512":"549c8ce6b02e89651228190e4ee8de86c7c259fbc61d3b327a09f43f6a6a73be98e4998880fa939474ea55fee34cbabe9e41e601510d0b6a093289a95ed714c7","ssdeep":"1536:j9oKbqG8ZLr8xR4vLxxeXPHQmp91WNK8Vrn/QB/7rj3xCurL6g5XXXS6w5aohuPG:jGKXWn8x+dx8tp9I/n4BL3xpL6gFHrwp","tlshash":"1e83126cb8d1605a8f9038b1f17448f92381240cf1617b2b5fd46b46428b9e39fba7d6","first_seen":"2025-01-21T02:45:33.944465Z","last_seen":"2026-04-25T00:15:50.184683Z","times_seen":3246,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":152,"dns":0,"connect":14,"send":0,"wait":45,"receive":26,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
