{"report_id":"e4183c0c-17cf-4754-8502-0970c9b929d3","version":6,"status":"done","tags":[],"date":"2026-03-12T16:01:26Z","url":{"schema":"http","addr":"kalyxen.icu","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"title":"Kalyxen - Worldwide Decentralized Marketplace","dom":{"size":177664,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9067)","md5":"186977f0dbd42dc3bc8aa3ea7d5b8a3c","sha1":"e7d96f19eefd7671d417b604d099b7515b51df6c","sha256":"7f0f3565013ed40212015fe62242d2224abc35aca808871d7a6f9f4b59ae0401","sha512":"14fb223fb59f48193f92109a865a2a947b475b2bbdef323df428a1d6a9b10430a331e3a1b3a1e956e232abb76bba9a72774f4f4b1261e904c23c71406e726807","ssdeep":"3072:Kt51eChSJgy6X/ZvK89MlOMlYMltk3BCVMl3MlUMlvMlgMlgMlYMlgMlgMlr0mfF:Kd1L9MlOMlYMlGKMl3MlUMlvMlgMlgMB","tlshash":"7c04c632a859183b122716e4b075671eb2a7c717cb0789d8b3fcd3a89fc5de8592358c","dom_hash":"domhashf81bda0d7d30aa1a5ce7bb365e9934e1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kalyxen.icu","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-16T16:01:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-12T16:01:06Z","timestamp":1773331266,"ip_dst":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":36240,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-03-12T16:01:06.673014+0000\",\"flow_id\":195897271062450,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.36\",\"src_port\":36240,\"dest_ip\":\"75.2.60.5\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"kalyxen.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":2681,\"start\":\"2026-03-12T16:01:05.987058+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kalyxen.icu","ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-03-09","domain_rank":0,"first_seen":"2026-03-12T16:01:29.164131Z","last_seen":"2026-03-12T16:01:29.164131Z","alert_count":97,"request_count":97,"received_data":3870981,"sent_data":45197,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Raphael","description":"Raphael is a cross-browser JavaScript library that draws Vector graphics for websites.","website":"https://dmitrybaranovskiy.github.io/raphael/","common_platform_enumeration":"","icon":"Raphael.png","categories":["JavaScript graphics"]},{"name":"Yoast SEO:26.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"Slider Revolution:6.3.6","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"api.coingecko.com","ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2026-03-06T11:15:16.546698Z","alert_count":0,"request_count":2,"received_data":2755,"sent_data":1016,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"kuadin.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-12-10","domain_rank":0,"first_seen":"2026-01-31T05:58:12.107566Z","last_seen":"2026-03-06T11:15:17.446923Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1377,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/ct-lazyLoading.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e48f74ff2ec65ade3b0485ce35fdf51","sha1":"87041cd6aef74b8f0ab3d1ae2e03e2ca0db14cf0","sha256":"d5e2c551ce5c731d97827275aadc2c47329529d8a022739aaa306b8d7344f802","sha512":"3f8bd4bb1f29d83293ef4d18a5db6d7d2d85e3dd5604b9b14f1463ccb56698dcb420e1e79eaa4734e36b8cadf353f26c7bcd4ab272e59ce472d2ba8485a06d45","ssdeep":"384:+gpDy3SLtWmOeKQCfa2ZouzFHK7zRr6IAs25qDohbZxG2C7zKr6FpvqS:+gpDDt/EfaQzFHKZuxs25oohbZxG2C7H","tlshash":"af62fdd8724f266f86ef33ab913f464ef83dd532440901bab47951d898b5c69a342cbc","size":15556,"data":"","first_seen":"2025-07-04T07:44:29.938072Z","last_seen":"2026-04-19T19:53:53.663165Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/jquery.transform.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bf005dc2176ade3111d3c0580d01c6d","sha1":"33215d357d55d6c0aeae9bcf4a1cc88d42083020","sha256":"4e529704bacba1a50034a78bbe2ae83dcb4361d2a56ade0726d060a8f480bb20","sha512":"cfc1b22871907dfecd06327be4de1584b417579e3cce001407fb7728f3bb4dde296d593e7ee1527a222e048eaed4d973200f99801aaf919c13469f4c0aa0ee45","ssdeep":"192:3qEDSXlzxt9sx2lQtT5e4MOPIA0ALGwlLj7BtW7V5NVh5PpTHKr+1rm31e00Y6NL:3J2Vzz9sx2lb4MOgA0j937","tlshash":"2a627358772f000dcb522352e5ff0f49ed7cc1386532899eb61a805a54a585ac2f9fbf","size":15261,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-05-23T09:52:05.874686Z","times_seen":325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/ajax/libs/gsap/1.18.2/easing/EasePack.min.js","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d2271c362b9cceb4f2ab2d6db6a2f27","sha1":"11b4f8c33fd1fd7d1394cd4cb45aaf6f1a264b8a","sha256":"9d7f951efc00f4b874e6763c12b1361b8a2c86111e2fac2f9aa87f2a97ddc146","sha512":"69487bf8ac5a559f39f8a5917648bf9fc8aa0c71e320b63d360e3dfad80dbe42ecbd5ef341c86664b8ae0b7716d1f9e6a02330ff3fd1f2c4dfedc41d1863e6aa","ssdeep":"96:jfn337jspsFBicg1i5vcG1rXJ7gnrCmcy//Ay6ylByAYxOPVLrlPzQAOQ77:jEpsFPg1idcGJq7c2/X6uBPYxOPVvlPH","tlshash":"fab164893932a1994076aa64003f0107b77a55eab60c0aa9f99dcccc3e3d5d5636ef6c","size":5467,"data":"","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-06-07T10:29:30.526716Z","times_seen":413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/contact-form-7-js-before","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a060ae7321f649c80345c2d64840c71","sha1":"9d013d2f5a1656f0ed3516e5cc19b5e6f4112bfb","sha256":"0f7e893fb65f5de33141cb825a4e74a214156411c718a1d4ca4cf55e948391c8","sha512":"0998fe50a2458c602dc324b8c34199518b2742ba56f61a5f3bbe59449867cfaf58d6fc6175ba522152118859e1d997e59bb2c84b9847ce1c99739a448497d10e","ssdeep":"","tlshash":"99512355d5e41c4610e1c174017c1313f551511bcb3f5d65754d404c2fb4078f4147ca","size":2534,"data":"","first_seen":"2026-02-12T22:33:02.084352Z","last_seen":"2026-03-28T02:20:02.863293Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-includes/js/jquery/ui/effect.min.js?ver=1.13.3","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bdd4dca7cb09218e1860e6e0ca8a823","sha1":"dff6ac08d3ccf6f1d4f31c2d77ffa19e5ed112ee","sha256":"b7f28f2464e085279a304d2abee8f0c89f82077338dfe0dd44882ed0d53d018c","sha512":"69c128b655b22b150090d585fae2d1e2375400edac8a8f61a9fd12cbee07d464af43820bbf32e21ad55ff12087f9172f51f70943e301a2301c2e5e3a90993990","ssdeep":"192:TrxXtNLOw5Lx/jq/XOnAm5M5f6IyfGmojJnd9:TrxXt4AN/DNxojJnP","tlshash":"e622d89cb44178254ae7a372406f9e0fb031585cb19b4544f239c4e9a9be98e5037f7e","size":10332,"data":"","first_seen":"2024-07-17T00:03:41Z","last_seen":"2026-06-08T13:33:24.940695Z","times_seen":15499,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.3","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e187162915b1d22fd4558fee30f5613","sha1":"3c76d4209fdbcbd3650655852ad4ed73846e15ff","sha256":"6d60e3b25e56d35148888b5a08c8eb0ff3806f9698d4f6f54a35eab7d27f4c2f","sha512":"01948a902de67801566637ec99d82302a8da9b80a31de08fb1f2c0d52aea3beafa804188471320410850f0e96f4ba4c34f6cac6ebb6081359f2e959a2c6027c5","ssdeep":"384:wwuf8OQL0sARrAZcNWL//+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWrGcibLexa2Vau0XD","tlshash":"484235e16197e0f0cbc338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2024-11-04T17:50:00.017227Z","last_seen":"2026-06-08T13:11:08.554167Z","times_seen":16347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/js_composer/assets/lib/bower/chartjs/Chart.min.js?ver=6.6.0","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5408d409564a6760732e4e109be2d14","sha1":"d3aec6649da5c307fe7e9ac984144a25262e3894","sha256":"b24666135c9845314e4dfb7cc1a7d7a350082eb9c8e24fcb5a305ae8230d28fe","sha512":"bc1e6ba15e7ab6e7a540f2acd6d9097d06e9093a8a792b8b079fad1f0686a394ab64e030c929fa7aa1d72bc3a5dae705688a38b2af8e062e6a9e68b19c808be6","ssdeep":"1536:cj8SDd8Z8Wa02mUUPxyU6WVsCRx0hX97Y9e/nkt0wgsmbaHRTMWLNMjD45cCQL:UqmotQSE","tlshash":"f873ea4cf306626a85ab1395340f178d913732602587a92c74bca5e2a5acc1e36fff7d","size":73795,"data":"","first_seen":"2025-07-09T19:54:12.258708Z","last_seen":"2026-05-20T18:37:56.939194Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/js_composer/assets/lib/vc_round_chart/vc_round_chart.min.js?ver=6.6.0","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"74217068dcea35165be6cd790b15aa7a","sha1":"b5cb5317196fccd62bcf22216b4370a6ed4dbcc9","sha256":"aacbe6744b8152b23dae219633e84b8810d3e52e015ea24e9f315e9a7eb35e52","sha512":"4ea87c037dd2fe9f8f5701f50fa73614d43ea468f3263e992aadc4e383636f062c7027dad76fce5fe43e1e7c628cdac37df416947f93cf633d9eb85119e62bfd","ssdeep":"","tlshash":"2941edaae520289762e72297862fb39ed313b27d0d52312a715484fc0e5a91f343ad3d","size":1886,"data":"","first_seen":"2025-07-09T19:54:12.267616Z","last_seen":"2026-05-31T04:31:02.773021Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"32dff9de2a5a22fcbcb16662d7679cf9","sha1":"4287dbcd30f6484bf1de22f5cd17de3186180ba5","sha256":"6c1055481eae9b1a886efcb915d8b8570011794f704d9f70e4967c5bd2169365","sha512":"a13ec90e449a9832a7f3a528cd873bf274ed582aec7c511c61890ec75e81a78b5ad35cdfa7aed27fa0da06fe3b8f3cef8f1b22e87ce0c80c2cdb53d00b908688","ssdeep":"","tlshash":"7fe06863a64a3c9942c2c5e0a028665392cfd267c48fc877c9089c4c0daa4606720b1a","size":360,"data":"","first_seen":"2026-02-12T22:33:02.03085Z","last_seen":"2026-03-28T22:12:53.928284Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/odometer.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9c04e8d7af6e9d51f8566d4f472f494","sha1":"fda7f6180887dcd21517e3575650834be5330323","sha256":"7ec853ce34bd953427fbbdb816ca1ef1ca7a20f70ef4881f25028475e37a1afb","sha512":"3f91fc1aa8ee80e3c782c3dd01c78df6df02a707d6e0b5bdeee865a2e23f00cd17749e83d823d6591fe60700166874d8953ee4b05375cc6f4aca5f726d078eac","ssdeep":"384:/7CmeCN2OvYxE2W/McVcRaP/S4vLTCsbojVFIC0sW8rzQ4S1tOGEq6q:/7Cme/Ov/2kWRaPa4z2sel9ZQ4S1tO/C","tlshash":"5a921d8a6e9623599733733aaf9b1108ff7b482720115148be6c50c56f7293092e9ffd","size":21077,"data":"","first_seen":"2023-03-09T12:13:02Z","last_seen":"2026-05-23T09:52:05.680249Z","times_seen":300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"97187138ff46175b8f7eb3aa4ec21a32","sha1":"aea0daa5a937617b5c63ce8161ad6bddefd6536b","sha256":"a7ee43ad86f10251bcf11d1bc0a9e4a18f9c18875bd80f294fdbc40394cfc1dc","sha512":"a97d1f3bb6cf688856384742884a183a9e286c3548b01a099266f3d73fe48f23f145b9b85a15b8a9baaba8b2ef6dc61b97f09aae47a67e458fec5ad8e4bcffb5","ssdeep":"","tlshash":"63c02b5bc5c52fc716d00ce51130623322b65316c87c885859c9c4400d30c43d864252","size":138,"data":"","first_seen":"2026-02-12T22:33:02.03216Z","last_seen":"2026-03-28T22:12:53.931071Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/ct-menu_init.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fd9eb6b5b7430e469cd7cf545d397df","sha1":"9869441d1d5867ca84e55b3483346869cb23b248","sha256":"45b8976413a9e4545363693140cd898ab1a13bf67ac062a7f33657e77b34657a","sha512":"56fca6a524fdf3565eb2289a5e1df38dba73d89c71ac3b9006bb33d54d5b20635adc58a34da10742eb86180a1a79b53f34300b51e4c1b499926d992aaf331fc2","ssdeep":"192:YjZMv5B1WVEq1avIWERzGBHATxF2Kij9z3HvdABs16Ib1377k1CdsfEIW/tO:3XWVV1a1mOZ6+vX6EI2O","tlshash":"a88223d4361fa23e42b7b31bd17f5589ea3dd2308206546ab4fe505c29e281753b3eac","size":18496,"data":"","first_seen":"2025-07-04T07:44:29.921002Z","last_seen":"2026-05-20T20:20:34.104456Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kuadin.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"kuadin.com","domain":"kuadin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"31f757224c404662b0faa11be074ed2d","sha1":"560f528eb8ccb1d43129299c62068c7a3f14cfee","sha256":"93ff2de83282d394668f1880b654a22a6922cc1bb2cddd46d5701f5dd70e20a2","sha512":"f7dcf5812ef34abc2badbf691d7ca9b62f17a43953f4ceaa5336f27921a6a630f3ec2d1e849df69716fb616d8f89107984b7dc47e6278e80b783239199fdcb5e","ssdeep":"96:svcHtHRA5NTDXnM2E0+1lfYsPHgRhR3SP:JN0LE0+1lfYsvSQ","tlshash":"02b18696e77638dbb2f900f2697a0d47eb614435d6c8d438c9ada3141cb5893c274b46","size":5343,"data":"","first_seen":"2026-02-12T22:33:02.083158Z","last_seen":"2026-03-28T02:20:02.873785Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.6.0","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b00a0fd5e283160549de2c7b36243b7b","sha1":"f2401243950cd9624002921265e46a518851f12b","sha256":"314ce6baaa3218eb171fa2c278d7fdf1b9872305dfa667e9cbf2df77c83a9a88","sha512":"e5e5a424ae0b221f578433025184deab93115575391a7feb1528f45e621976b3049f6bc5e1fd484b469a60c2d4706f7156b61c614c28da5bd41e110f1e49d2a6","ssdeep":"384:sekk5QRKhEJhCoJptuxOqU5SE3RG0F+D/W5OhS4uLSav4Rd57q:sekk5xhEJhCoJptuQSEhG0F+DO514uuA","tlshash":"4492c968ba5070f556b7373bf13b3b197233383a948651106415d8783abed4e222bf9d","size":20637,"data":"","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-06-08T09:09:47.025395Z","times_seen":2613,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/ct-fullwidth-loader.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc962d39be85ef44b21982b97e7a64a0","sha1":"498ca29df0bce0700107917533136934ddff4258","sha256":"dc00316a4d0556b0452bd5d1e9f85214a95857434cb138cb3c7e11637daa6e8a","sha512":"d1df30f865702a0f4f3ef8b81050818eee217b102a518b0efe1213b3b5c8f30a804c9b4aae0afe92a4aeedfd158124c3cc99f334b54b55ba27dd64f4bd87e63d","ssdeep":"96:S/eWn5xeReoJ9eFet8D+ifgRRX5PyA07xkdik8LM:inrIt8D+kgdnv8o","tlshash":"37a1671d357000ba557ba33ad57b458ffb7510271306c4a0b8ac9c992fb1da236e6fd8","size":4984,"data":"","first_seen":"2025-07-04T07:44:29.949614Z","last_seen":"2026-04-19T19:53:53.743824Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-06-08T16:34:16.290824Z","times_seen":193680,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f740b956919fbaa673bb496be184ac1","sha1":"fa7d2aef8069f1be31c655fb889c897eae36757a","sha256":"c8d83f1bd6a850a6f197b9bcce38828132ad627358b9c2c78e7c4bef4d22c304","sha512":"e35920e657641e1a0fd7854febd24180da274bf4a9e243a3d3c356cb92281f7174c451d2bf89a98f618368cfecdc77fa11308eb8665b2719b4780390aa755364","ssdeep":"","tlshash":"93417b829b5c80fd88267269ad395315a67acc73130905b2be4d2c9dec54923c7cb9be","size":2326,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-06-08T16:06:38.987373Z","times_seen":14247,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c76168362867e8297fd24900ee6b7ce7","sha1":"f435321ef0f9e13854612a65250dedada343ddcc","sha256":"a1879c98180fb1975fc80c8da16f7c024883b60aa21e58bd9761e20b540ee9e2","sha512":"ce4a596b0fb0ba3409b3205a44f9223ed7c4236231e4d5e42494a6b9f91c27714629d3174a783a68e5e318feb3d6e0f932cd5a5812cf57f0a89da289ae4bbbfc","ssdeep":"","tlshash":"1ec0926b60cda8990a9f7b32a076818f353595a03f8a280c542515d84bab8ba002bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.03461Z","last_seen":"2026-03-28T22:12:53.933965Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fc3b18c54b9030af3b1f75eb24df109","sha1":"0458e94d3d6b1b78ebbaebd1e40ece8263e5f3c8","sha256":"4fddf0d4e9eafc065fe0300c97c051d33404dcbaa70a6c6cf381fc3414508921","sha512":"e81d5666ae36fc2fbdd610b2900ba473639492179b66586bb099b04009f738cdfdd89b9ac5edae6d05f2e7e6d483a4ef5976464659d4a5da113ed745f99c659d","ssdeep":"","tlshash":"d2c09237b0dda8dc0e9b7b37e577428f723551a13f4f2808846454d897ab4b6042bf95","size":141,"data":"","first_seen":"2026-02-12T22:33:02.037658Z","last_seen":"2026-03-28T22:12:53.934867Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.6","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cffd0a1a3f066b4c698d79e5bd8fe124","sha1":"e042a9748e92e2f45e133b57ca2052ceb25ef98c","sha256":"e99d918c3c8ba1f2969ee1ddf46ef087a09e819c141cfb9aebcf29e82ee73fbb","sha512":"d3aacd9f216547f38f4cbe67ddfba2389a7526a04d7907b76b29cdaa48ed143c69fcec703e807ebfa115b566cfca33a2b89ebf76c4d5bfb9f30755219d85292f","ssdeep":"6144:IPI6TQxgMH4N7CXH2pD5p+v9NWF0QJpkXRdud/RDrnTKbl7wnoyJD6BWSIle:IHsH4N1gv9mJpkXRdud/RDrnTKbl7wnc","tlshash":"2f644be8e931787a04e742d7d05a440433b5e92da30785a2f2bbe1695c5c68d02ebffd","size":337085,"data":"","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-06-08T03:24:10.990048Z","times_seen":583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-i18n-js-after","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f52b55cad413d0d0f4920ad2708b17cd","sha1":"f4285c9d7f9d08867f865918e3db70d0b14c34e7","sha256":"544b7e99e362d7a82181e5280d5bee718cd281abd0ace59686255ccb3300bd14","sha512":"2ae4da33491f3f2cb8a39c8d31c3a3fd11bf3c7a3861af34169f12008d2b8159d5739bdd5eff3bdcf3c8cc5949c53dfa13537ff39dacc5af52988112662e7509","ssdeep":"","tlshash":"2f412b86f0973c80418b97705a63bd024581208bc17e880424d9ca206b724c0f4c231f","size":2431,"data":"","first_seen":"2025-12-13T01:18:28.951491Z","last_seen":"2026-05-07T21:23:49.97443Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/diagram_line.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdd5d3007f950d7ce06ded6ab40eba01","sha1":"fdc5e5909c613a82ff03de097b74dfa6028af50f","sha256":"8310f3b925f0513da6d9d90f28af1eb51a2f3326df70056e6c0c958c20b8c728","sha512":"04722a163a5f9f9682ea4c9717dbd00d702fe894eb38b74a9b4722332aa0311fb009efcaaf98f605d5bce8bd69549a223ffa0fae970d28bd1f80fa4a08c3c561","ssdeep":"","tlshash":"97313294b029644d1b7b2321743f4a0fb53bc453b52a90d8f9d980a33aa48623323d6c","size":1591,"data":"","first_seen":"2025-09-23T17:21:13.947389Z","last_seen":"2026-05-20T20:20:34.098334Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/clients-grid-carousel.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2fdff594e5d4fdd3c5ac893b1c40a47","sha1":"d457c76d73132f56adb6819a0f9705fd7e1df1b1","sha256":"57b94d2a4d25cb3de3634362e4d9a9b8525caaf2ddff5107645070310d3b2d67","sha512":"57ce67522f25483e0fdbd84575ba62704e9deb074d8ec61dc6f6ef94f8640540528f008b3179d7604b1bcacd949319f075821ae71818984d6791a42a956fa785","ssdeep":"","tlshash":"468155a1b2af79b89ca72319c13edd4bb63da826900bb424a4f3445c0fa1f59179dc5c","size":3902,"data":"","first_seen":"2025-09-23T17:21:13.889031Z","last_seen":"2026-05-20T20:20:34.185795Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad876aacafbea1bc0b44279e0b4e25be","sha1":"fcc680d6cab3bb6c7811310669004eced66f9985","sha256":"027ad6f90f07fe485218887a482bf1a3a50c9ae25d5eb288016cf9427711226f","sha512":"a796daee00e98e59756beb0404ae7f9ca14972726c555645f3f0cb3262661256f7de2f9f6d6769677948d4d10df8efc60f8223490adaa4b9541ee0505fd290a8","ssdeep":"","tlshash":"71c0926b60cda89809ef7b73a27682cf313551a03f4b2808542515d84bab5ba402bfe4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.03889Z","last_seen":"2026-03-28T22:12:53.937447Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/SmoothScroll.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3231804e3d5ba9a5e75e2f3fcfc864a","sha1":"85ba8bf46f104424fde024c3c5976aeb17141f1b","sha256":"92827490d2a95989f1163e13a5de6867ba4ec33b6dd9449c4d36d692a7d7aa79","sha512":"1cd852cc929ced5ee822db4684604dab710d7d18e615217dbb6c15058ce0c19bd339a53bf021bfb62a9040f61413aa82e6cba97446b2669be42ae2e63bfac2c9","ssdeep":"384:HkQ/wP+gdvChAcc3Dv0vlxXDKW571+bC4c99pa+0SPV1upYwGjAvf27L:HkwNAcht571+uf4Vaj+2v","tlshash":"df92c89955422c62157a633edb2b92caf37500630206a115384dbed83fbca7453f6eee","size":20852,"data":"","first_seen":"2023-03-14T14:29:01Z","last_seen":"2026-05-22T00:37:27.300431Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.3","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-06-08T16:39:20.272893Z","times_seen":205795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/ct-form-elements.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1a3695e2da5368c85db981a9b74fe28","sha1":"0655da7015f75e5f525fb7e063a2e39153b7a387","sha256":"7efc548a27e354ca6f68c23b2955532b9f78d1db0246f12077664d89cfab9e97","sha512":"5d1a264ef5c1b76e10791af06ed135d0041878beb80f49f994a1db3ed2b94391678b18f952a3dabe16d03d2bca5b673aa9a0563f1c9d93abdbc1f0a0667870b3","ssdeep":"","tlshash":"aa317aac767d28ba40ea33b6847d9984d53dc176c20295bbe4fb54900ce6449235396f","size":1751,"data":"","first_seen":"2025-07-04T07:44:29.915712Z","last_seen":"2026-05-20T20:20:34.109568Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca451e423816af4aea44ef9965e405b4","sha1":"d5bf1b129873b75cf21c7a50145f4f9d3fafcd54","sha256":"fe3c46b02167e975a969579f6f74fcf8f9bef19e526d73c44a66485fe6dfe7f8","sha512":"53dd227134f58b2f1e1baa86b2c53e597bc4323a24e6e058a774bcf074bdc4e5c5524d60fbbb735486e8dde12bdde1cc59c5518a8d3e12373974a0bed05d37b9","ssdeep":"","tlshash":"1ec02233b0cc88cc0e8b3b32e232028f323002a03f0e280c883820c803ab0b2002bf80","size":141,"data":"","first_seen":"2026-02-12T22:33:02.042591Z","last_seen":"2026-03-28T22:12:53.938265Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c189b07b8cf5fbf9320d7a763c65ce5","sha1":"c6a3762d84befa33910ac5e1cf106b81e20d67d8","sha256":"c7b29a333c06c37c75566cafb3037dd25e9ddfa7c40fbea3c78af8e23659eec6","sha512":"a78ac56aca503d3d0b4ed4a1948edd430d1826b73c2b214d248bd783a1c04e78c60a7dcacf829eb3f3049054c5ab37f1d37b4b7076122acf9eff4014ebb2f13a","ssdeep":"96:si8ckS/qv0VFm/UjCbweCyiSeh7QHAWvoyeCwQOl425k5HSPRySKSLFxPQX:UCqcDaUjCbweCyiSeZQHzgJCw/X8HSvS","tlshash":"8e023ead96f62124b563b23d1befa24435329113180bed013d5ca3880fa15765fbafb8","size":8529,"data":"","first_seen":"2025-09-23T17:21:14.03334Z","last_seen":"2026-03-28T22:12:53.940634Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/zilla-likes-js-extra","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"034fcc02ec288a53b5433cd074b3efa5","sha1":"a3ded817dcda054495a654a5405e336763ffe80b","sha256":"fcb3083eb91d3ea329bce2a57cb1c38f3166d5885b8b4f0b21bde030949474ac","sha512":"f17ccdb5d6aa19ac46b31f576af2f64f322a0107cee51ce4818143348432ae92a4d4529800a50a32963f141944a2b5cb4a2fbbf9839825057a948efaaca0084b","ssdeep":"","tlshash":"eae02b5bc5c52fc716d00cf51130623322f66316c87c985859cac4400d30c43d864352","size":344,"data":"","first_seen":"2026-02-12T22:33:02.072456Z","last_seen":"2026-03-28T22:12:53.93304Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/jquery.easing.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d96c6dc5ebeeda3944c9d32427a60716","sha1":"64166fb45f4ae0c6ce70c8cd5e9a31620020985c","sha256":"8924a332d10ef08e1870547aa7c91431c2c79e5b1f5e2a48865385d0fa1a9772","sha512":"de646b4d8f6e596d06ea30d57721d4cc8ad0e6e1245ff97a185d8061921350a91f3bb8b392bc94ae398a255f0c5353ec85a94ab024abbeb572dff074aab1a750","ssdeep":"96:Vc4ItZ0qLkpknUhnZVqQ32Ufsfs74d9ZUO3LfRLE6a2ew2Roh/omOe0:a77zJ7eH","tlshash":"7f81284d3c6d71115333fb7095078819f62d7a674948ad05fc0c4ca11f71a669abbfac","size":4198,"data":"","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-06-08T11:38:09.51825Z","times_seen":1197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/raphael.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"32e8807da0ad8402be1be8bec9c5acee","sha1":"e9d46ef5cea4b8c425360593409bf82a66d61fdf","sha256":"c717bdad5e5ddfd453c9872d1efd50954f553e0d4cc5555fc477f728da6a3b5f","sha512":"42fd11a0d902098ad1cd05ea62389ac954ba87dd4cf80918911b93a2987c714aab3c2c8a1e43dd6b679f82f7a8564714b649b7d98e1cd1016c1a99d8037d21e8","ssdeep":"1536:dQYvQregCAWnAwA6/ebeO5XcK0/UEe3vdF+ZoQmCQqMik3qT:dQYs+O55D+Zou","tlshash":"76434bd933c530a783a5b6e1647f1607b02ad898b64d8c5eb108c1c6adb88d5217bffd","size":60293,"data":"","first_seen":"2025-05-18T21:06:06.138845Z","last_seen":"2026-05-20T18:37:56.877816Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/presto-player/dist/components/web-components/p-BxRAfMA5.js","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c027b3130557bf0fd5f9a4e1c62ffb30","sha1":"0b14479bfa821ff397b2d81193c3bce537c270b6","sha256":"01101fecbb128dc360358c28e75e5ea478df4dbc54ca05b7cc08b740c2d2dd11","sha512":"48118d616880378f2ef5ec5ff34e738e0ea293bb10df1f398aaf7e97e87d69f94f02fe9fb1b0711e6ab4e2bdbf53073b9ed76883b16d40a90ea8f65ff6842443","ssdeep":"384:8aRZEdAYTvbA1yFIWkphtJCLuKda/4YZE+TYZ21lGgR1C9OkRa7Ph4IIRGy8iD++:8aRZEdpT8AFfkpPULtda/4YC+TYKGgRq","tlshash":"a7a23cba2950e2742af54aed44765062f360362d304ec4f0b24e8ebb147a69b91f7d3d","size":21879,"data":"","first_seen":"2025-09-11T14:53:19.592051Z","last_seen":"2026-06-07T09:54:04.748082Z","times_seen":1270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8e05f69ab7787d882a3379b6f3c381e","sha1":"42d4ba48f7c5f8755b753df6abd69c792c162017","sha256":"a5024c650af90792ce558469819a314ed26756021fb18ede088daeb2a9d34b75","sha512":"b2c4d37ae6e441c937e6d4eda2091a0a3fe6b7975715ccaf08897df06feab3c4a377c93d36e4629b822b157f770c0f98732e61c57db7b406f4063295c01572bc","ssdeep":"","tlshash":"c5c0926b608db898099f7b33a277818f313695a03f4a2908582515d84bab4ba042bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.047383Z","last_seen":"2026-03-28T22:12:53.941482Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/isotope.min.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"27888208753e5e26022f374afc4a78c3","sha1":"bd4ffbf2d51242e94f5ea8e7395f14fc1452301e","sha256":"57a45007f24b920e1cb59467217fd99f6b7aca9806c31fd2fbdf8ba38df471b4","sha512":"02d8135ccfdef423038d2d04dc43e67e93bd5a10e88176d0af44387661b8110f5f207649964a38faad50884b2430f9ad9be5cddefdc41ae6894d836a25c99d5f","ssdeep":"768:jG+z0BFKEyby+HvOWvevgOkYtUdEvWBzigMPpIFxIFkuJKx3D+5+gY07E6P2:jAybbO4IUdEvPgqIFxIFkUe3CcgY42","tlshash":"d0039549b74435208387b5b5a2af010f723b94bde94494bcb699c8fa2db6c4d1133f79","size":40858,"data":"","first_seen":"2023-03-07T01:06:19Z","last_seen":"2026-06-08T04:23:19.158403Z","times_seen":999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-06-08T16:34:16.272125Z","times_seen":190835,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/js_composer/assets/lib/vc_waypoints/vc-waypoints.min.js?ver=6.6.0","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ff487a413612cbbf6bc391c10ff7bac","sha1":"acbbd8a96ecad33158f29e45afcd41e4b2dd6579","sha256":"357ad057de8ffc0fc9df301dd1873c3d482e926791195ee262da3886269f84d8","sha512":"9af6cf849fcfe777ee1daa2e5ccd79dc1b11013470db78b4c165a81573ccab4f6f1757082cf0fe643c95afdd42283ee0ee89522923a0e1c1303f5c07a8f3ccad","ssdeep":"192:tE/kIozT9DjFA6hj8jAanJVvfikr5IuFQYzpN0c7yPYRXFARk6kJrrAlr:tEMZzT9DjFAC8EanJVv5IuFQYn0IuYRu","tlshash":"1c1251897a0574220bdf80fadd2f834aa337582c640640bdb0d4d4ed19f1529637bfb9","size":9237,"data":"","first_seen":"2023-03-07T01:03:50Z","last_seen":"2026-06-08T14:52:08.504864Z","times_seen":7516,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/ct-header.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ef00cd2d9c2f86846104284cf9bd9e9","sha1":"b18724c7e0974cd565f22587e8bb4c7ab2f08c01","sha256":"93b43a812409aafada24dd8efc44e94a2e0b479f44b9c70a922aee7fcd8c31eb","sha512":"2d05b2e9e68af110d213103ed150b07dc5e14455c0430cb5d4e130264dc7ba6b7c928b5d1051d97f6712af8b56603b5f925e185f8773d6d77fbe8d3a30ba8680","ssdeep":"384:DrqH5dirmD9jHz4UdE13wG/ZtxxESJICiWreVOvz3l:Gv9jHz4UdE1P/fxxESJIb0eVOvz3l","tlshash":"8f9293c4b38d756bc6d733a8803f9988e63cd035905540bd75ada0e668788bc9372d3c","size":20279,"data":"","first_seen":"2025-09-23T17:21:13.892888Z","last_seen":"2026-05-20T20:20:34.092281Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/fancyBox/jquery.fancybox.pack.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"040bf1868af574af7fc2bae859610dab","sha1":"0d9ea5c972d2654ca096abcbba05fdaafde5c0f5","sha256":"3e366186c798c4ea66b36b7c19da53efddb835fe41a045bf659631fefb12b535","sha512":"d88ce877b6fd32d2e74e0d4e8e52fe970212606fc43c773887e0a3d84f1b489191f675e85ec99cbfe064e40d57e137d1cb675f35f0fe4c39404821d17844c89c","ssdeep":"384:dNNT29YgJNPymD2mKshcPGa1MIciM/AxQNX+ODW5LJN:dN8q+NPyWzhcua1MIcimAOiN","tlshash":"6aa219a1b2607d57c07b2622514f510ea0320523fb078dfa747deae45aa5bc822b7fdd","size":22639,"data":"","first_seen":"2023-03-07T22:59:57Z","last_seen":"2026-06-08T02:29:52.177332Z","times_seen":449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/svg4everybody.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f37ee5c2b7f1377e4dd767e6da0462e","sha1":"3804e18a5af7ff39a01c5baa0e955fa36d620c04","sha256":"dacfd6e3a4dba21c4477b41192719929ba989ad0536d681c31ec69d6aa336216","sha512":"2ef5b21a30437ae4ce3b8c3b42423eed6ba4574353c54eed90c8ac13d473d4d43280e38951ea22d3b15c3cf9f2b3a3144841c69f06cb5e3f2bfae0113c743c88","ssdeep":"","tlshash":"7921a8aa9d1231e30e3726fade69914ceb60411b14015a833a7da8808fb047987e1cee","size":1160,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-05-30T03:59:01.289929Z","times_seen":370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ff7654e0ee36bec5a7cc6d155d06de8","sha1":"b9453f90a8d1be277c9e04015e6fc39d40110a85","sha256":"743addb91ada723e48819bd3ada98f1eec86c99ba587e63534012724cd95a73e","sha512":"ddcf1b2217759ae315c05997d803ef0ea8d8faef5f5cf5002c298d93c0bdcc41557757fafec0d193281eedbea6287e3674325f70352fc0836beabdb38941bd9c","ssdeep":"","tlshash":"97b09267649ea89509abbb32a076418fb03451a02f86280804a510d843ab8aa0027fa4","size":117,"data":"","first_seen":"2025-09-23T17:21:14.052131Z","last_seen":"2026-03-28T22:12:53.942328Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/ct-countdown.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b53c15456ae849b6978f22764cc8545f","sha1":"8d523359a44058d7b90a38e968d3f3f4a3329a09","sha256":"845d2e6d1b14e199b65a530a085ca25671f426adad4a058dc0f22e1f8a5ca008","sha512":"ca1dc4f6a074a6cfd70169764a0223850b7149e2103a226ab20a3e7ec8b36571d74bc6788333f52e0da7a3d4faffa324a851f005b0da26e90c7c3ad198ac7ff2","ssdeep":"192:5dmS0ZbhtuFmS0RTd2DITa1GAjuAloK1qld2lRBo38qlV7E/lYD9DDDHDS0x5dro:KFZbPuYFRTdZTaXif2c2D","tlshash":"2a328544cf7a13381ba3a25d13ce6a8cfaad6183d3094c95fcbc8d096f69c797118d98","size":10981,"data":"","first_seen":"2025-09-23T17:21:13.9739Z","last_seen":"2026-03-28T22:12:53.868308Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/jquery.touchSwipe.min.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"938114de9f102f3797bdcca94089e52e","sha1":"13ea5f32ec0e653bf9f814cf1ad8cc885ae483b3","sha256":"2457851c744cac5ef83b9485017d9d17242906f10f90071b8706b7c850e26343","sha512":"8155c2ad40cf7b299ab973ac78b460017a9e0b84c22755d7cdc188023b4a8387540a20659b68c5b1762ba55133c9af4c2769a7b6c1534cc0d41476334ac2462f","ssdeep":"192:x/WeOvsOa4PUT2ua8fwSuQQLv8opVPq4hVLE0qLypcb0P7FWD02zt7tNyJcUqz5E:x+tda4PK2uaLnQKbnPpLLEfLypcb0328","tlshash":"b232858a7792f46beaed2274e24f4703503e9d970a0d8071e051eda5b9340b8a5f6fc9","size":11969,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-06-08T11:38:09.592242Z","times_seen":526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/jquery.dlmenu.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d43500d68f963d397e43a2e28e36ab4c","sha1":"e266e2a5e0928c616a0bd522b0286384badbbb97","sha256":"bcf3b7824f01e6df13d4c6b789117e99589814b10e5c54289b824e9137c3b969","sha512":"bfb82a0414c5041c0bf58d84988465791851eb5faa28acd8546994846d1a97b9ef89932775132064064848115f46ee54e3edf6984d37e63d68f301f97c9e6c67","ssdeep":"192:OidEVHbqA4JfG3+gZf5Oy6a8oalaIcpbJDlL2HS:OuEVHbqA4JfGVbJlL2y","tlshash":"041242c4330f376b96ab733194bea005fa3ec572a00d116e79ba25de185605953e3ebc","size":9087,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-05-20T20:20:34.114322Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/js_composer/assets/lib/vc_tabs/vc-tabs.min.js?ver=6.6.0","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f470a58760eed9ec50dd7e6992198d3","sha1":"84bd23fc02189aec468209610e80a6c2a593723e","sha256":"df34f3aef92fa54088e14b001bfe002d36ff6d765b24cbd9f47e2208e103625e","sha512":"e7675d597056d853027e43328f4443010284fbd0ae72b3faf0e7521981fc0b483e4d21e65cb701dba18a9b4e66c3322aa1f6b6c2d8e57a481d8eca135079109c","ssdeep":"48:f2O3fh38YGfZ1NpuWouwcteWZyxwpYw4enmkFfDkH6s2/wPL9geCkxph:u6XWoJcteWZyGpH4mmkPoPL9gYxv","tlshash":"f68112c7b35430a0535ba1db912b4b1ea22a35be400a105cf875d4e67f799062aa2b7e","size":4192,"data":"","first_seen":"2023-03-08T00:15:09Z","last_seen":"2026-05-20T20:20:34.125414Z","times_seen":203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f59a1061fbcf41f5e85090ba2fa9a67c","sha1":"8116e9924e7156e7d5d9cf62af3bb75a999d38d2","sha256":"7196e7de0fcb90aa7dcd75f741e89a91f5f172dccef4e8acdf3dc95de355fb69","sha512":"bcbeef70b99310152ea76da61a1303cbfff76bd9b9f654f447a2a706e83e7a4f575a312a0f1963853bca33fe91f526262df6bf8c7ee81c6860a39e1f03a9f475","ssdeep":"","tlshash":"b0c0926b708da898099f7b32a276818f313661a03f4a2808542515d84bbb8ba002bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.056726Z","last_seen":"2026-03-28T22:12:53.943067Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"26c953aa3915f943e1d6b46422c57134","sha1":"4e5034a6912440f1ac947dad321ac1cbb5dfcace","sha256":"42482d38e1d73a9221793b4e757182a91e2fc76bc4d653175bf702b569e0a217","sha512":"965f070099ca919747a7c430714344baf399b04a15358998744277e4478225b0f3123c2b117c957eeac20c5838853bedb444275f57320c4c3c04aadb219e68b6","ssdeep":"","tlshash":"53c09227b0dd98dc0e9f7b36e676428f723651a03f4b2818847414d843ab5b6046ffd5","size":141,"data":"","first_seen":"2026-02-12T22:33:02.057957Z","last_seen":"2026-03-28T22:12:53.943767Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/ct-settings-init.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7124eef2105e189c466ea7fe9d5d19ce","sha1":"a945b8d14dc5ee31a2c80df4e36e9ba72381ca6c","sha256":"543c4d50d21606290baf64841ad9c672a045fce6b8112d5b26736792b13b22fd","sha512":"1164dbdcf82670840e5673b2c5e4a55d8d93aa9011f8ab2a49a1076ca6c5c7771ec2d397ddafe11a8b1f7bce3cb43f2184185136e007c820d895bda54f8be6c3","ssdeep":"","tlshash":"464139194120723111773325be6bd31afb33993315472a12ba6d864c3fb2443a796fad","size":2214,"data":"","first_seen":"2025-07-04T07:44:29.91364Z","last_seen":"2026-05-20T20:20:34.047601Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/zilla-likes/scripts/zilla-likes.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dad8b8c214b2f2e2b4db0f0772a33b80","sha1":"b62a6d21e76f157735ba73dcda2a562dde3ff8b2","sha256":"34bf1c5d8c775f2578a2f3c3401969f62381261aecbe50233d7ee2167cd453e5","sha512":"b708db25b565f9c79aa9de057b1a17ae49e8ba625007d40e99d45568d12d0903a2b6dbb44f8d8914033d949046c34eaf5ce311f3de208539d6401fc4fdce4291","ssdeep":"","tlshash":"3311891ef9f275a10833307e4ebf4a017ab911135024dd88b9ed89805f8592c6476eb6","size":860,"data":"","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-06-08T11:38:09.599263Z","times_seen":557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/quickfinders-effects.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3952202a606168bcbb375a47ebe715a","sha1":"0e67fd3eb8a0caa9ea818b03f30cb59c92cb00d8","sha256":"1f849fe25ba4bf7809712d20569e3d1c87b5c97dbe17f352d26d3c612d75765e","sha512":"3b32b37d07ffb20d46fd28689bf0a14d06a67d72762c3af4e76f70998e13b0a0b65bab3c01374cf49fc72343f292b582eed00dae6ad980bf75b14c9143acd614","ssdeep":"48:Xy59uhu4LdzCC0YPu6luuzXqu3GGYTgunWjlg3/L0+WKQ2QALX2K2qFx2mxSYKQa:i2FxVa/LZ/BjuBjq+qd/LK4o","tlshash":"e2f139c179de290f13fb62e95ab9dbf1870fd424dd90061af6b140b04677a89463bb38","size":7834,"data":"","first_seen":"2025-09-23T17:21:13.84476Z","last_seen":"2026-05-20T20:20:34.098986Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d83b73368e26d5a7848bde92c409ca7","sha1":"109ae6549c639a96000da5d149445c4cd0e52225","sha256":"27fd63c72b9ca9b1589d34f73a3b0b02d74f8633411be042b1bb3b0e90e8ebff","sha512":"6a1e56dd8aacde65e4abff70070316ca88781a0456da6906eeb41f11755c770143f09bab880642c9c6a8c4ee83686f201023466dde41655d3a8b32c1926074be","ssdeep":"","tlshash":"7bb0922760ce98940a9bbb32a47a418f303551a02f462808042410d84bab9aa402bf95","size":118,"data":"","first_seen":"2025-09-23T17:21:14.058241Z","last_seen":"2026-03-28T22:12:53.944532Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f63e2248d25d0feaa907a19c7a95d9ac","sha1":"7603afc0915ed4ccaa7da8757a22cdbcf2f181cb","sha256":"14fbf97838de472c1f1d544e7a1e5d7db0267777c9ff2cbf578026079ff1dad3","sha512":"71b1c9cea323ea311956d51eb4c073ee4564c5b1e97e453558a3caa251e24c3ef43dac4fb1519beeac4f7ec41be7d522c42f3babc7667d5aac55fc72ae3c2c0d","ssdeep":"","tlshash":"d1c09b6770dd54dc0d9b7736d576418f723551503f4a1408446414d443ab4b5042ff95","size":141,"data":"","first_seen":"2026-02-12T22:33:02.068656Z","last_seen":"2026-03-28T22:12:53.945265Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/ct-settings-init-js-extra","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e8637b2e6761e455238611c558d4e2f","sha1":"5aacf8b1a09aa029030dcf1e2baed0c782711d89","sha256":"feedaa2972c6f5aac4f467a7e8aec67912524b4c57dbda50373117f855583dab","sha512":"d2599889336c0481e2a9a3807ab7bed276fd57b0cbdbf50cfd79c3a1961825b48bfdad8b09114bec457209e2f2cc45bf8f4089eacbcce3c24510242d05be0415","ssdeep":"","tlshash":"e3f06863e64a3c9942c2c5f0a028665392cfd267c49fc877c9089c4c0daa460a720b1a","size":554,"data":"","first_seen":"2026-02-12T22:33:02.055556Z","last_seen":"2026-03-28T22:12:53.949887Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-08T16:34:56.510304Z","times_seen":825532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/fancyBox/jquery.fancybox-init.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e187592c12567be861c07161dddf24e1","sha1":"ae2d0b80128fcf0b3ba03f1f07d6786c7166e76f","sha256":"ab7671fe8daaeab204b145e20b7e0585502147c23f9ebc0afdb4bc527c28aacb","sha512":"d253a28aa168e389e1b1518468d044fffb043af35ad8e7506f46bdc66e5da5f43709d7123fe53b8bfe62c0bf378d15a7db90411509424b201de44c07760568df","ssdeep":"","tlshash":"7811dca2b1be1a1d8ab53b5caa3be1388e3fc415c04388b3e5aa505811d0fc012d77c8","size":927,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-05-20T20:20:34.131354Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/js_composer/assets/lib/vc-tta-autoplay/vc-tta-autoplay.min.js?ver=6.6.0","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec326b42443a0157a582537ef34df2f5","sha1":"ab66c9ec3093da4e360b62e13074caef8ca787d9","sha256":"6c176a55f46c95137c6700b0777db49956705fe356f8ed5ffcb8b450f6d96b57","sha512":"86f59f4b483698b197a53b49a5157e10fc0bfdea56c4be44d2635f87ff7a9accac0bb5bbfc58b70ec7860343ec2cdd45bca3989b4d608f9af5e14b86a08b35fb","ssdeep":"","tlshash":"d051bc0f7410704a0adb2192d2bb1a8d633bffb81409519c31bc99e5ad7ec1e7613bb9","size":2545,"data":"","first_seen":"2023-03-07T12:10:54Z","last_seen":"2026-06-03T19:33:53.073378Z","times_seen":537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1029d319913d70463bb3531e296e48ae","sha1":"defcfda809076ecef49bb77afcd58f5015d52694","sha256":"e4395b9733d0a0fc386a7aa0b95f27d4a91cf0b968f70246003d703c5f98901f","sha512":"c5378e794fe40d744567118090942b46d421856c47e9657047fcb00b90f1557c1d592603369d7fb82408c36c0d5f92dc16e2d7263d683f5fab4090857ed6990e","ssdeep":"","tlshash":"9cc092ab608da898099f7b32e276818f313651a03f4a2808a42515d84bab4ba002bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.06993Z","last_seen":"2026-03-28T22:12:53.948423Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/vc-accordion.js?ver=6.6.0","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c29cf93c3bc245080754d39a6e4d2ac","sha1":"453708fc696137e21b16ec98238da0e7d6e8aa1e","sha256":"7bb5b8ee58a2d2cd085abbee00c98ab59d7d9f32109d1b3f38f5a993a2f20fce","sha512":"ff84608389a22504a8bbd9f89c1c8058a45b0b05c9179203ab5b7c8c1d5cd652457f02671d0b69c560294b5794bd31254a4ae297bc1109b5da0b2a6b91d3833b","ssdeep":"96:nIllHzGN4FBcRW2Xj1xFb9bkeqwZ/weBsidIWrbDZNzgikvnNLwesL2TnZNbMyQz:nIl1m4IRW2XLk5fiP0ENyNRgEGQgmW","tlshash":"5c720291335c2451839fb3a7463fbe8caa3cd0b9944b60bc7874e4946ad14291bd2efd","size":17314,"data":"","first_seen":"2025-09-23T17:21:13.936809Z","last_seen":"2026-05-20T18:37:56.888318Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/ct-menu-init-script-js-extra","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"84009053850046998ee2254ff3d886ad","sha1":"500aad61bf21ca0e211a22a358ca05e55b16be5b","sha256":"4350a95f5db91026abb2d5c8109182bff9054ebcbb01e9164758bee161cc0a7e","sha512":"85bb3206c5086852bec34c96b2c4e25c59c0678fc65d015a03ef5194bcc21764902fe5560e399e77db0243c637f7fc21c662ddf9e3359708ab4d74f37e71cabe","ssdeep":"","tlshash":"12418c88c9c9adf294b06eb09664c63342971690c43ac96c9fdc84881e309808e84959","size":2434,"data":"","first_seen":"2026-02-12T22:33:02.080887Z","last_seen":"2026-03-28T02:20:02.878335Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/ct-sticky.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b130b246c03785e643ad6bfbac5660a7","sha1":"e0e9e64011da6c96b3a4f580b83c2100b19b77ee","sha256":"b9c08ab5c61a0f866530d88bf7b6660821a56be1b1f516462852243107b30f5a","sha512":"5286ab78afeb6d50ce5f3b07aee03cb518bda9767e1b57e70c19ee877377efb93ac2398a45ee0b90759f1daae0466dbc15f8759755ef1c58bad78574784a125e","ssdeep":"","tlshash":"02814c4b667a2162d673b77c8e6a910cf736021b208785193dfc90d92f7202552e7fbc","size":4075,"data":"","first_seen":"2025-07-04T07:44:29.911713Z","last_seen":"2026-05-20T20:20:34.157199Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/fancyBox/jquery.mousewheel.pack.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0f7225166e217cfb64b80ae8ebbb604","sha1":"5d6f224e3080fd4066f8ef5c63d3f467e9d29e66","sha256":"89063c896f3ff978cbecd97312879f288e207d519781425f0d7f9dd203dff653","sha512":"6fc1d6e2d9e91598d77bef13232821318141b0a628728d005f2fc9c954c848e07ddea881e33d37350aaae056d9da1836095eacddfb45f758c1050e7a993664d3","ssdeep":"","tlshash":"cc2171403b8818eb55aa9bb2a92b6343f0ba909290433c8f70b09cc0ab90dc54331d2c","size":1396,"data":"","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-06-08T11:38:09.601545Z","times_seen":1803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.6","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5cd17674ab1e7e8f556707b9e894175","sha1":"c1b2a4a4f6fde101fc5bb4918c75fe8c2b163eb8","sha256":"a4aca4b3ad7c3976cfbd935294d071c1e276081e7a8ddeaf030ab5b5e280204d","sha512":"7da897d1b48763afd7e941c5a2ff10b58e0edbd511fcd2cc1ff9369fdd5ab03666ac3173f3973b4306c8c24c39c7e9acde15217fab961f122e091cfe9c59309d","ssdeep":"1536:AB3xC9/I/66Q1+sxBsWGXkWRqrlv7j5E5L3M8s+Adumi8IyyJTBwvrZ9IHsUq0KK:a66U+9UWRW7CK8s+muaydMr/IMlK","tlshash":"04c33cd87151b432029666a5453f0a0ff23b9d19750b852cf328e4c87d389a991fffba","size":124185,"data":"","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-06-08T09:38:52.678644Z","times_seen":1183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/presto-components-js-extra","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"21790fcda23064aecb875ac5c01abe7b","sha1":"b50ae51ebd26f575e5a61f7c0a1bb8c2a10f3723","sha256":"3b1fe91f01209b76cfbbd0087a4920d04177c52a91d3c9d112811912be823f33","sha512":"8e80db18d5d9d63ccc373ed28506a29055fcfe0f3b43f4dba0fb2b6e3fcf23d695cae94dac0eddf1d13b682a9d3ef0c0152b0394398a8b14f44fe744fdb7aab2","ssdeep":"96:11uywx1PXhZ0HAfGACf2hD1uywx1PXhZ0HAfGACf2he:11uZ1PcHNAdJ1uZ1PcHNAdc","tlshash":"c0c1543ed8452d758f8281f65658274362fb83abf0caa91bea8d9c1c01ad755c30f72c","size":5798,"data":"","first_seen":"2026-02-12T22:33:02.099796Z","last_seen":"2026-03-28T02:20:02.864754Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ed72935440ce32992acb954c8383f8e","sha1":"5fbdaa42ed18ed3860bc2f07b5f857a4fcf93d05","sha256":"59d558218b288b5c1ae7f59e6e1bade8843ee19705e5c2ff8df47b4f71fd0676","sha512":"f1a4e471b96c18a295ced2bf03650fb7885a9d22de9b352af7d7fd2bd7921e6fa865693f9049ba7bd0526a40d2389a9199c8ffa7773c50926da2d8daf3743b4a","ssdeep":"","tlshash":"92c09b67648d68940d9f7736927541cf313555903f4a1808542515d4476b475001bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.074273Z","last_seen":"2026-03-28T22:12:53.949162Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b7e4c930ba72c55740bffda68fbd543","sha1":"eca741cc1e45172f70e299615090767d24e66324","sha256":"7adce50b022897e795c9e39664e34be847c9188e4531eb6d965fcac5d7d423a0","sha512":"14506fc288dec5fa29ea17dd6af3783a02896ab5a49dccab84b1d4b3e6998582b7814fba42024b9b632fb1b28ee039a0251be4013aa30979fa2ee84a3d43e9a3","ssdeep":"","tlshash":"2fb09227b08d98a5099b7f33a076418f3035a6a02f862808042414d843ab8aa002bf94","size":121,"data":"","first_seen":"2025-09-23T17:21:14.07888Z","last_seen":"2026-03-28T22:12:53.950682Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1fcec6a9f9392e995a88aaf6558caf37","sha1":"446a678bbaa09d1c534f57bf687f3d5ba8b2d74e","sha256":"518870c4e3a3bdb65e3dfa3d20876331434b362b9226e3d96f71aced580f67c4","sha512":"c76a3f0d514609aaba6d1326d246117b77e6ab4a143d29bebcd9f07df9c0227d245a30950e133df21aeb4dfb6fb113f88dcba0961aac686c74eadeaf3dc732de","ssdeep":"","tlshash":"9db09227608e98980aab7b32a076418f303a52a02f8a2808086911d843ab6a60067f94","size":119,"data":"","first_seen":"2025-09-23T17:21:14.080555Z","last_seen":"2026-03-28T22:12:53.951443Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"58ab67360d9298250b651560792daccd","sha1":"01092699d1ebce9da9ae06f7ccf8e957a797a492","sha256":"c77d5b329c21cd4aa9a182a8615a8d5c5c8e3d16ba261bebb84c589218f4a296","sha512":"f7d594934862bf553f32af166716cf8c6898c0c2783911611167b49cb9e62106315f96e538ef4af46cc0db6177408bfb57f6ed1baf85bfd6f4fa23a431a70c7e","ssdeep":"","tlshash":"d5b09227608d9894099b7b32a076418f313551a02f462808042850e843ab4b6002bf94","size":116,"data":"","first_seen":"2025-09-23T17:21:14.082651Z","last_seen":"2026-03-28T22:12:53.952143Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb681e1ebdef64adaae93497ed04bc26","sha1":"889fbb0402a4945d180dd0f61145ff4562cd2048","sha256":"e0e2c6a5140bc478008dbe83efd559f8886be82a4a5722382aa38b1e10f54f8a","sha512":"6e1530b457cea6e127b2140f265b749555dc32141e216527140b203fb0b868031411e15e14eaecd195c0c25dea305ea03e8947b65316bd67e340d446fc5a92c8","ssdeep":"","tlshash":"04c09b67609db595095f7732a079414f313551503f4d1808142519d84b674b6001bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.081914Z","last_seen":"2026-03-28T22:12:53.952839Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/presto-player/dist/components/web-components/web-components.esm.js?ver=1765352451","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b87f794937c2ae5df31e5e511fe318e","sha1":"01a6d9cbe423a8d3bb2885ce81d72d287ca79e88","sha256":"545dba3956c64fe4c4d9180ce27a6bd1d99c590d2542c20458d75f9480f2d1f3","sha512":"5e20138e4664b884cbae8ffda7715c7a244b9fb5ed4273aea1580f30c44f0f75fb2872bd645086763eb2b51ed8bda8634cf5cf310479eefe5e6a161a6b5db8cc","ssdeep":"192:Kf9RlITvkEHsWRTRpHXHVrO9X/JXPr45VdLyB0I0cFz1OSmJ1nL4J+W5l9l3uX:Kf9LIlTRNXHVrO9vJXPr453LyB0YsSm1","tlshash":"43e195f32e2c2870daa3c06f38a918d44d3513d2e3601294faeedb2b34e574f561a755","size":7210,"data":"","first_seen":"2025-11-13T05:54:05.473487Z","last_seen":"2026-06-06T16:21:36.889442Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"90de6d6de39f900f9656204722c5938c","sha1":"c4ebb4413fa97b0590b29f1ab8a861c6dd55228d","sha256":"fab0e29fc2752191d6e56e0ff5197fc47e4971b5d4df5616ddac8ea985e250dd","sha512":"cad24a9ac7b490721503539de167b7bb5d4fc35c6627501cc266782313bc3579c7ccb163c1dd521c1c77f5cf373cfea2036fae24ebe8020974492aeb4dd300ca","ssdeep":"","tlshash":"7bb09227608d989609ab7b36a076418f303851a02f4a2808042810d853ab4a6002bf94","size":115,"data":"","first_seen":"2025-09-23T17:21:14.091395Z","last_seen":"2026-03-28T22:12:53.953653Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/ct-vc_elements_init.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b206bdc6bd5666e48df4f0d11529f0b","sha1":"bfc8b5e22e0c7b9289afde622f4551ba95994d80","sha256":"af5ec9b3861f037a982059c7f18e5fb994eabb9c2cc6bcfdaed6b7cbcefba1af","sha512":"c3711749b9162a280f3f615fbefd7a16daf8aade451d7322f13e273105090042fff674ba926cf65f32ee4cec987b60b09e69dd3da00d97a024dae6f8d8be72c0","ssdeep":"","tlshash":"82216dc9b31f74bac5a2fa24863e9e4c443ce0f95008306d7886552c7fe46d8abb2d1d","size":1187,"data":"","first_seen":"2025-07-04T07:44:29.953526Z","last_seen":"2026-05-20T20:20:34.172027Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/ajax/libs/gsap/1.18.2/TweenLite.min.js","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eef8d7dad371b6888f3c81e8b38fb0d4","sha1":"c9e3884cdbb4c1c9fc89513828ab3ff76fc39842","sha256":"601f0ab20a5f199857278b26f2128d77b7a97a6166a231d8efda0b7dc5743c4f","sha512":"b35a703affa2dee2c3c29587d4706648e1143ebf5eff94dfec07ef07f3f75e2fa298e32363132c3c8082e47c66a2e0c92c9125c7b79b092a87e587968f31ec29","ssdeep":"768:jaPMHFrEVEyNuELvXVWWCAcE7qjzt49k6VNOSkmsjp:j3fCXVWWCAZ7x9k6/OD","tlshash":"43c2b6c67212615245da11aa593f03837337c9eaf4584d3cb549c9ce3f1dd8822abf7a","size":27139,"data":"","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-05-24T02:26:56.925152Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a009e0dc51af74717b96afea7b52e80","sha1":"d76874964c901fe58db1a5f3e5efbd77d6568436","sha256":"0920409bca4fe227a7d7b5331840c7286953163e35ffd98e986cda0fa34f54ae","sha512":"ac1302359811802afd24a63e5bf1cd6f2eeba829e469f1cde73f8983e1fea901b32ddc3f1b336299e1fda1fb88c9a8f089178c92c0292d2be2c82bc289fb07aa","ssdeep":"","tlshash":"5bc09b67608d6595095f77339475415f713551a03f491808142919d44767475041bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.088444Z","last_seen":"2026-03-28T22:12:53.954333Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/functions.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1f216166c4934e1b8bb88ef8fde29fe","sha1":"1d620f5b7d5cadfdcdf9e936f8e4dd0cfd1259bc","sha256":"ba8d4cc28ed1f2e9489d85f7516b41d107009f3dfd0d37d2ca89f1504b779bc0","sha512":"a687c5cb13b1b6c0e0bc95833d35957995d9801c855064c28985f0ec910d95791691bff97b54c3133fd4dfa9f81426c12be2c90b24b90bb952b0a873469057c3","ssdeep":"192:Hd/dawE67ve+QFLaZPGvfrBPxz2LGWDI2A8fzx3cM63K7Tf:F8uvjQFLHvfdZz2LGWDIofzzL","tlshash":"5a62a494fbacb46a54773039d83e51cd663e10728b424c37fcb9912c29c15aca37ae2d","size":15321,"data":"","first_seen":"2025-11-30T07:03:11.310513Z","last_seen":"2026-03-28T22:12:53.832519Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.10.8","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d7f6b4930df680c368db0d604444b39","sha1":"41239565cd5c38258512b07994ed4519b377f3b2","sha256":"58aaf7420e6e102792fc1495be6788297845f3faa42dc59ed27d9bb0944e5fca","sha512":"7b4caee7407b6edf25a24e66ab0eac1398a4c39a937a2d3f92c1ddfc0bdc5f432626069b6f11306f83612399571c16df33ee04b5fbbaf9bb5ca2ae2b64bc4266","ssdeep":"192:urKG4shSuvZL3+ya3vBrPh/9Ckh/xEkmcXV0Ruk8Ie+j2:urj4shSEZL3+ya35rPh/9Ck1xEfIWukC","tlshash":"20d1e86c3695747743fb81e315bf5250a1322789790a8a84fa28d8e328bcd5347c7fb8","size":6555,"data":"","first_seen":"2025-06-25T18:35:12.413482Z","last_seen":"2026-06-08T13:47:52.918621Z","times_seen":5525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/jquery.carouFredSel.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"261216c12320526fa5e2d917f37f9878","sha1":"d822bf383ff9483295eba1fd4c87a108fd67ad74","sha256":"3cf03a6e87ef95d866c4715da2c9845b52c3569d7a1ac20935027fc017a430ac","sha512":"92a60ef0ac608895c77833e569c5985b50253a5dd19ab74b7c686edec9478595283fbf4e56c3f0d81eec5b1527a7fd472392ac6946a171063662578b33b26380","ssdeep":"1536:3YQjF+MMjhPIkwFrHJc2Pyx9b2O68HOkXxEXy7l1pT9Hpyn220DTPRZmtxNpNxCv:z7DY9bfDjv9Hpyn8CxcMM4ODpB","tlshash":"9733d99d3044b69256ab326f967f880f7b30a093e70f6990b055d7f42970d5a033bead","size":54800,"data":"","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-06-08T11:38:09.529827Z","times_seen":484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-08T16:34:56.476764Z","times_seen":895671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-includes/js/jquery/ui/effect-drop.min.js?ver=1.13.3","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a5de31476265a9359d9caf2d0888679","sha1":"c2a28d252aea9643e66c75cbf6d040a81a909f4f","sha256":"998c907ff28ab2440868816edf736766e878d222302f22f26f7e486d6c82e9e4","sha512":"6fe2dae30e4d7b3afda3d044be9aa6aa13f5bffc6d6eca9f9104b4c6236d775990d3fad655a7a2ff3ad28d8ae494e8659768e7f9eee2c0ca52c2fd1d2e8f1f84","ssdeep":"","tlshash":"ff01d0dd61893e4e02ea1bb3c01fde5a912a462f354a044eec51c8fdae6b95c4262c94","size":753,"data":"","first_seen":"2024-07-20T11:44:11Z","last_seen":"2026-06-07T15:02:37.000234Z","times_seen":3234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f541ee111fa40f4b14c0771a1788bb4","sha1":"c784c652a746eb5d1d6632c70fb467975b3e1e76","sha256":"a50e409667edb79d5317913654b055de96d8d1a52852acb17344fe03cdbcbb0f","sha512":"90753ff447b7f59d98de1504684e7239edea38c7630245965cb29a1567c49513ae3fad2b25e83d315bf43f2d95ec46d9669efb53ca82e6a5d1fd9c0fef39390c","ssdeep":"","tlshash":"d0b09227a0cea8d4099b7b33a076418f303455a02f462808162410d843ab8a60037f98","size":116,"data":"","first_seen":"2025-09-23T17:21:14.099936Z","last_seen":"2026-03-28T22:12:53.955219Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c215afb4af3c167b759b28185895d4fc","sha1":"4ec0ab3911d01627e26e9348f8783af41dec4c6c","sha256":"a04ab77354a8ab2ba8ca1bb8337fdab6a58c9cb244cfffe3a9801ea2f3cd56d3","sha512":"0ae6678aa095c18da47e726344900fc4da6576b8ce2ed8647449dcc791c5c91435e7896e044fb262db3e60aac043006c1b5669830b9489340557119fa50a936b","ssdeep":"","tlshash":"a3c02b2370cc44cc0d4f3736d432018f313020a03f472808002404c403bb0b1002ffc4","size":141,"data":"","first_seen":"2026-02-12T22:33:02.095025Z","last_seen":"2026-03-28T22:12:53.958874Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1bb7b821b587959d4c0cc406c49077ff","sha1":"2cb4827d5cd5a05729418b369019b9c1eb0798ed","sha256":"1f93a5f6091369b8b6cdb7be01a6c7044ec8c3af0eeac05a5f0dfb3aea2a3e31","sha512":"cb99f055a8fa7834d3f693bf5c06d7622c7d9340b0147d52d4ab12cd6e1a0d1ae0553f7584cc8f682318cfeff7c34f8273dc5027206add3c1ddf57cef110a5f6","ssdeep":"","tlshash":"68d0c74caa4f605915746a169f6f62c9246d80761c8114a63e455744352581ed25496c","size":215,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-06-08T14:40:49.251702Z","times_seen":14171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kuadin.com/wp-content/uploads/2024/05/cropped-favicon-kwarden92xkwarden92.png","fqdn":"kuadin.com","domain":"kuadin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:08.282Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2024/05/cropped-favicon-kwarden92xkwarden92.png HTTP/1.1\r\nHost: kuadin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T16:34:27.378125Z","times_seen":16244212,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/css?family=Montserrat%3A500%2Cregular%2C300%2C700%2C200%7COpen+Sans%3A300%2C700\u0026subset=latin%2Clatin-ext%2Cvietnamese%2Ccyrillic-ext%2Ccyrillic%2Cgreek%2Cgreek-ext\u0026ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /css?family=Montserrat%3A500%2Cregular%2C300%2C700%2C200%7COpen+Sans%3A300%2C700\u0026subset=latin%2Clatin-ext%2Cvietnamese%2Ccyrillic-ext%2Ccyrillic%2Cgreek%2Cgreek-ext\u0026ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28100\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"bf0cc48c498d6fd37b898c75cfe156ff-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDGWPT7F1Y390HP9W73\r\ncontent-length: 270\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":1337,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text","md5":"d2a67530d371b67731a651279001414a","sha1":"49cc9a0232e6d46376b6e8356654e95d770cb918","sha256":"5bba85f7dbb5e6820ce1a880862269b76ee093208a0fd29a943b26b00707631f","sha512":"1c4103541f3131f2362979ed50c22cc8b3239935d3bb06dd99bce487344706c82b2c327b2a48f524740673147c9495e219e32d1798ba8d6d62bfd9825e574314","ssdeep":"","tlshash":"a8210500200aa631e6101d5d33cf7f298d9e386621a6c06d6b754c38afe682a4362fbd","first_seen":"2026-02-12T22:33:01.960642Z","last_seen":"2026-03-28T22:12:53.918454Z","times_seen":129,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/css/icons-material.css?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/icons-material.css?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"4088fa698c810da65222c803f68ba37b-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDYDYWCW4H47W3K7FXQ\r\ncontent-length: 9102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65130,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"9aaa085b9e60c9e64686bdc5b503db2e","sha1":"461806c0c6891cdaddb093b0cca2eba1ef018250","sha256":"999b3ff1e204d85707226e7191480f81ab7c847d5b1ef67c1d9eb037939fb8d0","sha512":"f1d3441b88abcf8d5670943ab9df601cbafab97b77360d0d2d700fe8a38f98158e21dbae849ec432ba3295dbb39b949990dbcab3ecee25f21db56d118eb13f46","ssdeep":"768:n7xYmW5iuG6UcoJ307fxgxXWB45H627v2S6zvERXsE/fNY0Eu7sxst0OW2ho:2zgPtVe","tlshash":"3e53ddfcd94d00ab9781ea81e3a16f921b0da5fcff42195dd1463d0ea5c762339823da","first_seen":"2026-02-12T22:33:02.024438Z","last_seen":"2026-03-28T22:12:53.806593Z","times_seen":129,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/jquery.easing.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.easing.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"2fe223e0f50312e96a8f0f33e742f3f5-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFE6RM6CK1N4X4V7CHW4\r\ncontent-length: 935\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4198,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d96c6dc5ebeeda3944c9d32427a60716","sha1":"64166fb45f4ae0c6ce70c8cd5e9a31620020985c","sha256":"8924a332d10ef08e1870547aa7c91431c2c79e5b1f5e2a48865385d0fa1a9772","sha512":"de646b4d8f6e596d06ea30d57721d4cc8ad0e6e1245ff97a185d8061921350a91f3bb8b392bc94ae398a255f0c5353ec85a94ab024abbeb572dff074aab1a750","ssdeep":"96:Vc4ItZ0qLkpknUhnZVqQ32Ufsfs74d9ZUO3LfRLE6a2ew2Roh/omOe0:a77zJ7eH","tlshash":"7f81284d3c6d71115333fb7095078819f62d7a674948ad05fc0c4ca11f71a669abbfac","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-06-08T11:38:09.51825Z","times_seen":1197,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"915bad077b69858d6e4c7d235f9faa13-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFEPVQP3CRN8JGPT9ESA\r\ncontent-length: 1896\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-06-08T16:34:16.290824Z","times_seen":193680,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/js_composer/assets/lib/vc_waypoints/vc-waypoints.min.js?ver=6.6.0","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc_waypoints/vc-waypoints.min.js?ver=6.6.0 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"d8cff24574b247ff8ebbbea5e3c38bfc-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFEWHYAPVHBKHMXKSTXR\r\ncontent-length: 2675\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9237,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8853)","md5":"5ff487a413612cbbf6bc391c10ff7bac","sha1":"acbbd8a96ecad33158f29e45afcd41e4b2dd6579","sha256":"357ad057de8ffc0fc9df301dd1873c3d482e926791195ee262da3886269f84d8","sha512":"9af6cf849fcfe777ee1daa2e5ccd79dc1b11013470db78b4c165a81573ccab4f6f1757082cf0fe643c95afdd42283ee0ee89522923a0e1c1303f5c07a8f3ccad","ssdeep":"192:tE/kIozT9DjFA6hj8jAanJVvfikr5IuFQYzpN0c7yPYRXFARk6kJrrAlr:tEMZzT9DjFAC8EanJVv5IuFQYn0IuYRu","tlshash":"1c1251897a0574220bdf80fadd2f834aa337582c640640bdb0d4d4ed19f1529637bfb9","first_seen":"2023-03-07T01:03:50Z","last_seen":"2026-06-08T14:52:08.504864Z","times_seen":7516,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2018/02/ico_bg_image_12.jpg","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2018/02/ico_bg_image_12.jpg HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28100\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/jpeg\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"ddb17f7d2825cd7c7a5f484e8f4b799e-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFG1F94JG82FYQSWRHV66\r\ncontent-length: 16183\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16183,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x864, components 3","md5":"1186878c2256a14df4b09506be6de099","sha1":"875705fa45727ee610e128af394794199065c002","sha256":"aa0cbc52f570f875871f6c6a14a978dbb4df3423588fbbfa925416d6b26fe2e9","sha512":"dd9525308b0e89bf6861ef62c8bb5b55f2a79046599cd4d0f8d0eeba86dd72266fa0d929109f3e0a69796a5dc02a825b4d6ceac078248e91786db476bab2cfb6","ssdeep":"192:YAFgLoJcHU6bxWEf8gBO5MMMMMMMMMMMMMMMMMMMMMMMMMMZrQ/U7141hKTeRQOI:bMoJc06bTSHZrBJTS0LMhZMXhnuAbyYb","tlshash":"41723b52ef0250e6c40e273159da272eb6231d767ef0055e8f8b40b5b9a63e09d1eac9","first_seen":"2025-09-23T17:21:13.84674Z","last_seen":"2026-03-28T22:12:53.882034Z","times_seen":133,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/functions.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/functions.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"86c811f6006a142dddfc88367e359e7f-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFEP18YF16JK4H1NKFMP\r\ncontent-length: 4012\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":15321,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"f1f216166c4934e1b8bb88ef8fde29fe","sha1":"1d620f5b7d5cadfdcdf9e936f8e4dd0cfd1259bc","sha256":"ba8d4cc28ed1f2e9489d85f7516b41d107009f3dfd0d37d2ca89f1504b779bc0","sha512":"a687c5cb13b1b6c0e0bc95833d35957995d9801c855064c28985f0ec910d95791691bff97b54c3133fd4dfa9f81426c12be2c90b24b90bb952b0a873469057c3","ssdeep":"192:Hd/dawE67ve+QFLaZPGvfrBPxz2LGWDI2A8fzx3cM63K7Tf:F8uvjQFLHvfdZz2LGWDIofzzL","tlshash":"5a62a494fbacb46a54773039d83e51cd663e10728b424c37fcb9912c29c15aca37ae2d","first_seen":"2025-11-30T07:03:11.310513Z","last_seen":"2026-03-28T22:12:53.832519Z","times_seen":84,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/js_composer/assets/lib/vc_round_chart/vc_round_chart.min.js?ver=6.6.0","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc_round_chart/vc_round_chart.min.js?ver=6.6.0 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"f25d039bfdd09da348eeb20460af3f6d-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFF5XC124QQ20NYH6BJZ\r\ncontent-length: 840\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":1886,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1667)","md5":"74217068dcea35165be6cd790b15aa7a","sha1":"b5cb5317196fccd62bcf22216b4370a6ed4dbcc9","sha256":"aacbe6744b8152b23dae219633e84b8810d3e52e015ea24e9f315e9a7eb35e52","sha512":"4ea87c037dd2fe9f8f5701f50fa73614d43ea468f3263e992aadc4e383636f062c7027dad76fce5fe43e1e7c628cdac37df416947f93cf633d9eb85119e62bfd","ssdeep":"","tlshash":"2941edaae520289762e72297862fb39ed313b27d0d52312a715484fc0e5a91f343ad3d","first_seen":"2025-07-09T19:54:12.267616Z","last_seen":"2026-05-31T04:31:02.773021Z","times_seen":160,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/presto-player/dist/components/web-components/p-BxRAfMA5.js","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/plugins/presto-player/dist/components/web-components/p-BxRAfMA5.js HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/wp-content/plugins/presto-player/dist/components/web-components/web-components.esm.js?ver=1765352451\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"8144b52db344bbbffcc2996f935cf1a9-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFSS1BYN3R48TR8P1Y4Z\r\ncontent-length: 8986\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":21879,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21879), with no line terminators","md5":"c027b3130557bf0fd5f9a4e1c62ffb30","sha1":"0b14479bfa821ff397b2d81193c3bce537c270b6","sha256":"01101fecbb128dc360358c28e75e5ea478df4dbc54ca05b7cc08b740c2d2dd11","sha512":"48118d616880378f2ef5ec5ff34e738e0ea293bb10df1f398aaf7e97e87d69f94f02fe9fb1b0711e6ab4e2bdbf53073b9ed76883b16d40a90ea8f65ff6842443","ssdeep":"384:8aRZEdAYTvbA1yFIWkphtJCLuKda/4YZE+TYZ21lGgR1C9OkRa7Ph4IIRGy8iD++:8aRZEdpT8AFfkpPULtda/4YC+TYKGgRq","tlshash":"a7a23cba2950e2742af54aed44765062f360362d304ec4f0b24e8ebb147a69b91f7d3d","first_seen":"2025-09-11T14:53:19.592051Z","last_seen":"2026-06-07T09:54:04.748082Z","times_seen":1270,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2022/03/binance.png","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2022/03/binance.png HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"ea3674a4f3061937e69ed7eeaa62d836-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFFE24989KKDSSV9YDKEF\r\ncontent-length: 5113\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5113,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 164, 8-bit colormap, non-interlaced","md5":"9d999e5d22850968f7dd2d0841627bcb","sha1":"949a9ddbbc2832957739c78cac64fe3a74f12aa2","sha256":"89816f3f685191889ad1452c6f00a1a009eb37d11f4947478b4eeca0cfaa1da4","sha512":"b7e0a01c047c1bf2a7e212fe0e2ce79eac1cd089ea778551b3fcfdc8fe9925a7b704990a967c07bfec1d6d7c3a1d7cc685cd9d0961f18d146e48f2ba23cb4e8d","ssdeep":"96:SSPZU/7ZxI/GhTn1roDcq4Hn/4h+5F2aRnbYitmn7aQQbcSKyFL5X9J:SSxu2GroAq4H4+FRbYZGVYS3Fpz","tlshash":"eab17d7debd825929dc72a7744f8255c0b344d9b349251888a98360c2d7be380b80f9f","first_seen":"2025-09-23T17:21:13.859538Z","last_seen":"2026-03-28T22:12:53.807504Z","times_seen":145,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/jquery.transform.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.transform.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28102\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"ebab460e62efc70ad33b519f44407ebe-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFE921DDZAGE02KCQ7C7\r\ncontent-length: 4797\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15261,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"8bf005dc2176ade3111d3c0580d01c6d","sha1":"33215d357d55d6c0aeae9bcf4a1cc88d42083020","sha256":"4e529704bacba1a50034a78bbe2ae83dcb4361d2a56ade0726d060a8f480bb20","sha512":"cfc1b22871907dfecd06327be4de1584b417579e3cce001407fb7728f3bb4dde296d593e7ee1527a222e048eaed4d973200f99801aaf919c13469f4c0aa0ee45","ssdeep":"192:3qEDSXlzxt9sx2lQtT5e4MOPIA0ALGwlLj7BtW7V5NVh5PpTHKr+1rm31e00Y6NL:3J2Vzz9sx2lb4MOgA0j937","tlshash":"2a627358772f000dcb522352e5ff0f49ed7cc1386532899eb61a805a54a585ac2f9fbf","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-05-23T09:52:05.874686Z","times_seen":325,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/js_composer/assets/lib/bower/animate-css/animate.min.css?ver=6.6.0","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/bower/animate-css/animate.min.css?ver=6.6.0 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"aa9db2e0bf8553ccc6d0d31a75c09a9c-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDXPEEKXTPHM0842R6E\r\ncontent-length: 3508\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51880,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (51719)","md5":"8b6dae7f49f2b5fd72f43c405d4417b9","sha1":"a10ac4645869698687a5e08cd77e3d98232ca3d0","sha256":"1c3fbf3f4938451bc3b7781f832b7da84c23eec5b979ac7541ec754e67e3b6d2","sha512":"7a49d6ffcc94fbacdab8ac8da27cd5f211122974c49eb652172674bd27c625037869831a9639eddc7d5d65b9d5d81d3c00fb4948afe45b146b3cb5b7814818fb","ssdeep":"768:/kZlIbIM6YIMIgIzwO1CA5kiDb3CyQ5xrQe/0STbsysb:/kZiIzwO1CA5kiDb3CyQ5xrQe/0ST4","tlshash":"393305af4891229991664b62c3dc5e68872dc67714621cde33817c8b8f87f9f33da607","first_seen":"2023-04-05T06:02:17Z","last_seen":"2026-06-08T05:59:06.96169Z","times_seen":3967,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2018/02/ico_bg_image_10.jpg","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2018/02/ico_bg_image_10.jpg HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28100\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/jpeg\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"cd3703fa26c5eb5eeb64a4a0f5173951-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFFY16QTECCKC62X9SRFM\r\ncontent-length: 101341\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":101341,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x965, components 3","md5":"38f1030f349797feebb0242aeb9b4866","sha1":"6fed5f414b490e6aaa9a7741fcbf00ec582554eb","sha256":"06821ecc09227f1d795f767ac38bafc8e3f5aaf3a65828976100993eee7a3248","sha512":"9bce33fb67e3e8b2cdad7efec22f397f74362fba7255410bd55198c76a48e66d227b5a155d0017fb2d9824f6a9b06b8c9f8b2375b4e7cdbb857603350b37b732","ssdeep":"1536:NyRTqmKXoEjSN1XNoiWFbPWUvJEhGt3j+h5vXCLdGbp5U5XlFyV0C3pnNkr0wRT+:NCTDEIFkPTJE8t3j+h5fsdGdi5aLL","tlshash":"6fa3121984803d84f59d4576e27edabb2e1e7cb1d49c6b3f79c1aeb22d131c8e84141c","first_seen":"2025-09-23T17:21:13.865526Z","last_seen":"2026-05-20T18:37:56.939716Z","times_seen":154,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2018/03/3-1-1-ct-person-1-ct-person.png","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:08.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/3-1-1-ct-person-1-ct-person.png HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 16:01:08 GMT\r\netag: \"429a0f924d93818dba26ec3daf4db693-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFGT7C69MXD8DN2JS9FWX\r\ncontent-length: 5624\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":5624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"4d7fae2b69d7f2708f23ea6f60ca0cf2","sha1":"56c4dc2418ac289bf07ae1c0c6f2099d2d377fc4","sha256":"c02de1dd4b4a4accd2e314cb2ca0d94996feca82fcc6f5627ba6628359c958b1","sha512":"f0b628dee6cfc292b14719879cabc481d59e22a6abed1e1319e5c4d03f598334651b275cd022dfdb29ff58f079bad1aad4e79eeb2f79fb29f7a7906f7f039e54","ssdeep":"96:yhWFI+nPzb2DyrShOcikTUXMF90AswesSOeQ46mgvXGlsK6c:YmIUsgtcfUXq0A6snD4jdF","tlshash":"68c17e6559b6b870c482fefd83b0cbf581b64a1d1e150b2f5df998a16db2208c9133c8","first_seen":"2025-09-23T17:21:13.926126Z","last_seen":"2026-05-20T18:37:56.917419Z","times_seen":148,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/css/ct-hovers.css?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-hovers.css?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"afd6e4738fb962b7ac9f2738da3e72de-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDXP44GCSEC2D99SQBP\r\ncontent-length: 4563\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":56766,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (56766), with no line terminators","md5":"d6b65c516c44b45530569efcfd592771","sha1":"9d5f19b0395585f4b1511dea46a78541ef4628c8","sha256":"1ee1186a1b8ce215132c03d212d96c144bb904c6073300dcf2719f0d00061520","sha512":"0afb2e45dee060247747724c66b8e44ee1a519ece0baf1f0eec28c14a9e529d02fc3fc78bf6815c14332b20c833cd738d959d2aade23886a9a4a91e204a20933","ssdeep":"384:MpB8wKwAQxcKcpBxxsYTZpWzyjm4DI6f9vC65DrIELtzASUoSgQJOQUVjCdiiPZz:vRxzHyBIEeN9XhzNKlJj5Q9FM","tlshash":"f843ed3e13081e54d3a75b48a1cfa1749f6da270fea262eb792f8b4b8316b151133747","first_seen":"2026-02-12T22:33:01.882657Z","last_seen":"2026-03-28T22:12:53.893967Z","times_seen":67,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.0.3","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.0.3 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"c46a76644319241814e05be8713b8e57-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDX8VVPQ75X6DEZG4TK\r\ncontent-length: 890\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2894,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"3fd2afa98866679439097f4ab102fe0a","sha1":"dbc9c4139e49d0d9fb41b7191aad1a2db6c555fd","sha256":"ccd31ffa708d025833f954b3e0560cedd58df9a0d2706b2ccee5f501c5b2467b","sha512":"82811ef42abd80cbebd4a74d35475fc3871478fc25a486b08bb7e04921b7824db56c56b2191e9ab56a421552b483a2e64f966396711e5f248afae9d1ded22cb2","ssdeep":"","tlshash":"12511164660028504bff92d77ea9db047b6e7481ce1faf97b0c21a3c5b786851223e5e","first_seen":"2023-11-16T07:59:28Z","last_seen":"2026-06-08T14:17:33.096205Z","times_seen":81643,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"70426e5d4420bc689f8280efa3d3612e-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDXZVCGCMBA00NFSMEF\r\ncontent-length: 29765\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-08T16:34:56.476764Z","times_seen":895671,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/svg4everybody.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/svg4everybody.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"aed7bff2b53f4ce9fcf39edfe0bbd1d3-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFE4DKGC0Z1293W730W3\r\ncontent-length: 496\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1160,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2f37ee5c2b7f1377e4dd767e6da0462e","sha1":"3804e18a5af7ff39a01c5baa0e955fa36d620c04","sha256":"dacfd6e3a4dba21c4477b41192719929ba989ad0536d681c31ec69d6aa336216","sha512":"2ef5b21a30437ae4ce3b8c3b42423eed6ba4574353c54eed90c8ac13d473d4d43280e38951ea22d3b15c3cf9f2b3a3144841c69f06cb5e3f2bfae0113c743c88","ssdeep":"","tlshash":"7921a8aa9d1231e30e3726fade69914ceb60411b14015a833a7da8808fb047987e1cee","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-05-30T03:59:01.289929Z","times_seen":370,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/js_composer/assets/lib/vc_tabs/vc-tabs.min.js?ver=6.6.0","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc_tabs/vc-tabs.min.js?ver=6.6.0 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"4024275f1d3fad63a8672081b4bd4587-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFER81YAQ7TQWDW4HPXF\r\ncontent-length: 1227\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4192,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3973)","md5":"2f470a58760eed9ec50dd7e6992198d3","sha1":"84bd23fc02189aec468209610e80a6c2a593723e","sha256":"df34f3aef92fa54088e14b001bfe002d36ff6d765b24cbd9f47e2208e103625e","sha512":"e7675d597056d853027e43328f4443010284fbd0ae72b3faf0e7521981fc0b483e4d21e65cb701dba18a9b4e66c3322aa1f6b6c2d8e57a481d8eca135079109c","ssdeep":"48:f2O3fh38YGfZ1NpuWouwcteWZyxwpYw4enmkFfDkH6s2/wPL9geCkxph:u6XWoJcteWZyGpH4mmkPoPL9gYxv","tlshash":"f68112c7b35430a0535ba1db912b4b1ea22a35be400a105cf875d4e67f799062aa2b7e","first_seen":"2023-03-08T00:15:09Z","last_seen":"2026-05-20T20:20:34.125414Z","times_seen":203,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/raphael.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/raphael.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"8322d0c334e141b7b453e7e8cf53bc9e-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFEYRC1RWNQXM8NXVBRG\r\ncontent-length: 21096\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":60293,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60079), with CRLF line terminators","md5":"32e8807da0ad8402be1be8bec9c5acee","sha1":"e9d46ef5cea4b8c425360593409bf82a66d61fdf","sha256":"c717bdad5e5ddfd453c9872d1efd50954f553e0d4cc5555fc477f728da6a3b5f","sha512":"42fd11a0d902098ad1cd05ea62389ac954ba87dd4cf80918911b93a2987c714aab3c2c8a1e43dd6b679f82f7a8564714b649b7d98e1cd1016c1a99d8037d21e8","ssdeep":"1536:dQYvQregCAWnAwA6/ebeO5XcK0/UEe3vdF+ZoQmCQqMik3qT:dQYs+O55D+Zou","tlshash":"76434bd933c530a783a5b6e1647f1607b02ad898b64d8c5eb108c1c6adb88d5217bffd","first_seen":"2025-05-18T21:06:06.138845Z","last_seen":"2026-05-20T18:37:56.877816Z","times_seen":179,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/js_composer/assets/lib/bower/chartjs/Chart.min.js?ver=6.6.0","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/bower/chartjs/Chart.min.js?ver=6.6.0 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28102\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"fb95c785225c4e57b72be52187a5e476-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFF4Q9RZ040XQX4ARNBQ\r\ncontent-length: 14922\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73795,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65317)","md5":"a5408d409564a6760732e4e109be2d14","sha1":"d3aec6649da5c307fe7e9ac984144a25262e3894","sha256":"b24666135c9845314e4dfb7cc1a7d7a350082eb9c8e24fcb5a305ae8230d28fe","sha512":"bc1e6ba15e7ab6e7a540f2acd6d9097d06e9093a8a792b8b079fad1f0686a394ab64e030c929fa7aa1d72bc3a5dae705688a38b2af8e062e6a9e68b19c808be6","ssdeep":"1536:cj8SDd8Z8Wa02mUUPxyU6WVsCRx0hX97Y9e/nkt0wgsmbaHRTMWLNMjD45cCQL:UqmotQSE","tlshash":"f873ea4cf306626a85ab1395340f178d913732602587a92c74bca5e2a5acc1e36fff7d","first_seen":"2025-07-09T19:54:12.258708Z","last_seen":"2026-05-20T18:37:56.939194Z","times_seen":158,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/css/custom.css?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/custom.css?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28100\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"dc73cf91f7f20c45be743e9359a6361d-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDG9BQR2TZKS43SK8XD\r\ncontent-length: 10674\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94771,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"8115d79b41d838bded6d1a1126ed51e1","sha1":"ec06add4a5a3c847716a5e33c8529f9980361fd1","sha256":"57296865cacf7ed59a8a50c6b9580f3db6c6cf2e548b6765afb7bc7780176a01","sha512":"85c3ae3e42080450fdd6fb1248f71581d8ed7007f6a8375d59ceb889bc01d855d3ce40ab0cec5df9aa27cd0ebdc563b6bbb9ad53ecc47c00fb1fc8091a21b476","ssdeep":"1536:gUuvK+s+q+3+GLuZNLnLuZNLJLuZNLvLuZNLCDVVx3AVaV5MGAXrWZfY72In9bgF:gUuvK+s+q+3+GLuZNLnLuZNLJLuZNLvH","tlshash":"e293411b96152daa2e77532d998e7880ef127373c381d42bbaf1c2154f7884897b2f4d","first_seen":"2025-09-23T17:21:13.94536Z","last_seen":"2026-05-20T20:20:34.068058Z","times_seen":158,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2025/10/output-onlinepngtools-7-1.png","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/output-onlinepngtools-7-1.png HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"6bdbdcd4dc78c9981298aaa052b72dcc-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFFDY16ABKQ0CN3PT3D86\r\ncontent-length: 7805\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7805,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 134 x 128, 8-bit/color RGBA, non-interlaced","md5":"5a37142549ba0b01e1c6e8194920ef48","sha1":"ec779b539630cea38da3363341163c842919f920","sha256":"639c80da7fdbcdbe613cbbb99f386ab34d788f92b5a353c82244da8368f3e5ec","sha512":"396ffbd84d557584bbd517f4bdfaaa54a9bf4d3c9badfb2b356bd129ce51b96408f5afd9468b1e8ff31533f6eafb38fe76403bbf07a2c9e6438ed398a7038301","ssdeep":"192:2LaJjgh+nTxKb7HEaMpyKt/gQzGt2mmVYk7/4VnVH:2L1gA7YsChzA2B90n","tlshash":"64f1bfa9bd024a127ef7c4165d2b9faff85303dc13b1ae0502e95d7c1221a29ca3d8a1","first_seen":"2025-11-15T16:36:12.67332Z","last_seen":"2026-04-16T05:30:57.414132Z","times_seen":60,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2025/10/team.svg","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/team.svg HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"f49b87908a79c70823b192e67bb14859-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDZ9853FGBMBTFM53VQ\r\ncontent-length: 1543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3583,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7c7156d81ed785d5baf27783fd8f1d8","sha1":"021643b5ef3b3af8dad778f247e0cbdb4c24a601","sha256":"497b759dadbdb054e60e5773b8e3e9fb0ace4b6b7f63dc82077db74f8fecb3ce","sha512":"80e4945d82045102cd2b2174bc3b72b4f1b9bd099fe327183cd9bb2f249b206143de155f3816ca8e9efd262da65fb2a4332b79f656a4bcb79d1694d96ba920c2","ssdeep":"","tlshash":"3e7165e9cb3d26bc94d89b1ec2aa2e0131a3180d75e34b5c738b95015e22f599f94cf5","first_seen":"2026-01-04T15:46:29.959104Z","last_seen":"2026-03-28T22:12:53.873568Z","times_seen":82,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/ct-form-elements.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-form-elements.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"0cc73568bf2af1e108824faeba3df2fe-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFE6ZHXNDWAYZ4S3JRED\r\ncontent-length: 492\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1751,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f1a3695e2da5368c85db981a9b74fe28","sha1":"0655da7015f75e5f525fb7e063a2e39153b7a387","sha256":"7efc548a27e354ca6f68c23b2955532b9f78d1db0246f12077664d89cfab9e97","sha512":"5d1a264ef5c1b76e10791af06ed135d0041878beb80f49f994a1db3ed2b94391678b18f952a3dabe16d03d2bca5b673aa9a0563f1c9d93abdbc1f0a0667870b3","ssdeep":"","tlshash":"aa317aac767d28ba40ea33b6847d9984d53dc176c20295bbe4fb54900ce6449235396f","first_seen":"2025-07-04T07:44:29.915712Z","last_seen":"2026-05-20T20:20:34.109568Z","times_seen":165,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/SmoothScroll.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/SmoothScroll.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28102\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"c70b78e437ad17e11302493bacc97796-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFE7MWK88MZ4BQA2HP5Q\r\ncontent-length: 5870\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":20852,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e3231804e3d5ba9a5e75e2f3fcfc864a","sha1":"85ba8bf46f104424fde024c3c5976aeb17141f1b","sha256":"92827490d2a95989f1163e13a5de6867ba4ec33b6dd9449c4d36d692a7d7aa79","sha512":"1cd852cc929ced5ee822db4684604dab710d7d18e615217dbb6c15058ce0c19bd339a53bf021bfb62a9040f61413aa82e6cba97446b2669be42ae2e63bfac2c9","ssdeep":"384:HkQ/wP+gdvChAcc3Dv0vlxXDKW571+bC4c99pa+0SPV1upYwGjAvf27L:HkwNAcht571+uf4Vaj+2v","tlshash":"df92c89955422c62157a633edb2b92caf37500630206a115384dbed83fbca7453f6eee","first_seen":"2023-03-14T14:29:01Z","last_seen":"2026-05-22T00:37:27.300431Z","times_seen":97,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/clients-grid-carousel.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/clients-grid-carousel.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"81e5036c51a3793d1c46e680c8c07bc6-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFFCNR947NJB7Z957YSA\r\ncontent-length: 797\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3902,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f2fdff594e5d4fdd3c5ac893b1c40a47","sha1":"d457c76d73132f56adb6819a0f9705fd7e1df1b1","sha256":"57b94d2a4d25cb3de3634362e4d9a9b8525caaf2ddff5107645070310d3b2d67","sha512":"57ce67522f25483e0fdbd84575ba62704e9deb074d8ec61dc6f6ef94f8640540528f008b3179d7604b1bcacd949319f075821ae71818984d6791a42a956fa785","ssdeep":"","tlshash":"468155a1b2af79b89ca72319c13edd4bb63da826900bb424a4f3445c0fa1f59179dc5c","first_seen":"2025-09-23T17:21:13.889031Z","last_seen":"2026-05-20T20:20:34.185795Z","times_seen":160,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/odometer.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/odometer.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"ce3c3cfc04292bc86960183c0f969a6a-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFEP9260RW2N06BCTC5J\r\ncontent-length: 4808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":21077,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (447), with CRLF line terminators","md5":"f9c04e8d7af6e9d51f8566d4f472f494","sha1":"fda7f6180887dcd21517e3575650834be5330323","sha256":"7ec853ce34bd953427fbbdb816ca1ef1ca7a20f70ef4881f25028475e37a1afb","sha512":"3f91fc1aa8ee80e3c782c3dd01c78df6df02a707d6e0b5bdeee865a2e23f00cd17749e83d823d6591fe60700166874d8953ee4b05375cc6f4aca5f726d078eac","ssdeep":"384:/7CmeCN2OvYxE2W/McVcRaP/S4vLTCsbojVFIC0sW8rzQ4S1tOGEq6q:/7Cme/Ov/2kWRaPa4z2sel9ZQ4S1tO/C","tlshash":"5a921d8a6e9623599733733aaf9b1108ff7b482720115148be6c50c56f7293092e9ffd","first_seen":"2023-03-09T12:13:02Z","last_seen":"2026-05-23T09:52:05.680249Z","times_seen":300,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.3","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.3 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28102\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"95a53bc2ebca79da12914e7ebb0eb7b1-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFEP6ZHJ5TM2KWJ7MFVT\r\ncontent-length: 3402\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":12512,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"2e187162915b1d22fd4558fee30f5613","sha1":"3c76d4209fdbcbd3650655852ad4ed73846e15ff","sha256":"6d60e3b25e56d35148888b5a08c8eb0ff3806f9698d4f6f54a35eab7d27f4c2f","sha512":"01948a902de67801566637ec99d82302a8da9b80a31de08fb1f2c0d52aea3beafa804188471320410850f0e96f4ba4c34f6cac6ebb6081359f2e959a2c6027c5","ssdeep":"384:wwuf8OQL0sARrAZcNWL//+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWrGcibLexa2Vau0XD","tlshash":"484235e16197e0f0cbc338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2024-11-04T17:50:00.017227Z","last_seen":"2026-06-08T13:11:08.554167Z","times_seen":16347,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/js_composer/assets/lib/vc-tta-autoplay/vc-tta-autoplay.min.js?ver=6.6.0","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc-tta-autoplay/vc-tta-autoplay.min.js?ver=6.6.0 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"e706ba7e2424d170db0183c895216979-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFEQMQ3PNGKE5X5NAT34\r\ncontent-length: 866\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":2545,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2326)","md5":"ec326b42443a0157a582537ef34df2f5","sha1":"ab66c9ec3093da4e360b62e13074caef8ca787d9","sha256":"6c176a55f46c95137c6700b0777db49956705fe356f8ed5ffcb8b450f6d96b57","sha512":"86f59f4b483698b197a53b49a5157e10fc0bfdea56c4be44d2635f87ff7a9accac0bb5bbfc58b70ec7860343ec2cdd45bca3989b4d608f9af5e14b86a08b35fb","ssdeep":"","tlshash":"d051bc0f7410704a0adb2192d2bb1a8d633bffb81409519c31bc99e5ad7ec1e7613bb9","first_seen":"2023-03-07T12:10:54Z","last_seen":"2026-06-03T19:33:53.073378Z","times_seen":537,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/jquery.carouFredSel.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.carouFredSel.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"18bd42516b91ca602d8650b54df550d0-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFF9TDX099T0091SRXH1\r\ncontent-length: 13310\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54800,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32032), with CRLF line terminators","md5":"261216c12320526fa5e2d917f37f9878","sha1":"d822bf383ff9483295eba1fd4c87a108fd67ad74","sha256":"3cf03a6e87ef95d866c4715da2c9845b52c3569d7a1ac20935027fc017a430ac","sha512":"92a60ef0ac608895c77833e569c5985b50253a5dd19ab74b7c686edec9478595283fbf4e56c3f0d81eec5b1527a7fd472392ac6946a171063662578b33b26380","ssdeep":"1536:3YQjF+MMjhPIkwFrHJc2Pyx9b2O68HOkXxEXy7l1pT9Hpyn220DTPRZmtxNpNxCv:z7DY9bfDjv9Hpyn8CxcMM4ODpB","tlshash":"9733d99d3044b69256ab326f967f880f7b30a093e70f6990b055d7f42970d5a033bead","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-06-08T11:38:09.529827Z","times_seen":484,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2018/02/ico_bg_image_1.jpg","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2018/02/ico_bg_image_1.jpg HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28100\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/jpeg\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"51c87998abac266fe17e50e6cd1ee474-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFFXW36WXHPCSZ7G12TEB\r\ncontent-length: 6732\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":6732,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x354, components 3","md5":"a6444d582842d7178c462499c49d2b8e","sha1":"e3f2c15698e90668e13ed2cad7cf92d848426ff3","sha256":"10daa070bb1c3cb4aa492d52cd7e33c47da45e041684e5aa1a921365384b8949","sha512":"6ecbd626384f0d9b5eb5102afc1f857451e27ac778ba3905f693eaebfb024a9c360101a53142497c0e3f1e15fac4d01acb136e5228ae2c4a963fea2449c192fb","ssdeep":"96:k/hoJJTgqetm80GkXBvNhx8XoVlxHR4xerak1HZRZ85vE/m6Gzh:T4qe4c6xooVd4U7g5va8zh","tlshash":"edd13ba3d704a267c41d173140cfbab2bf661d62ff90072a1a9944669bba3a07e43f01","first_seen":"2025-09-23T17:21:13.863238Z","last_seen":"2026-05-20T18:37:56.889654Z","times_seen":158,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/fonts/material/materialdesignicons.woff","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/fonts/material/materialdesignicons.woff HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/wp-content/themes/cryption/css/icons-material.css?ver=6.9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: application/font-woff\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"db53f1d9f602346f87df11e146e877dc-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFFY6A4NP2K5Y6GYM167D\r\ncontent-length: 88492\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":88492,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 88492, version 1.0","md5":"4957887614ccc9456a40789924f4df2a","sha1":"71da0b3f089e0c502a25576ea931a25204819c16","sha256":"4d53fbbcf651e6ed2e9dd1a23b5e65359ff8368ba1e1c4fee3ef499510c51397","sha512":"b29455016e5707434219d839c59121b29b290e851658a27d406959a037a4ea8b08134d2ec2d1ecbb4607218cd652bc11d511e0751198565f6f74a412c9e0f8c0","ssdeep":"1536:kipw1ZxRc7lb7U9Y/yMu1pCSSyvdi7bvhmSJx1+Wb+0MQhDDDP:3qTDc2K/opCSPi/5Rx1+U+SDDD","tlshash":"05831223abcd8947deb33cdd52690cde2ea198dd1b0722437998943e82c1eee7d50147","first_seen":"2023-04-11T08:34:17Z","last_seen":"2026-06-08T11:38:09.602149Z","times_seen":693,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kuadin.com/wp-content/uploads/20kwarden8/04/3.jpg","fqdn":"kuadin.com","domain":"kuadin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.621Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/20kwarden8/04/3.jpg HTTP/1.1\r\nHost: kuadin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T16:34:27.378125Z","times_seen":16244212,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/simple/price?ids=usd\u0026vs_currencies=usd,eur,gbp","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Mar 2026 16:39:57 GMT","end":"Fri, 05 Jun 2026 17:39:55 GMT"},"fingerprint":{"sha1":"B1:44:A5:9B:AC:F3:25:52:00:21:91:75:61:8B:17:93:85:F4:78:C4","sha256":"E0:56:40:D8:85:96:53:52:4F:90:29:79:2C:CF:17:88:F0:D7:07:24:3B:53:CE:49:85:97:D9:4A:B3:F6:97:4A"}}},"request":{"raw":"GET /api/v3/simple/price?ids=usd\u0026vs_currencies=usd,eur,gbp HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kalyxen.icu/\r\nOrigin: https://kalyxen.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"12ae00da88a601f7f3c58e94498fa73b\"\r\nx-request-id: 845cc261-7ec2-4bed-9100-a6d5b1c214c2\r\nx-runtime: 0.007723\r\nalternate-protocol: 443:npn-spdy/2\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\ncf-cache-status: HIT\r\ncf-ray: 9db40407c8327dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f966bcd72f7e7d4f0e91d982995f4e8c","sha1":"086fa1197c7754348f1d4580e7350b428085cb08","sha256":"de82e8e7c7444b7141908edcb0ddc3d1ffbee99c07ad03cab43c596d12cede70","sha512":"bd6e82d8b3b7e869698891cb4a61791c4898f6297929801530a2a459154e3981c6ecd6e137bf29b88d0d6ee85b7703214da7064c3fe5a0c3173212d991fd1c1c","ssdeep":"","tlshash":"c690024042b01037056468695c646308f847952da04c134e1488cc45d46d1fe854609c","first_seen":"2026-03-12T16:01:45.7051Z","last_seen":"2026-03-12T16:05:51.73063Z","times_seen":2,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":45,"dns":7,"connect":10,"send":0,"wait":124,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/css/ct-additional-blog-1.css?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-additional-blog-1.css?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"1ab713734df1931d090e407e84fbd855-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDXYW8E45CN6RWXCN9G\r\ncontent-length: 2142\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":13309,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (13309), with no line terminators","md5":"ed70b1c891eb81c7187f50d30dcea083","sha1":"8a3b1707c86da119b85a4bfc9f34f608c0f65cbf","sha256":"f56e83df98097c74606f63c35b56e0e72a20de0f194f420d4df31e2de0f4fe45","sha512":"ff70c0db807e4b97403b0a7ae6f93ebede295c483168f04035403403c44845d3cac2fc1bfdb4c4c674460aa2467b8c2672c35e03958d0a453a70327136f2f167","ssdeep":"192:VBF1xuNlhtllyNKjt/XkyDcWj8LOQBWPOIOIBMpsy7qO+yLJYmAbA1RJPK6KN3OI:oNljllyNKh/XkIusy7qO9LJkaIAtl2","tlshash":"7952bc25146e693eb77b61fe2decb0a41e5ba8b3d7d15968f5e6c420c34c24e30a132d","first_seen":"2026-02-12T22:33:01.880514Z","last_seen":"2026-03-28T22:12:53.883671Z","times_seen":67,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/css/ct-preloader.css?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-preloader.css?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28100\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:06 GMT\r\netag: \"2ea63a7a033e3d31df3d96960a5ec5c6-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFD3JM56JEW9KDM4K029\r\ncontent-length: 677\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3259,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"f67d979c93da4ae5cb1ca62261d19df4","sha1":"8ad553fb8f726daa1bf40c730c0627806d530adb","sha256":"567319f85d81a0b9d661c472bd31e41854318372040fae4d140eb96301650b37","sha512":"a15e574490b23878614345d2b82d17bf4a4893921de79c9b9598b2f32d56a66814e57d573ae42fcbf6bdfc994ed5900d708e432862df9dd45f22506a0a4e1156","ssdeep":"","tlshash":"5b6168b87965c1825622ef19b7f44e300fd872739d56c4b7f0922c1dc2c06ec9a329ab","first_seen":"2025-09-23T17:21:13.857918Z","last_seen":"2026-05-20T20:20:34.079011Z","times_seen":163,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/style.css?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/style.css?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28100\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:06 GMT\r\netag: \"d853be5dd8a0fe3594c033a0c2141f8e-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFD5N3TT59JCYF9CKDC3\r\ncontent-length: 59259\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":319644,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (33549), with CRLF line terminators","md5":"153bed32355b0ccdb158e75fc7e8be75","sha1":"95dc8d7b3b9e6fc5069ec2b3c14d746b1c91e6e1","sha256":"9bbc5f00a2812065135f6e4593f4bf5b756a35339af4fe0031b2165fc3d1ffb3","sha512":"a6d66bc492b69e7d1a06989d1cba7fc47c8a49cbf2dd11be27e1d0d9d4dc0b43c5cf167a8b1d3ef962f7b9a689811ef5600bf97660dd467efa2f1ef1e8640250","ssdeep":"3072:Nd8rcHtmSVN5AWk/YK78eYRwfwOSqxfr9h961RR1Ro:N6Q5AW5qfwOS4","tlshash":"dd64b7a9aa0106465333df34e3d5b775ee2a21b3cb0704e9f694d5158fba94c027aecc","first_seen":"2026-02-12T22:33:01.92884Z","last_seen":"2026-03-28T22:12:53.829885Z","times_seen":129,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/css/ct-header.css?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-header.css?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28100\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"8aaacbf2a76877763038ae65a9cdb8a7-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFD6PWJEGHQWJJ415ND8\r\ncontent-length: 2595\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15754,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (15754), with no line terminators","md5":"9d4c249bb440a36ffd7972d7d50f1b56","sha1":"3a8d4669542b2ca7e19b81adb55c166e09fcb868","sha256":"da7e1429591722fdb005526646f57d89c3252c36fda3e7eadb4c969cdd886ff1","sha512":"16d4d8d0d9f0324ed42d1a5e20cae950b48d7f8d3c4de8109e15a4f26bbfb7e859eae13eccb0ed76d09100197826b84ffad5355db5c783c4ee0b388932e60ef6","ssdeep":"192:7vzxx5bvsvsv7/VnT9AVvRvIi7vRmv5LvaA5EgJtaFEN8uuoFmEtRKpeX92EGA6i:pjSStT8N1O515cESFoFmkuEGA6Lvpo","tlshash":"e662851aa9d83a3813375925e2d079b463394104fb726951b3f6673fc68de8902b3bcd","first_seen":"2026-02-12T22:33:01.891245Z","last_seen":"2026-03-28T22:12:53.908445Z","times_seen":67,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/css/ct-perevazka-css.css?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-perevazka-css.css?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28100\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:06 GMT\r\netag: \"9cd2fead9409cdab383c8805fb2cc87d-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDAR0Q7AJHG15VP1DC4\r\ncontent-length: 556\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":2010,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"a436b5a41b6c43b4affd74e7c1432209","sha1":"663662ab1eb1479997f64dc16122bba828382f32","sha256":"4953ad5a8fbf630a59b8101b138c2dbc776832939fe6f19e46052d552bf22b01","sha512":"8c1b2868746b358d5cad28431c377aaeb2826c77813f5fdd064b22c61b2c0ee8eb55d6e42eae0d53c9c3551ae415091f9f69cf0392c70da6f2c73ead01d7760a","ssdeep":"","tlshash":"dd41b055a34a9f47273b5a3ca69c76104fab61d9ff830f2c7db4391210458ec233a9c9","first_seen":"2025-07-04T07:44:29.935695Z","last_seen":"2026-05-20T20:20:34.085563Z","times_seen":165,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2018/03/ico_bg_image_17.jpg","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/ico_bg_image_17.jpg HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28100\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/jpeg\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"39170b512eb02fc030c11a18e7c0acf0-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFFXXDX8341DQTY20APFS\r\ncontent-length: 181984\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":181984,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1176, components 3","md5":"5f4937231d239f01c8503d7bb7cce83b","sha1":"c801abd3e5d669897a891fe66ed997eb13de5073","sha256":"5ac795ba09b7890a433d7ab2909f2532a2d9e0acc415dfe57f6e2bd62f31e38c","sha512":"cf95aca979a28da1ee8cf823daab8c9f866cc789005d9f7e1ce69022de40da396c12a79dd95cc195beb912885374bb1cc8dd1e6ff6796b588b1ea2ed28d1b57e","ssdeep":"3072:ioWCJz83R3nk4ESh9s03FWj/5RFkTLKvqxNtdgmpn7AtftxhxjEETbuq2x+NB:iuz14ESl3kT/C+UNtL7aTfjEEfZ0+T","tlshash":"960412a2e5d934f9c0bc5bf1038213368e67e5e99be7710d4f1544ba2a0839aecf7164","first_seen":"2025-09-23T17:21:13.816899Z","last_seen":"2026-05-20T18:37:56.915412Z","times_seen":156,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.6.0","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.6.0 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"754042f16a4b7fa3ec1927c221cb9e53-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDX9VBVMA7T41ZVQH35\r\ncontent-length: 42080\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":485297,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65358)","md5":"cf41d159bff445828e1ea9dba51915e2","sha1":"41b76a6e211ae7817be30d052e4a642d734e13a7","sha256":"9882a286ae102ec1c390fce55fb105dfa3adf34f60f4cb0d45bd347c2ff64363","sha512":"ca84ae65aff496de2763d3acadf15dd010f4a866485676a0398e1c0f7f558ba526b8cbd24c68703f2e5744706b9a0d440a3fffcbdb68b2f9a89606ef7de62407","ssdeep":"3072:vRuQvmKEBVJh/PJMcokaCeLYtz+RJwKZ1kkUSbxhJwdO8BEo2HwSMxnp5ANdl0gg:vRu3/+ch","tlshash":"aca430b2f894241f23674cbd30e0b92abe1701f2d5c21fae7568e6945e0686f353a735","first_seen":"2025-05-14T13:55:44.787961Z","last_seen":"2026-03-28T22:12:53.804761Z","times_seen":131,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/ct-settings-init.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-settings-init.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"3274606c3e6fe3267ef7cc1cab846626-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDY6ECQ1ZP10Q4CR5RY\r\ncontent-length: 646\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2214,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7124eef2105e189c466ea7fe9d5d19ce","sha1":"a945b8d14dc5ee31a2c80df4e36e9ba72381ca6c","sha256":"543c4d50d21606290baf64841ad9c672a045fce6b8112d5b26736792b13b22fd","sha512":"1164dbdcf82670840e5673b2c5e4a55d8d93aa9011f8ab2a49a1076ca6c5c7771ec2d397ddafe11a8b1f7bce3cb43f2184185136e007c820d895bda54f8be6c3","ssdeep":"","tlshash":"464139194120723111773325be6bd31afb33993315472a12ba6d864c3fb2443a796fad","first_seen":"2025-07-04T07:44:29.91364Z","last_seen":"2026-05-20T20:20:34.047601Z","times_seen":165,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/js_composer/assets/css/js_composer_tta.min.css?ver=6.6.0","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/css/js_composer_tta.min.css?ver=6.6.0 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"f09788e414cef8487cf810e2924aa97a-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDYE06EW0YRWGKWNEAP\r\ncontent-length: 14662\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":274869,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65358)","md5":"7ce23df41f0df13d8aa07058990195e6","sha1":"c01b09e729d3e094c91a9baa9a6e4a3c2df4f8dc","sha256":"dac931a95dbb1bd18a6440cae735af9d8c52b383d426379c3bd9520ce375421d","sha512":"a400560f1b2a3aa1064d70f64a26edef459950a3059682d9ab412ef81653f5ba649515ff34d234b1f57c87b95c77d23902b4f54105fbda91082ec14998714905","ssdeep":"768:bxzNdWjDhTsG3iD4Wjt3hk2wnKicP1PVW48Ycs+lx5PVGm7IsgpspzdlICjqC4B9:bUHuUiusij8","tlshash":"d5441360b9400697a61f6c7c3594f739280776b2d24e9fdf7062ea60d6882cf752e31e","first_seen":"2023-04-11T00:56:32Z","last_seen":"2026-06-03T19:33:53.057512Z","times_seen":555,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/css/ct-countdown.css?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-countdown.css?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"ea12f63f4fea2b68d5f2ea4dea26884b-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDXSNV4PN6JSBM3TKYV\r\ncontent-length: 1179\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":7464,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (7464), with no line terminators","md5":"212f5ce9f95f1d2ff0f6efe93c3acf61","sha1":"c3c7f5f6899c9edb16c29729996939208e52c09f","sha256":"aaf441d85a777d30a82e3b28288e8242378b1674fd891ef37e82dd50a7d3a4b1","sha512":"b0d30c7db2a57f148ff22e8b0500a99c3e3e84a3c69b1a8d01b8fcb74bfbfb790baa728f1de73d2952da2bab94f963857d34075cc792e034dbd07d94f8718961","ssdeep":"96:hrQXrdjPqo3LIicBB9pETvb/Rw/8lT16Yg:hrQXrdjz69+lT16L","tlshash":"43f156d04e70133baee7e114bbc4271c3eda9d02f316459d63afa52ebd6e8b9102c549","first_seen":"2026-02-12T22:33:01.869793Z","last_seen":"2026-03-28T22:12:53.805683Z","times_seen":67,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/fancyBox/jquery.fancybox.pack.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/fancyBox/jquery.fancybox.pack.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"ba9211199178f246574d0741d8f73c54-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFEPW0MDAZ8F352VS1RM\r\ncontent-length: 8172\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22639,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (623), with CRLF line terminators","md5":"040bf1868af574af7fc2bae859610dab","sha1":"0d9ea5c972d2654ca096abcbba05fdaafde5c0f5","sha256":"3e366186c798c4ea66b36b7c19da53efddb835fe41a045bf659631fefb12b535","sha512":"d88ce877b6fd32d2e74e0d4e8e52fe970212606fc43c773887e0a3d84f1b489191f675e85ec99cbfe064e40d57e137d1cb675f35f0fe4c39404821d17844c89c","ssdeep":"384:dNNT29YgJNPymD2mKshcPGa1MIciM/AxQNX+ODW5LJN:dN8q+NPyWzhcua1MIcimAOiN","tlshash":"6aa219a1b2607d57c07b2622514f510ea0320523fb078dfa747deae45aa5bc822b7fdd","first_seen":"2023-03-07T22:59:57Z","last_seen":"2026-06-08T02:29:52.177332Z","times_seen":449,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"c0f17d1cc46d4df32b8da0ce0a97b852-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFEP77SWM5APX4RVNH4P\r\ncontent-length: 2177\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-06-08T16:34:16.272125Z","times_seen":190835,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/ct-countdown.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-countdown.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28102\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"59ccd76ab292a673e8ffbea0b63933cc-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFF0G5GKNW15HGZ64R66\r\ncontent-length: 2059\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10981,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"b53c15456ae849b6978f22764cc8545f","sha1":"8d523359a44058d7b90a38e968d3f3f4a3329a09","sha256":"845d2e6d1b14e199b65a530a085ca25671f426adad4a058dc0f22e1f8a5ca008","sha512":"ca1dc4f6a074a6cfd70169764a0223850b7149e2103a226ab20a3e7ec8b36571d74bc6788333f52e0da7a3d4faffa324a851f005b0da26e90c7c3ad198ac7ff2","ssdeep":"192:5dmS0ZbhtuFmS0RTd2DITa1GAjuAloK1qld2lRBo38qlV7E/lYD9DDDHDS0x5dro:KFZbPuYFRTdZTaXif2c2D","tlshash":"2a328544cf7a13381ba3a25d13ce6a8cfaad6183d3094c95fcbc8d096f69c797118d98","first_seen":"2025-09-23T17:21:13.9739Z","last_seen":"2026-03-28T22:12:53.868308Z","times_seen":136,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/isotope.min.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/isotope.min.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28102\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"5c291950e6de4ce65ee8f95460179636-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFFDEZ0F444YDYD77BYC\r\ncontent-length: 10832\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":40858,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32031), with CRLF line terminators","md5":"27888208753e5e26022f374afc4a78c3","sha1":"bd4ffbf2d51242e94f5ea8e7395f14fc1452301e","sha256":"57a45007f24b920e1cb59467217fd99f6b7aca9806c31fd2fbdf8ba38df471b4","sha512":"02d8135ccfdef423038d2d04dc43e67e93bd5a10e88176d0af44387661b8110f5f207649964a38faad50884b2430f9ad9be5cddefdc41ae6894d836a25c99d5f","ssdeep":"768:jG+z0BFKEyby+HvOWvevgOkYtUdEvWBzigMPpIFxIFkuJKx3D+5+gY07E6P2:jAybbO4IUdEvPgqIFxIFkUe3CcgY42","tlshash":"d0039549b74435208387b5b5a2af010f723b94bde94494bcb699c8fa2db6c4d1133f79","first_seen":"2023-03-07T01:06:19Z","last_seen":"2026-06-08T04:23:19.158403Z","times_seen":999,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-includes/css/dist/block-library/style.min.css?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"4aa1aa679642069f88b1873e7fd91437-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDX0JG7KDNB17TMHDVE\r\ncontent-length: 14943\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":119695,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (55871)","md5":"693359d40ab420bb23aa1b4be239f162","sha1":"67719855e95b9befb5e16556455ea78f3b9d7d92","sha256":"b4cd2f5507698b3ebd388e2d1ed31bef9c5704a171ccd53720c27c66df2510c7","sha512":"3ea55e5e2d2cfa21f66701e322928f3199042b8d3eef8f611cae1ee5d931903fb69d39b5cbb72f493e84f477b56f44fb24badc73f2c298785a9f29eb72b6d8a5","ssdeep":"3072:SoeJBCCUQg5MG7x+qehvX02dclkWwbFpPu:mfUQg5MG7x+qehvX02dclkWiF0","tlshash":"7ec3621417b4dcf935ffa73a5e4ee258a107aa41c68a67e6e066d190718ca490cf3f0f","first_seen":"2025-12-02T22:14:51.412485Z","last_seen":"2026-06-08T00:16:28.06498Z","times_seen":21473,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"5a2c79b29b568ab8ba147833362f57a2-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDY7KWNM8GD45E3FD8Z\r\ncontent-length: 4720\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-08T16:34:56.510304Z","times_seen":825532,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/zilla-likes/scripts/zilla-likes.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/plugins/zilla-likes/scripts/zilla-likes.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"55acf69e9248bee0eab4ef5544ee24c1-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFFDY489N7DAT9Z0KF4RH\r\ncontent-length: 860\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":860,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dad8b8c214b2f2e2b4db0f0772a33b80","sha1":"b62a6d21e76f157735ba73dcda2a562dde3ff8b2","sha256":"34bf1c5d8c775f2578a2f3c3401969f62381261aecbe50233d7ee2167cd453e5","sha512":"b708db25b565f9c79aa9de057b1a17ae49e8ba625007d40e99d45568d12d0903a2b6dbb44f8d8914033d949046c34eaf5ce311f3de208539d6401fc4fdce4291","ssdeep":"","tlshash":"3311891ef9f275a10833307e4ebf4a017ab911135024dd88b9ed89805f8592c6476eb6","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-06-08T11:38:09.599263Z","times_seen":557,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/ct-menu_init.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-menu_init.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"f33fe2e6ee463cc1e325036f68233b7f-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFE4Z5XXG505DHG62T4X\r\ncontent-length: 4363\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":18496,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2fd9eb6b5b7430e469cd7cf545d397df","sha1":"9869441d1d5867ca84e55b3483346869cb23b248","sha256":"45b8976413a9e4545363693140cd898ab1a13bf67ac062a7f33657e77b34657a","sha512":"56fca6a524fdf3565eb2289a5e1df38dba73d89c71ac3b9006bb33d54d5b20635adc58a34da10742eb86180a1a79b53f34300b51e4c1b499926d992aaf331fc2","ssdeep":"192:YjZMv5B1WVEq1avIWERzGBHATxF2Kij9z3HvdABs16Ib1377k1CdsfEIW/tO:3XWVV1a1mOZ6+vX6EI2O","tlshash":"a88223d4361fa23e42b7b31bd17f5589ea3dd2308206546ab4fe505c29e281753b3eac","first_seen":"2025-07-04T07:44:29.921002Z","last_seen":"2026-05-20T20:20:34.104456Z","times_seen":165,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/fancyBox/jquery.fancybox-init.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/fancyBox/jquery.fancybox-init.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28102\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"192df71d964601889b4ba9507c8fa7f6-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFFEPGM10QKT7NK7E8Q6P\r\ncontent-length: 927\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":927,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e187592c12567be861c07161dddf24e1","sha1":"ae2d0b80128fcf0b3ba03f1f07d6786c7166e76f","sha256":"ab7671fe8daaeab204b145e20b7e0585502147c23f9ebc0afdb4bc527c28aacb","sha512":"d253a28aa168e389e1b1518468d044fffb043af35ad8e7506f46bdc66e5da5f43709d7123fe53b8bfe62c0bf378d15a7db90411509424b201de44c07760568df","ssdeep":"","tlshash":"7811dca2b1be1a1d8ab53b5caa3be1388e3fc415c04388b3e5aa505811d0fc012d77c8","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-05-20T20:20:34.131354Z","times_seen":183,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2025/10/ico_bg_image_21.jpg","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/ico_bg_image_21.jpg HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28102\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/jpeg\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"ace1e08e97b94e00119333c711fcbe50-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFFV4ZBRP05P5ENTDNQS3\r\ncontent-length: 73867\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73867,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x942, components 3","md5":"458a0e14f470dadab5c34323e17c17cf","sha1":"2ebf6135d3b2557b40068fe7679b7a63a8ea0786","sha256":"e8c9be9e4900e6c017e17a426d7787d276594de17c45703d745a4848f740d05a","sha512":"ee4459dcf0366cba28f94e422df00576ffada051ab05b547387cd6127e90afa7fd86cc3d0f2f943c7e226512d96a7bd83d73658f77dbddb475dbb829a9c3c81a","ssdeep":"1536:NR6ylmQrNMaXX7z6/2je6bRyOOGOJKYfJSb9OkB8vZkv6D2duL9epfyE2vEjqijm:n6HmDy/2jeK3OGEE7qv26DzL9epfyFvh","tlshash":"0a7302cbb70d0daef9e49038ae4c1b4555bfacd245c0061d3c05d0adbe19397b96d1e9","first_seen":"2025-09-23T17:21:13.917053Z","last_seen":"2026-05-20T18:37:56.895538Z","times_seen":158,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2018/03/ico_bg_image_14.jpg","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/ico_bg_image_14.jpg HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/jpeg\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"4227fa42d8718f6d321d7a99eb14cdcb-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFFV56E9DDPE81G0CCWPN\r\ncontent-length: 20399\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20399,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x577, components 3","md5":"4ebb60c90b921e74f1ccc5cf12f8fa0e","sha1":"0ee975023d22ca00478be58824bec08e6caafe71","sha256":"50323967d41b7789c88c0322c8636bc7106294b15f0df21f31b22f9ea8832db3","sha512":"ede18a7b347596aca735e06be50894db65391196d61a0aaf809eb9e52d061c46f9763425867e6ea53957e1549ae9443b9c5712e1e55d49103d725a2173fd27af","ssdeep":"384:2Zkv8K4B85oTDhVvf/sHborXK81QpvntlDpcAxvF3sQl4NeKRw:2Zkv8xB8GJVn/sboDK81w1tXxN3sI4Ns","tlshash":"57926c120715871bd88da3b22c874260be659d4df525400bf2a720b5af9d3fefc2d1d6","first_seen":"2025-09-23T17:21:13.950169Z","last_seen":"2026-05-20T18:37:56.926755Z","times_seen":158,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2025/10/3-1.jpg","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/3-1.jpg HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28100\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/jpeg\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"4bb649f4aeaa582b639c7197bc57f44b-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFFXPGHXHNQM19PX54DAP\r\ncontent-length: 56101\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56101,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x599, components 3","md5":"4cd8932bebc3794f5db9282819d80eb2","sha1":"5d86bf9d7def61f522eb9b33ee9c9d062dbc85b8","sha256":"ff979850a3dd684c7daaa053d592c5424791cdbf6b162fdbb82dc7de7b0112c9","sha512":"3235bc41a8d8e397ddacc1b2139eab1ccea4033517bb4a94fd9d7ba123037ff3075c63111cac54b5015fe33521fb78556e1f3805ab077cced64ba036b28d5b95","ssdeep":"1536:GIZMf0uMmSpsBZBbzSZen2tfc3fpqd/oQ/8l:BZd36Z9SptfGSA","tlshash":"4e43f22157a01250e07dc3f74b854a20da9f7f566bc84c9a773ded3f312db2028ab59a","first_seen":"2025-09-23T17:21:13.814692Z","last_seen":"2026-05-20T18:37:56.907428Z","times_seen":158,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption-child/style.css?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption-child/style.css?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28100\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:06 GMT\r\netag: \"ee65d4b7b09e5213883c655721621d8b-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFD6NW34YEQ22VH205CE\r\ncontent-length: 1475\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4734,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"34387ecab3438430e1db1ddabb819392","sha1":"2399057aed36574d63c95999ca748524b46feccd","sha256":"4246028fcbae512ffb144dc94ecd5d1be28f406833fa3c950a603e6f00f0a2bf","sha512":"eb9367ec5a2261705ab1ca084205438f784849fcc90f5e22c76ccaafde4c9f53c820ab0356c26809bd4007e3dc06d410cb46b9bf059662d7faaff791721d2d1b","ssdeep":"96:nbhhUXNaSCMhZCfKgX+7C1V+ZUXNXw/qoaG6cRxR/CzwQnxTJZxRsp0xy63zCx3u:RMh8zXLr+CUq/l4S26exe","tlshash":"afa186d6b6b0920078e25a647a63fb467738d417c30adfb8bad0201c9fc53c69662b5d","first_seen":"2025-11-15T16:36:12.602426Z","last_seen":"2026-03-28T22:12:53.822827Z","times_seen":85,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.6","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.6 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"351decc9486abe1dd3ca2f1a63dfbbb3-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDYY89G001XAV7C5ZYG\r\ncontent-length: 45676\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":124185,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (42889)","md5":"e5cd17674ab1e7e8f556707b9e894175","sha1":"c1b2a4a4f6fde101fc5bb4918c75fe8c2b163eb8","sha256":"a4aca4b3ad7c3976cfbd935294d071c1e276081e7a8ddeaf030ab5b5e280204d","sha512":"7da897d1b48763afd7e941c5a2ff10b58e0edbd511fcd2cc1ff9369fdd5ab03666ac3173f3973b4306c8c24c39c7e9acde15217fab961f122e091cfe9c59309d","ssdeep":"1536:AB3xC9/I/66Q1+sxBsWGXkWRqrlv7j5E5L3M8s+Adumi8IyyJTBwvrZ9IHsUq0KK:a66U+9UWRW7CK8s+muaydMr/IMlK","tlshash":"04c33cd87151b432029666a5453f0a0ff23b9d19750b852cf328e4c87d389a991fffba","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-06-08T09:38:52.678644Z","times_seen":1183,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-includes/js/jquery/ui/effect.min.js?ver=1.13.3","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/effect.min.js?ver=1.13.3 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"98edd0a8a6304b518438e1007b569492-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFEA8JFWYW11SHEEP59W\r\ncontent-length: 3754\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10332,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10150)","md5":"6bdd4dca7cb09218e1860e6e0ca8a823","sha1":"dff6ac08d3ccf6f1d4f31c2d77ffa19e5ed112ee","sha256":"b7f28f2464e085279a304d2abee8f0c89f82077338dfe0dd44882ed0d53d018c","sha512":"69c128b655b22b150090d585fae2d1e2375400edac8a8f61a9fd12cbee07d464af43820bbf32e21ad55ff12087f9172f51f70943e301a2301c2e5e3a90993990","ssdeep":"192:TrxXtNLOw5Lx/jq/XOnAm5M5f6IyfGmojJnd9:TrxXt4AN/DNxojJnP","tlshash":"e622d89cb44178254ae7a372406f9e0fb031585cb19b4544f239c4e9a9be98e5037f7e","first_seen":"2024-07-17T00:03:41Z","last_seen":"2026-06-08T13:33:24.940695Z","times_seen":15499,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/vc-accordion.js?ver=6.6.0","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/vc-accordion.js?ver=6.6.0 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"4ee044334848a80ac48661ba3ab66443-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFEPVQZFNPWG7F99ENAR\r\ncontent-length: 3243\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":17314,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (472), with CRLF line terminators","md5":"3c29cf93c3bc245080754d39a6e4d2ac","sha1":"453708fc696137e21b16ec98238da0e7d6e8aa1e","sha256":"7bb5b8ee58a2d2cd085abbee00c98ab59d7d9f32109d1b3f38f5a993a2f20fce","sha512":"ff84608389a22504a8bbd9f89c1c8058a45b0b05c9179203ab5b7c8c1d5cd652457f02671d0b69c560294b5794bd31254a4ae297bc1109b5da0b2a6b91d3833b","ssdeep":"96:nIllHzGN4FBcRW2Xj1xFb9bkeqwZ/weBsidIWrbDZNzgikvnNLwesL2TnZNbMyQz:nIl1m4IRW2XLk5fiP0ENyNRgEGQgmW","tlshash":"5c720291335c2451839fb3a7463fbe8caa3cd0b9944b60bc7874e4946ad14291bd2efd","first_seen":"2025-09-23T17:21:13.936809Z","last_seen":"2026-05-20T18:37:56.888318Z","times_seen":160,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2018/03/ico_bg_image_15.jpg","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/ico_bg_image_15.jpg HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28100\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/jpeg\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"af80ea809dc4a91ea80376c76896be3b-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFG1DG5HVHG01M0YYMQ4C\r\ncontent-length: 31371\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31371,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x999, components 3","md5":"786b62a430113bce0d29bffdc7b74c11","sha1":"5d788d55b79fc7732739decc608d5fd595930132","sha256":"6738f45cc12be7faf1a7072db6140caf8cf9e55ca4f59f9fffcf9d802eddb5f2","sha512":"ecb33c182acfc6c4788a528e0f367c38e31524861f13e13bba7dffd38b109e84863c8f1a2ed9f3fff29eb6801614f4785fa2e666c376114a2419e66a7fd7f5d7","ssdeep":"768:pcHpb7mDKuJDEOp7h62aAg4B+S/mpXljR/:ypbKuuD1pdng4A","tlshash":"84e2be3ef20cd486e46b46fb6892b3696d36bdd2740d1b24e50380df2782b3849345eb","first_seen":"2025-09-23T17:21:13.818499Z","last_seen":"2026-05-20T18:37:56.924146Z","times_seen":154,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2018/03/6-3-ct-person-1-ct-person.png","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:08.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/6-3-ct-person-1-ct-person.png HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 16:01:08 GMT\r\netag: \"8b48bbb417e2a617e21d48d208f67fd2-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFGTADQB05G7D75E7QB1K\r\ncontent-length: 7703\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7703,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"139587ee1590b65ae116ee0b53f408f3","sha1":"989d2d9ddcb42b2c723f6fba4be89d21185c4d1f","sha256":"c00a1808e9d3c3e023acb957df85c6c02ffd617ae7e2a9f5e733541fb727ad61","sha512":"7ea5e9db4529c83ed6214fc37539ecd55d6477ffe38fa285022c4e72705bc758f0650edc2e8bd4bb951a3388fcd44916b5d038bb2eeebcb5248ee06ec3cd5139","ssdeep":"96:ypL2iKWJArcGvbGEuUZkXw51sRJbgFeIo3y9jWaxhLMDDO8p0xo4PX5M52iqnIpx:u2YQPviUuX1B5C9Wa/AJpUUchNBcx","tlshash":"b1f17d85c2139025f3a693377df7856c087e4cde9b63afaba25356145c82b4914d888f","first_seen":"2025-09-23T17:21:13.830132Z","last_seen":"2026-05-20T18:37:56.9287Z","times_seen":148,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2018/03/3-2-ct-person-2-ct-person.png","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:08.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/3-2-ct-person-2-ct-person.png HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 16:01:08 GMT\r\netag: \"74e0336ede445cf850783a72af8c25e3-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFGTG7KEHQY5EWQ6HVSA5\r\ncontent-length: 7534\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":7534,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"320dc3eb07326903bfbe06fda8242a05","sha1":"da0ec61f0b0d5ce4b6a93983d5686b3bc563aef3","sha256":"f59e579de32ba2c8469073d12ac77c54adc8d5a1f43e03e7921351c8469b8037","sha512":"9f0d5be981bc53aca2288a1f8a8b53878bfcf5b64a40185de5209a8d0023aa53c7681719019bfe9f2935092867f2fbe902ce00023d2e454880a3c238ffe653e6","ssdeep":"192:h/CrfYOk55HplUhIXxuflDv8N1zwNmCZtxV:hcYOApgI8p8NKoOf","tlshash":"65f1af8dcb58042fe5a31233c51fee375f6a029936bf19e95a73b2c6540b228f0718c8","first_seen":"2025-09-23T17:21:13.840373Z","last_seen":"2026-05-20T18:37:56.899298Z","times_seen":148,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/fancyBox/jquery.mousewheel.pack.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/fancyBox/jquery.mousewheel.pack.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"6af58695c33c2530ee7af84b120ce827-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFEPCJCSG6VZDHPPB492\r\ncontent-length: 637\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1396,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (524), with CRLF line terminators","md5":"b0f7225166e217cfb64b80ae8ebbb604","sha1":"5d6f224e3080fd4066f8ef5c63d3f467e9d29e66","sha256":"89063c896f3ff978cbecd97312879f288e207d519781425f0d7f9dd203dff653","sha512":"6fc1d6e2d9e91598d77bef13232821318141b0a628728d005f2fc9c954c848e07ddea881e33d37350aaae056d9da1836095eacddfb45f758c1050e7a993664d3","ssdeep":"","tlshash":"cc2171403b8818eb55aa9bb2a92b6343f0ba909290433c8f70b09cc0ab90dc54331d2c","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-06-08T11:38:09.601545Z","times_seen":1803,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/css/ct-js_composer_columns.css?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-js_composer_columns.css?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"5a5486172d2d8811c638e5e8c0029133-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFFDYFCT9G4JBS5F065A8\r\ncontent-length: 163\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"7b32c62970e5d8ec29fad1f0975c6d08","sha1":"75a021d00881028899c4d7b25dfa9f77a24cfb78","sha256":"0f9062da8be55f5fbe3d94228a14b7609a0cec84b70facfbcb39ad08be670107","sha512":"736277a02f70dd1a276df0be5342838a8a4253cf028bfb5eb4ce2f38a94f83db19bb16d446faa054320d302c8518daf7a3a97eb8865a1f5ac2de5ad6bf1a44f8","ssdeep":"","tlshash":"72c012311e251835c0325056c1e11c446b025e0a52b3c887e401e857d8846795828654","first_seen":"2026-02-12T22:33:01.843865Z","last_seen":"2026-03-28T22:12:53.814002Z","times_seen":67,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.6","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.6 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"35e662f284b525730218e41b2c59685e-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDX3CSCW43GWYVNQBMH\r\ncontent-length: 12215\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60333,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators","md5":"61e8215810a2bb1b3508e130c80fda90","sha1":"caf7d572582d14abdaf4410762ca7115c2375de7","sha256":"982c1f335963f2284703682fb6251346477f078bd1f8ea9c53449b7a5c9bd576","sha512":"1368b4707be9c3732ad129116ef7a6c7c6028bdad2c2b6a29488e252e0d4ee73aeb9053167b46ba37045a042ee9d29dab9ed8d0c7ed7ec487d90a44e61505b53","ssdeep":"1536:26hMbEX0uzVQw/kubIukhqQ9HmU2WMghSk5h5rEUUrIUkx0+8rkUIpLM+IrAI9dz:nb/kubCs","tlshash":"ae43c67198921da82327ca81e7ec0bd49e25cd329e030cadf597321dc39e599467e7ce","first_seen":"2026-02-12T22:33:01.919088Z","last_seen":"2026-03-28T22:12:53.898134Z","times_seen":129,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.6","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.6 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"3d0084f7a218c8bdbf586962edf1303a-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDXHEWKCTGTEQ2W68HG\r\ncontent-length: 82422\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":337085,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (64270)","md5":"cffd0a1a3f066b4c698d79e5bd8fe124","sha1":"e042a9748e92e2f45e133b57ca2052ceb25ef98c","sha256":"e99d918c3c8ba1f2969ee1ddf46ef087a09e819c141cfb9aebcf29e82ee73fbb","sha512":"d3aacd9f216547f38f4cbe67ddfba2389a7526a04d7907b76b29cdaa48ed143c69fcec703e807ebfa115b566cfca33a2b89ebf76c4d5bfb9f30755219d85292f","ssdeep":"6144:IPI6TQxgMH4N7CXH2pD5p+v9NWF0QJpkXRdud/RDrnTKbl7wnoyJD6BWSIle:IHsH4N1gv9mJpkXRdud/RDrnTKbl7wnc","tlshash":"2f644be8e931787a04e742d7d05a440433b5e92da30785a2f2bbe1695c5c68d02ebffd","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-06-08T03:24:10.990048Z","times_seen":583,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/css/ct-reset.css?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-reset.css?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28100\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:06 GMT\r\netag: \"786173ac1cee6f4da97c3ee2459aad73-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFD47CWYBD9FB6CTCEW5\r\ncontent-length: 1266\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4097,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"4b3c589bc9c1635c3a6679dd054a4682","sha1":"6ad887b2f4dd83c695bc661ff1eded4131d3f632","sha256":"be4f6284aa304b9becf68fc6c817f9384ce831d9d14f708a1211c4e59c3056d7","sha512":"f7e4cf88a10192ded4d9289440acf82a17a2962b0370bc1fe6c33dce258a91d67258a06a149a2d641480e082a446b7845498c5b70147e4b5a1781ef168f258d3","ssdeep":"96:GTBNWefkzbdR+tIMfW/5cG1JqBdDEcPTDEXLgEH7:GTvW1d/MfkDuDVDkgEb","tlshash":"ee8101fd660012cc93229f58b7f2af645e1001718e1f817ef890adad92c69152af2776","first_seen":"2025-07-04T07:44:29.918936Z","last_seen":"2026-05-20T20:20:34.083179Z","times_seen":165,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/css/ct-grid.css?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-grid.css?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28100\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:06 GMT\r\netag: \"d4925d231db9cb707bd3055e35eb25de-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFD4CK79XBJDQMJ4TWTA\r\ncontent-length: 902\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":7936,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (7936), with no line terminators","md5":"168190f59e5dc198a3b25a5f35301a90","sha1":"96d7e8ad2a8ff591c81fd3e32605e69cfd8a2df0","sha256":"908b6843c450e4c2502d33762bdf26ad300d1f7a2d69095bd499c6bef1ccdc36","sha512":"8fca70c579d9589c84626334f40280d05e7146e179146e2254b4c8ed55c993bd017e7c80e36cf0318258ac68554bc756a2ed862c02781714b6ab7e1afee8faf2","ssdeep":"96:18IvHGGEfETIDAR4yPzqJAj0dXEtEhQjI5/:18IvHGHKaC442JaaUShaq/","tlshash":"27f19fc49d316d67503ace2b7091bc4b50ab380b3bb2eebbf3f52d559caa9874851503","first_seen":"2026-02-12T22:33:01.87692Z","last_seen":"2026-03-28T22:12:53.833354Z","times_seen":67,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2025/10/exchange.svg","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/exchange.svg HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"1fd5b9b6016b75db74ccc4a6a906572a-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDY1W6EFXB4CKBB2T8K\r\ncontent-length: 9060\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":23499,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a69a67f83ea54c19898a3eeff671a312","sha1":"452cfac167d7b3848110792e04aa7cb7bcd5ade7","sha256":"cdb5e844aacebe4a6133defb09a2749451bcc360773de958cf6fa92aea49b498","sha512":"8c66353844ce34b164add4646e363ffe5e62c79e8f24406729636698e111d84b5b1fb9764db974f949a40a4bd526d68b3330f31f6593d746022167bf6cb0143c","ssdeep":"384:Jd1qObtPD3k6xzkUhrlyN9/1ErNLkeBgV0Sq5rcLFZYz90vnL1tdvorJFhTH9N0a:QcPD0Az7ryNELkeKqGnt56/PN0a","tlshash":"17b285cb473881f4785c53bc5a7a2ec7337564ece4b1864c937f99046943eaa2728ea4","first_seen":"2026-01-04T15:46:29.930321Z","last_seen":"2026-05-18T02:52:55.681096Z","times_seen":103,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2025/10/kucoin-2025-Q4-2.png","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/kucoin-2025-Q4-2.png HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"80a4e93898a8ea4d49006798b08359a1-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFFE32Q2Y219TYG3BKTW6\r\ncontent-length: 9670\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":9670,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 164, 8-bit/color RGBA, non-interlaced","md5":"9c2533073e8f452bd4d199abb0158c41","sha1":"506e9dfb938a2b093c0ecb866820d650e21d425c","sha256":"db47d35f7dbd1546f83bfbb5d79814a9b7332524e74f606a3596789eb879f2dc","sha512":"936e4caff3ffeeeaa2c14e785a953d61fa2b8d4d8b0929d080ab94414fc2ab839953f327c738b3f44082104e5321580f69a7b2d2600d9e392b412356a2d337c7","ssdeep":"192:3SsknkanQlCHJ3tPXRX5wUS0bwNlLR92DLKbJbhDIv3J+JVscXQ1WE8PgXMSkl:i/nx6Cp9pm40lLRgLKbhyQwEFPeI","tlshash":"d6129ece86e0eb4a277d7a4a49b8a3279e3716c0a483b7b528d4c9d1206d153dc0ddf7","first_seen":"2026-01-04T15:50:41.341702Z","last_seen":"2026-03-28T22:12:53.836602Z","times_seen":120,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/fancyBox/jquery.fancybox.css?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/fancyBox/jquery.fancybox.css?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"27fdcebd6329e6ce3712429d05bdbf31-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDXECVAP54D13NAK300\r\ncontent-length: 1130\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":4388,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"caf2bcc067214f053488ce0906bd11a5","sha1":"9c2023253751662efc2bd5f5b80ec333fe16d412","sha256":"44ce7be5b22ba80e67c3f7cc0c3682ba98f3aab5def5332bff9fef1d83bac579","sha512":"cb39a93d9f9006ece0dfe8be246af13356a80817275df7d2d2cc16b0e165da8e4bb25489654a412e5f586b8791651f8b1c115580b710d1066dc69210559841cd","ssdeep":"96:wZ3IuNurbCJNn5UHZXaa2sOTBslSpUqSnqbz0zO2brwa82M:w/JN5kB2sEBqA7SU0zbrDM","tlshash":"6991cb6e9655300aa037af84a7bf5a56ce700451ba0701bfb0ecf12183d57fa71b28dc","first_seen":"2023-04-07T23:48:35Z","last_seen":"2026-06-08T02:29:52.222208Z","times_seen":351,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/css/ct-vc_elements.css?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-vc_elements.css?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"b44504264d94bf0470cc917572a4f5d6-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDX8P2J5HDP0N84R737\r\ncontent-length: 705\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3268,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"84108daebf35697ccbbb809d0c7b7926","sha1":"8a2fbbbbf1ef10c61e0f167129fa87c311b6d603","sha256":"eabd0522a5694f6aeefbcc9e76e6951e6326da3436d0b183e737587ded428e86","sha512":"7e27e282ba1b730ec9f11933231fb654ddacf1f17871ccd125ef521b00a3add351f784783d37e208fe107058e5a46f360c604c1578984e11ccbe55d2e0302a08","ssdeep":"","tlshash":"9a61327434a63dcf76036f8a67bb622d5e0694a4fd8b2eadb7dcd170e6095081830196","first_seen":"2025-07-04T07:44:29.955259Z","last_seen":"2026-05-20T20:20:34.053443Z","times_seen":165,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2025/10/coinbase-2025-Q4-2.png","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/coinbase-2025-Q4-2.png HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"4b3acc7dc8e17fa91504d8ebf19f7d26-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFFE3Z5BNK7K2SRD8RQFB\r\ncontent-length: 10706\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10706,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 164, 8-bit/color RGBA, non-interlaced","md5":"fba92594ac075f3f248ee46d2592498a","sha1":"20c7aed53a79c8a1b1729f9bf9350b670d6630fa","sha256":"7e0e563404a4c6459c2c7fe6b8e20807427d5a0267afb34ab3dc825313a621e2","sha512":"c989e3d4fa8f68d88cf1ef249c4a5ca99aceca6b5375e4d70fc0ae157ea30944c3a08df75b18c2a171af913448d082a5323a182e9dc2e8e0261e8d5831169743","ssdeep":"192:3STkngUgnwaleF0gGPZsAg67egPsOU3tgWb2XiXx0Lmi:i4ngUPqiKP1sdHbAiXx0L/","tlshash":"0022ae0af48dcd10930ed55a99d26c334ab76184ffe1ec2e94f818a7607857a8c3c9da","first_seen":"2026-01-04T15:50:41.385843Z","last_seen":"2026-03-28T22:12:53.828094Z","times_seen":120,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/ct-lazyLoading.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-lazyLoading.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"a9617b985958bb98db839217c8e11586-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFE8TVS2339WBFEPMEV7\r\ncontent-length: 2984\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15556,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"9e48f74ff2ec65ade3b0485ce35fdf51","sha1":"87041cd6aef74b8f0ab3d1ae2e03e2ca0db14cf0","sha256":"d5e2c551ce5c731d97827275aadc2c47329529d8a022739aaa306b8d7344f802","sha512":"3f8bd4bb1f29d83293ef4d18a5db6d7d2d85e3dd5604b9b14f1463ccb56698dcb420e1e79eaa4734e36b8cadf353f26c7bcd4ab272e59ce472d2ba8485a06d45","ssdeep":"384:+gpDy3SLtWmOeKQCfa2ZouzFHK7zRr6IAs25qDohbZxG2C7zKr6FpvqS:+gpDDt/EfaQzFHKZuxs25oohbZxG2C7H","tlshash":"af62fdd8724f266f86ef33ab913f464ef83dd532440901bab47951d898b5c69a342cbc","first_seen":"2025-07-04T07:44:29.938072Z","last_seen":"2026-04-19T19:53:53.663165Z","times_seen":146,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-includes/js/jquery/ui/effect-drop.min.js?ver=1.13.3","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/effect-drop.min.js?ver=1.13.3 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"821c79c64734407d806c5285126babcc-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFFENFRF924S1T924KD06\r\ncontent-length: 753\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":753,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (566)","md5":"6a5de31476265a9359d9caf2d0888679","sha1":"c2a28d252aea9643e66c75cbf6d040a81a909f4f","sha256":"998c907ff28ab2440868816edf736766e878d222302f22f26f7e486d6c82e9e4","sha512":"6fe2dae30e4d7b3afda3d044be9aa6aa13f5bffc6d6eca9f9104b4c6236d775990d3fad655a7a2ff3ad28d8ae494e8659768e7f9eee2c0ca52c2fd1d2e8f1f84","ssdeep":"","tlshash":"ff01d0dd61893e4e02ea1bb3c01fde5a912a462f354a044eec51c8fdae6b95c4262c94","first_seen":"2024-07-20T11:44:11Z","last_seen":"2026-06-07T15:02:37.000234Z","times_seen":3234,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/ct-sticky.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-sticky.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"1f4defaa3a3920d057cadb5e8efcff32-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFENSS383BGYT50PAZ0X\r\ncontent-length: 866\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4075,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b130b246c03785e643ad6bfbac5660a7","sha1":"e0e9e64011da6c96b3a4f580b83c2100b19b77ee","sha256":"b9c08ab5c61a0f866530d88bf7b6660821a56be1b1f516462852243107b30f5a","sha512":"5286ab78afeb6d50ce5f3b07aee03cb518bda9767e1b57e70c19ee877377efb93ac2398a45ee0b90759f1daae0466dbc15f8759755ef1c58bad78574784a125e","ssdeep":"","tlshash":"02814c4b667a2162d673b77c8e6a910cf736021b208785193dfc90d92f7202552e7fbc","first_seen":"2025-07-04T07:44:29.911713Z","last_seen":"2026-05-20T20:20:34.157199Z","times_seen":165,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.3","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.3 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"240754d21a149073e2e55b13ec9950de-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFEP2NJ0XZ4N50T0FM8E\r\ncontent-length: 4031\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":13452,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-06-08T16:39:20.272893Z","times_seen":205795,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/jquery.touchSwipe.min.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.touchSwipe.min.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"d88999c28f5bde4fbda3dcc17caa6811-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFF9KPXK62BK2CBNAXWZ\r\ncontent-length: 3861\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":11969,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11969), with no line terminators","md5":"938114de9f102f3797bdcca94089e52e","sha1":"13ea5f32ec0e653bf9f814cf1ad8cc885ae483b3","sha256":"2457851c744cac5ef83b9485017d9d17242906f10f90071b8706b7c850e26343","sha512":"8155c2ad40cf7b299ab973ac78b460017a9e0b84c22755d7cdc188023b4a8387540a20659b68c5b1762ba55133c9af4c2769a7b6c1534cc0d41476334ac2462f","ssdeep":"192:x/WeOvsOa4PUT2ua8fwSuQQLv8opVPq4hVLE0qLypcb0P7FWD02zt7tNyJcUqz5E:x+tda4PK2uaLnQKbnPpLLEfLypcb0328","tlshash":"b232858a7792f46beaed2274e24f4703503e9d970a0d8071e051eda5b9340b8a5f6fc9","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-06-08T11:38:09.592242Z","times_seen":526,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/css/ct-widgets.css?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-widgets.css?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28100\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:06 GMT\r\netag: \"d0385dd5975427834c36637ee63dbd71-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFD73NC7D08BQ8D64ZC5\r\ncontent-length: 11876\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":83308,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"93bdaf73f3fc24703ae635e8a95d20b1","sha1":"f8ece8ea1556a3b467adeede8cba565448f20d8b","sha256":"d36e14f8e75d0bf691403c0d5b463aa7d292697f7e46f7cae9709b877a777a24","sha512":"df032802f6961ae979500263eb8d33f74a5eab81170db6363f899b60b7db3759082cd8091bc8ea73981c97a21b0171b50de881491e312cc8861b6f22d1ba7f0f","ssdeep":"768:NjO/RpmKWcIo9x0nk6kAkikmJnk4jdO5B2lcemJFSmAe68:QHxok","tlshash":"488353aeda1915467237991967aa7ea1ef9810d7ce03096cbed073014f7a4cc0a73ecc","first_seen":"2025-09-23T17:21:13.851769Z","last_seen":"2026-05-20T20:20:34.062267Z","times_seen":163,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/jquery.dlmenu.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.dlmenu.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"d4124748d7798b1b1f03ec99fa0fe2d5-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFE49T179B6W04H9XG0J\r\ncontent-length: 2360\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9087,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d43500d68f963d397e43a2e28e36ab4c","sha1":"e266e2a5e0928c616a0bd522b0286384badbbb97","sha256":"bcf3b7824f01e6df13d4c6b789117e99589814b10e5c54289b824e9137c3b969","sha512":"bfb82a0414c5041c0bf58d84988465791851eb5faa28acd8546994846d1a97b9ef89932775132064064848115f46ee54e3edf6984d37e63d68f301f97c9e6c67","ssdeep":"192:OidEVHbqA4JfG3+gZf5Oy6a8oalaIcpbJDlL2HS:OuEVHbqA4JfGVbJlL2y","tlshash":"041242c4330f376b96ab733194bea005fa3ec572a00d116e79ba25de185605953e3ebc","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-05-20T20:20:34.114322Z","times_seen":182,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/presto-player/dist/components/web-components/web-components.esm.js?ver=1765352451","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/plugins/presto-player/dist/components/web-components/web-components.esm.js?ver=1765352451 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"7ed6aa449914d9ca3bba3cab709a7880-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFEPY0H3NBWB31RB9EAK\r\ncontent-length: 2106\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7210,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (7210), with no line terminators","md5":"9b87f794937c2ae5df31e5e511fe318e","sha1":"01a6d9cbe423a8d3bb2885ce81d72d287ca79e88","sha256":"545dba3956c64fe4c4d9180ce27a6bd1d99c590d2542c20458d75f9480f2d1f3","sha512":"5e20138e4664b884cbae8ffda7715c7a244b9fb5ed4273aea1580f30c44f0f75fb2872bd645086763eb2b51ed8bda8634cf5cf310479eefe5e6a161a6b5db8cc","ssdeep":"192:Kf9RlITvkEHsWRTRpHXHVrO9X/JXPr45VdLyB0I0cFz1OSmJ1nL4J+W5l9l3uX:Kf9LIlTRNXHVrO9vJXPr453LyB0YsSm1","tlshash":"43e195f32e2c2870daa3c06f38a918d44d3513d2e3601294faeedb2b34e574f561a755","first_seen":"2025-11-13T05:54:05.473487Z","last_seen":"2026-06-06T16:21:36.889442Z","times_seen":518,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.6.0","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.6.0 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"a5f7f7e3076cc9a93247b5d9e8ec6c12-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFEPFN6T22ZKGZNWR420\r\ncontent-length: 5570\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20637,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20418)","md5":"b00a0fd5e283160549de2c7b36243b7b","sha1":"f2401243950cd9624002921265e46a518851f12b","sha256":"314ce6baaa3218eb171fa2c278d7fdf1b9872305dfa667e9cbf2df77c83a9a88","sha512":"e5e5a424ae0b221f578433025184deab93115575391a7feb1528f45e621976b3049f6bc5e1fd484b469a60c2d4706f7156b61c614c28da5bd41e110f1e49d2a6","ssdeep":"384:sekk5QRKhEJhCoJptuxOqU5SE3RG0F+D/W5OhS4uLSav4Rd57q:sekk5xhEJhCoJptuQSEhG0F+DO514uuA","tlshash":"4492c968ba5070f556b7373bf13b3b197233383a948651106415d8783abed4e222bf9d","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-06-08T09:09:47.025395Z","times_seen":2613,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/diagram_line.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/diagram_line.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"174ea1a57abf61c9a3ab697e19c06cb1-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFF28E92DY3BK5SMMQDJ\r\ncontent-length: 548\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1591,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"fdd5d3007f950d7ce06ded6ab40eba01","sha1":"fdc5e5909c613a82ff03de097b74dfa6028af50f","sha256":"8310f3b925f0513da6d9d90f28af1eb51a2f3326df70056e6c0c958c20b8c728","sha512":"04722a163a5f9f9682ea4c9717dbd00d702fe894eb38b74a9b4722332aa0311fb009efcaaf98f605d5bce8bd69549a223ffa0fae970d28bd1f80fa4a08c3c561","ssdeep":"","tlshash":"97313294b029644d1b7b2321743f4a0fb53bc453b52a90d8f9d980a33aa48623323d6c","first_seen":"2025-09-23T17:21:13.947389Z","last_seen":"2026-05-20T20:20:34.098334Z","times_seen":160,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/ct-fullwidth-loader.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-fullwidth-loader.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"26e44bf6585d3d22eadd0f5b0a59f55b-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDY64PK2XJ92DZPRE0B\r\ncontent-length: 1108\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":4984,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"dc962d39be85ef44b21982b97e7a64a0","sha1":"498ca29df0bce0700107917533136934ddff4258","sha256":"dc00316a4d0556b0452bd5d1e9f85214a95857434cb138cb3c7e11637daa6e8a","sha512":"d1df30f865702a0f4f3ef8b81050818eee217b102a518b0efe1213b3b5c8f30a804c9b4aae0afe92a4aeedfd158124c3cc99f334b54b55ba27dd64f4bd87e63d","ssdeep":"96:S/eWn5xeReoJ9eFet8D+ifgRRX5PyA07xkdik8LM:inrIt8D+kgdnv8o","tlshash":"37a1671d357000ba557ba33ad57b458ffb7510271306c4a0b8ac9c992fb1da236e6fd8","first_seen":"2025-07-04T07:44:29.949614Z","last_seen":"2026-04-19T19:53:53.743824Z","times_seen":146,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/ajax/libs/gsap/1.18.2/easing/EasePack.min.js","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /ajax/libs/gsap/1.18.2/easing/EasePack.min.js HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"01fc29a157f1a1d5f31706964a71557e-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFE1KC8MGMNVK91KV3WE\r\ncontent-length: 1986\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5467,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5082)","md5":"9d2271c362b9cceb4f2ab2d6db6a2f27","sha1":"11b4f8c33fd1fd7d1394cd4cb45aaf6f1a264b8a","sha256":"9d7f951efc00f4b874e6763c12b1361b8a2c86111e2fac2f9aa87f2a97ddc146","sha512":"69487bf8ac5a559f39f8a5917648bf9fc8aa0c71e320b63d360e3dfad80dbe42ecbd5ef341c86664b8ae0b7716d1f9e6a02330ff3fd1f2c4dfedc41d1863e6aa","ssdeep":"96:jfn337jspsFBicg1i5vcG1rXJ7gnrCmcy//Ay6ylByAYxOPVLrlPzQAOQ77:jEpsFPg1idcGJq7c2/X6uBPYxOPVvlPH","tlshash":"fab164893932a1994076aa64003f0107b77a55eab60c0aa9f99dcccc3e3d5d5636ef6c","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-06-07T10:29:30.526716Z","times_seen":413,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/quickfinders-effects.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/quickfinders-effects.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28102\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"6530779c3bd6aecc4af38d7e6c2c887f-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFF8JM9B79R0CPVS14BY\r\ncontent-length: 925\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7834,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b3952202a606168bcbb375a47ebe715a","sha1":"0e67fd3eb8a0caa9ea818b03f30cb59c92cb00d8","sha256":"1f849fe25ba4bf7809712d20569e3d1c87b5c97dbe17f352d26d3c612d75765e","sha512":"3b32b37d07ffb20d46fd28689bf0a14d06a67d72762c3af4e76f70998e13b0a0b65bab3c01374cf49fc72343f292b582eed00dae6ad980bf75b14c9143acd614","ssdeep":"48:Xy59uhu4LdzCC0YPu6luuzXqu3GGYTgunWjlg3/L0+WKQ2QALX2K2qFx2mxSYKQa:i2FxVa/LZ/BjuBjq+qd/LK4o","tlshash":"e2f139c179de290f13fb62e95ab9dbf1870fd424dd90061af6b140b04677a89463bb38","first_seen":"2025-09-23T17:21:13.84476Z","last_seen":"2026-05-20T20:20:34.098986Z","times_seen":160,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2025/10/1-4.png","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/1-4.png HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28100\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"feb7795c920f150b4c03de645810530b-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFFXS4G2E01NCBP2ZVQZR\r\ncontent-length: 47841\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":47841,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 584 x 532, 8-bit/color RGBA, non-interlaced","md5":"3e770683cfdf6b856c6101560d065757","sha1":"87a8eb2a5c9e54841dc04280afa807fc033397da","sha256":"25cdeed5590c5ccca1e9302bf849a1a56dbb6635e0d2dfc9a0cadc9d3e510b37","sha512":"1f997a496650e4767d09ebfd6a6983558973d7b0aad5e3ce77d48ccfe8c1a017c11202338ebc5c11523a201068ec0d4c0ba85480533065921fa0c43a047d34c4","ssdeep":"768:sKR6uVo3tys0aTrIkJDxlM4bfit0g99KP0n0AsWju/5B/BvqTUyTm+e+fT/8:sBuVodlD02DbLLmEotHa/5eTlTmjg/8","tlshash":"8723f257e2fc9d8c2ad51383204678a2b6ff75f94d8081504ae2f1b37bd69213a16e35","first_seen":"2025-09-23T17:21:13.834634Z","last_seen":"2026-05-20T18:37:56.882693Z","times_seen":158,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/simple/price?ids=bitcoin,ethereum,binancecoin,ripple,solana,dogecoin,tether,usd-coin\u0026vs_currencies=usd","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Mar 2026 16:39:57 GMT","end":"Fri, 05 Jun 2026 17:39:55 GMT"},"fingerprint":{"sha1":"B1:44:A5:9B:AC:F3:25:52:00:21:91:75:61:8B:17:93:85:F4:78:C4","sha256":"E0:56:40:D8:85:96:53:52:4F:90:29:79:2C:CF:17:88:F0:D7:07:24:3B:53:CE:49:85:97:D9:4A:B3:F6:97:4A"}}},"request":{"raw":"GET /api/v3/simple/price?ids=bitcoin,ethereum,binancecoin,ripple,solana,dogecoin,tether,usd-coin\u0026vs_currencies=usd HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kalyxen.icu/\r\nOrigin: https://kalyxen.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"2b6d0987d017c961fd4eb6df8932540b\"\r\nx-request-id: fa4c4075-c599-4a24-b8ee-3169ef957a9c\r\nx-runtime: 0.007386\r\nalternate-protocol: 443:npn-spdy/2\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\ncf-cache-status: HIT\r\ncf-ray: 9db40407b81a7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":207,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6159adb61156976964e8e095e43f3355","sha1":"60e93e5770987a599da6a66d19e441c10cf4271d","sha256":"b7fd3e45675f34f3840d1cebc6bbd8fc417fe498effbdba89051b24f8b4438c9","sha512":"1fe7c60ec62bc792b37c10851657dc5f369f822a75846d3c50351a5a0a78696c2db4eeb4d1d58f792afc34e664a8142a3af8cea26f55d1c5a3d0f8a2922cf5c7","ssdeep":"","tlshash":"b8d0124050b0457b193a8ef58c553761da8f457c551d035f659cf5860c6f3ff05414e8","first_seen":"2026-03-12T16:01:45.767317Z","last_seen":"2026-03-12T16:01:45.767317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":43,"dns":11,"connect":8,"send":0,"wait":131,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2024/05/cropped-favicon-32x32.png","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:08.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/cropped-favicon-32x32.png HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28098\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 16:01:08 GMT\r\netag: \"6752ee63096a5592e269bd092d33dee5-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFGP7AN3HYCSH7T62EKMR\r\ncontent-length: 1337\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":1337,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"401ec1ee6cb4d94f7555fe9b6d23c271","sha1":"d67908fffac1f44ee61d9ad2f3480ba1d79b504b","sha256":"e294708c5c5322d9f09b56713ed987dc6a6fe6de34c36221bc784ebda6c7576b","sha512":"cce72c9894fae83941349d1f79b02a9bfcb1ea276c8732a625153ee89011ac6f3d40a021f4a3af20be88ac9a0e56a6918e1477c24f18346eaf59bb58b3f6c048","ssdeep":"","tlshash":"9621d85104d34c806763e2a0728b22d89f5a3e9c78352c3c1029d6ea19f2d7eb6f63c8","first_seen":"2025-11-15T16:36:12.62441Z","last_seen":"2026-03-28T22:12:53.924292Z","times_seen":77,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2018/03/4-3-ct-person-1-ct-person.png","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:08.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/4-3-ct-person-1-ct-person.png HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 16:01:08 GMT\r\netag: \"00b6931578feb8655f5390ef5c53b65d-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFGTP69Q61QWGTYDPHZ0K\r\ncontent-length: 4330\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4330,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"71f5c1c49263d5057bb25f58466fd988","sha1":"e4c41617bed780a190cf1ddbef03327ea9e943bc","sha256":"f0e1503933eefca5525489e23b5e0aa6ba9b381987dcbe50fc2d0da6267ecfbe","sha512":"d4d18b9cd5839abdba8dd83a773a2eb1eb5b8810179b85ebc885a5ac3d8f29e6aa5a2960ee529b06cd4aa895a0532baa5cf9a71d99b78425f52a02c64796477e","ssdeep":"96:y15qh/dTsZh2RDpyz5D9P37IY3OTzItfcNC23LytdeW6:25qvsZQolLbOTMpcNC2b0dE","tlshash":"82914c2eabd48e25d9e92e31dce9f64aca5715f1078993b68dd3070f4d0a20f54c2283","first_seen":"2025-09-23T17:21:13.896993Z","last_seen":"2026-05-20T18:37:56.927639Z","times_seen":148,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/css/ct-new-css.css?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-new-css.css?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28100\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:06 GMT\r\netag: \"60c4864c6e2bea2199a34df0e1418fa4-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFD9F4PWV2BE2F15T18P\r\ncontent-length: 8940\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69882,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"dadbc97d3c0617e2cbb8add82c0f680b","sha1":"baba0a88021211f22fcb1617d56383fba37d1964","sha256":"c316311eb254253a29c702891c6e1510b227e90e59352801d2bdf17c513098fb","sha512":"9ed1aa19bc8202aa50a782a2fec8abf104076b6768a3f56ce0691eb1041665efa3fd7cfd63c4fa1665bf45dbe055c2b66fee2fcbbbf5d79fb55555b0f9f47035","ssdeep":"192:4cc8lnMjYLbuPbo5YcNIiTgapyosoW7DiOCcOhpAr02Thh01bCOgbgdKzVAE7UHT:znf8dwT0C5zv82qGs2h1IeVc0y90N+k","tlshash":"b76335da4a42082e1237e52563dd1b71df576663df120124fa98a2328fbfd5d01abf8c","first_seen":"2025-09-23T17:21:13.93982Z","last_seen":"2026-05-20T20:20:34.059581Z","times_seen":163,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2025/10/white-paper.svg","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/white-paper.svg HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"1e4380ecbb9457e0a5d2dbca524e0cce-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDXFPYQC6A3JQ61ED5E\r\ncontent-length: 1606\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5759,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0ac7604fb6549093533bc763e9a91ab8","sha1":"4fa2ee7e08df271a5fdc392d073bf90168ba40f3","sha256":"aa5961e259f40a4a90d1f7e049520e0719df41f700db6bffa796291556407d78","sha512":"d51673fe512dc47e48622817d5963f39a0356532ec30b34d2b11b684840542a246782aac20f9ca99ecb5a7ece4af631621901b87df4036f99fc17f56dc69fecb","ssdeep":"96:7tz1nnHzOzr2tjzDDaNGVzdVOpDeLdfSuOPQy3jd60T4:Jpyz8n8GDVT5SJlQM4","tlshash":"dbc1445e073d86d4ec6c63ac69b635cb737879acb472e294e38b6c0528017fc19609b1","first_seen":"2026-01-04T15:46:29.871275Z","last_seen":"2026-05-18T02:52:55.694149Z","times_seen":103,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/ct-header.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-header.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28102\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"aad93590074d99152e87c61c2809db74-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFE7VWZ59VBHWDAVTG70\r\ncontent-length: 5059\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":20279,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (393), with CRLF line terminators","md5":"7ef00cd2d9c2f86846104284cf9bd9e9","sha1":"b18724c7e0974cd565f22587e8bb4c7ab2f08c01","sha256":"93b43a812409aafada24dd8efc44e94a2e0b479f44b9c70a922aee7fcd8c31eb","sha512":"2d05b2e9e68af110d213103ed150b07dc5e14455c0430cb5d4e130264dc7ba6b7c928b5d1051d97f6712af8b56603b5f925e185f8773d6d77fbe8d3a30ba8680","ssdeep":"384:DrqH5dirmD9jHz4UdE13wG/ZtxxESJICiWreVOvz3l:Gv9jHz4UdE1P/fxxESJIb0eVOvz3l","tlshash":"8f9293c4b38d756bc6d733a8803f9988e63cd035905540bd75ada0e668788bc9372d3c","first_seen":"2025-09-23T17:21:13.892888Z","last_seen":"2026-05-20T20:20:34.092281Z","times_seen":163,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/themes/cryption/js/ct-vc_elements_init.js?ver=6.9","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-vc_elements_init.js?ver=6.9 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28102\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"9cdfb9f7a0e4d77a79656c26400f81a5-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFEP8CJYG5BMKQNE71XS\r\ncontent-length: 463\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1187,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"9b206bdc6bd5666e48df4f0d11529f0b","sha1":"bfc8b5e22e0c7b9289afde622f4551ba95994d80","sha256":"af5ec9b3861f037a982059c7f18e5fb994eabb9c2cc6bcfdaed6b7cbcefba1af","sha512":"c3711749b9162a280f3f615fbefd7a16daf8aade451d7322f13e273105090042fff674ba926cf65f32ee4cec987b60b09e69dd3da00d97a024dae6f8d8be72c0","ssdeep":"","tlshash":"82216dc9b31f74bac5a2fa24863e9e4c443ce0f95008306d7886552c7fe46d8abb2d1d","first_seen":"2025-07-04T07:44:29.953526Z","last_seen":"2026-05-20T20:20:34.172027Z","times_seen":165,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kuadin.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"kuadin.com","domain":"kuadin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:08.081Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: kuadin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T16:34:27.378125Z","times_seen":16244212,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/uploads/2018/03/5-1-ct-person-1-ct-person.png","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:08.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/5-1-ct-person-1-ct-person.png HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 16:01:08 GMT\r\netag: \"64b0f0ff6c7fc98698949e49fe23f0da-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KKHCFGTD34ADYXGM374VCD8Y\r\ncontent-length: 5610\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"806dae03f08c0109becd3e4d272d14bb","sha1":"d01c9ea5e69468aaa288b2d88b37aca4947e9575","sha256":"301d85824116849476525dd5cbc65f5069482fd57eaec3d14be4a654d9060c9b","sha512":"7957bcb5e8baa414f3f1f84e8a882576af991a27c3b0f125a7f87b355a3c9e4bd530a39aeb162975fdf6eadc525d3d96e2d56e665d3291c3df6864b041c0f1c4","ssdeep":"96:yZxvH/92/zTeCkk+UeJJ+lR/0U6pNk4+KOm4v77y9bAuA2wEcMWVl:sg/zMXgRsjN+u4v77y97fK","tlshash":"6fc17d57eafd280aecc5a0b40b92ed2869d60c2329574c38f36fb021f8118b33750237","first_seen":"2025-09-23T17:21:13.976894Z","last_seen":"2026-05-20T18:37:56.93253Z","times_seen":148,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-12T16:01:02.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28100\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:06 GMT\r\netag: \"81bd5c9ff64f874f0f8d0fcce3132923-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFF4AC14J1ZWVYFYZZJWE\r\ncontent-length: 28403\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Raphael","description":"Raphael is a cross-browser JavaScript library that draws Vector graphics for websites.","website":"https://dmitrybaranovskiy.github.io/raphael/","common_platform_enumeration":"","icon":"Raphael.png","categories":["JavaScript graphics"]},{"name":"Yoast SEO:26.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"Slider Revolution:6.3.6","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":171090,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9067)","md5":"2531c12672e04c85491aed4b750bd2f6","sha1":"fcafc14d8531ac0c55c2f853ce2b60b6fc9e0543","sha256":"abb8bc874a14808b52db194de6d7442d4616b49c92910484b144408a06a18efc","sha512":"ed90efcb213b9a7d200c29f0cb18249ccbb663d08a219147159715813d06204491798327a30397042f81ddb64b3e57371e6f2c8fae4655c0c733f776c484d7a9","ssdeep":"3072:wJ2teChSJgyAX/ZvcBt3MlXMlvMl5/4/pBCVMlrMl8MldMl6Ml6MlKMl6Ml6MluW:wo1kt3MlXMlvMlx4/sMlrMl8MldMl6Mr","tlshash":"53f3c672a859183b126716f4a035671eb2a7c717cb078ad8b2fcd3a85fc5de8492358c","first_seen":"2026-03-12T16:01:45.775863Z","last_seen":"2026-03-12T16:05:51.774778Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8479,"timings":{"blocked":4213,"dns":3516,"connect":1,"send":0,"wait":27,"receive":25,"ssl":694},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/ajax/libs/gsap/1.18.2/TweenLite.min.js","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /ajax/libs/gsap/1.18.2/TweenLite.min.js HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"d7444155d742cac82f6af5e295ff94b4-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFDZT6AJTDW87GG3HRBK\r\ncontent-length: 9412\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27139,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26755)","md5":"eef8d7dad371b6888f3c81e8b38fb0d4","sha1":"c9e3884cdbb4c1c9fc89513828ab3ff76fc39842","sha256":"601f0ab20a5f199857278b26f2128d77b7a97a6166a231d8efda0b7dc5743c4f","sha512":"b35a703affa2dee2c3c29587d4706648e1143ebf5eff94dfec07ef07f3f75e2fa298e32363132c3c8082e47c66a2e0c92c9125c7b79b092a87e587968f31ec29","ssdeep":"768:jaPMHFrEVEyNuELvXVWWCAcE7qjzt49k6VNOSkmsjp:j3fCXVWWCAZ7x9k6/OD","tlshash":"43c2b6c67212615245da11aa593f03837337c9eaf4584d3cb549c9ce3f1dd8822abf7a","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-05-24T02:26:56.925152Z","times_seen":266,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kalyxen.icu/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.10.8","fqdn":"kalyxen.icu","domain":"kalyxen.icu","tld":"icu"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kalyxen.icu/","date":"2026-03-12T16:01:07.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kalyxen.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:33:27 GMT","end":"Mon, 08 Jun 2026 06:33:26 GMT"},"fingerprint":{"sha1":"7B:A2:0A:77:CD:87:70:1F:6A:D0:39:DA:F5:BE:8F:26:19:D4:B1:B4","sha256":"E8:EF:91:1A:83:83:45:8C:DA:6C:74:E2:1A:DF:29:7F:BF:C4:16:BF:5D:CE:9B:60:8C:A9:A1:D3:5B:A0:EF:F5"}}},"request":{"raw":"GET /wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.10.8 HTTP/1.1\r\nHost: kalyxen.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kalyxen.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 28101\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Thu, 12 Mar 2026 16:01:07 GMT\r\netag: \"b4f7045604bfe03a743a1a62aa865c88-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKHCFFFEQHBSXA7XDG07AC6W\r\ncontent-length: 2466\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":6555,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6555), with no line terminators","md5":"0d7f6b4930df680c368db0d604444b39","sha1":"41239565cd5c38258512b07994ed4519b377f3b2","sha256":"58aaf7420e6e102792fc1495be6788297845f3faa42dc59ed27d9bb0944e5fca","sha512":"7b4caee7407b6edf25a24e66ab0eac1398a4c39a937a2d3f92c1ddfc0bdc5f432626069b6f11306f83612399571c16df33ee04b5fbbaf9bb5ca2ae2b64bc4266","ssdeep":"192:urKG4shSuvZL3+ya3vBrPh/9Ckh/xEkmcXV0Ruk8Ie+j2:urj4shSEZL3+ya35rPh/9Ck1xEfIWukC","tlshash":"20d1e86c3695747743fb81e315bf5250a1322789790a8a84fa28d8e328bcd5347c7fb8","first_seen":"2025-06-25T18:35:12.413482Z","last_seen":"2026-06-08T13:47:52.918621Z","times_seen":5525,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"kalyxen.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}