{"report_id":"e5bab3c0-f049-4e55-91e1-97d630888ce8","version":0,"status":"done","tags":[],"date":"2026-09-22T21:28:03Z","url":{"schema":"http","addr":"karninofinance.pro/","fqdn":"karninofinance.pro","domain":"karninofinance.pro","tld":"pro"},"ip":{"addr":"172.67.192.104","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"karninofinance.pro/","fqdn":"karninofinance.pro","domain":"karninofinance.pro","tld":"pro"},"title":"Kaminofinance: Solana DeFi Actions With Result Checks","dom":{"size":29744,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3761)","md5":"0e0ba9a3d533294366da7aedf0786d3f","sha1":"c312d488bcedcb1141352f813b29dc648b577604","sha256":"5aef8aa31d426429b4dec299782a25cd2545bac2ecdaddcb4d60c4f9e82b32c2","sha512":"889f224ced366111128a694bde1a4b16d531bc15e58d67e967bce72ce456f3b0b15f3dfed788442a41973bbf6ea5e73dd0b66d33b1823b38bfa70a513dc6f364","ssdeep":"192:AdLG1gFaQBebPvuWhgQeXqaMv8vM+dIwMb3G5OHS6hyPbZQI8JiAAoZmbUByOeDh:VwGPhgZJiyZdSDxwoRoBo3gxr","tlshash":"2cd2c56373e5237702831256718a27d68f38c06be3380590b15d8a5c1f86db9c6bfbe9","dom_hash":"domhash10eb94eba7870b89d203aef490ddbdf3","first_seen":"2026-09-22T21:09:39.038468Z","last_seen":"2026-09-22T21:28:04.326142Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"karninofinance.pro/","fqdn":"karninofinance.pro","domain":"karninofinance.pro","tld":"pro"},"ip":{"addr":"172.67.192.104","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T21:28:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"karninofinance.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"karninofinance.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"karninofinance.pro","ip":{"addr":"104.21.81.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-22T21:09:35.125207Z","last_seen":"2026-09-22T21:09:35.125207Z","alert_count":8,"request_count":4,"received_data":59103,"sent_data":1982,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"karninofinance.pro/","fqdn":"karninofinance.pro","domain":"karninofinance.pro","tld":"pro"},"ip":{"addr":"104.21.81.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0c8468008ad6b2428780a0d579f85ad","sha1":"e8a93c4200860c22c363af2e9dc32162b9fa02bc","sha256":"f31fa34a643f7b56570b97d33f2bb566427b6997e41d48a59f429117b0c96e02","sha512":"1e059d3bbd726a5be00b3be76286d092cbb4cdfe2bd5891ef0e1716b3568ceaf7705c05b6a1b9f00fb40543e5ae319f272700c57b0dc781ef85787628359cbe0","ssdeep":"","tlshash":"70900214ae1530ae49d2452941b796571451204b1b4015711555c1c5d9229994649418","size":54,"data":"","first_seen":"2026-09-22T21:09:39.057939Z","last_seen":"2026-09-22T21:28:04.333188Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"karninofinance.pro/","fqdn":"karninofinance.pro","domain":"karninofinance.pro","tld":"pro"},"ip":{"addr":"104.21.81.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T21:27:34.718Z","timestamp":1790112454718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karninofinance.pro","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 12:42:15 GMT","end":"Mon, 21 Dec 2026 12:42:14 GMT"},"fingerprint":{"sha1":"D1:CC:7F:58:60:5F:37:91:46:03:99:FF:44:7B:62:A2:D4:7B:89:6B","sha256":"BC:38:3A:63:8B:9D:BB:14:57:0A:E4:C3:5D:8D:18:EB:ED:95:2C:C8:EF:61:07:87:F5:E1:42:62:D3:85:EA:7E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: karninofinance.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:27:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r5rn3gT4Ad6T%2B%2Bk2jsIyh2hvEkMfzs1dVlwfpNbjc5TWFh1NP2SrJYWWXEvXtb%2Fvaa6xnmmg5rQZ9KpAyBbjzMiUKn6eDprfEyltGXdgarj63r5i2iqP4hwAG14%2Bste3Xgzp04I%3D\"}]}\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3f464fa2f4156a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29789,"size_decoded":8287,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3761)","md5":"1e686f878a38016fb840e21e857cca3a","sha1":"1e76f19170e0b8086afc61ecde823c2e322073e5","sha256":"e95160c703bc5fc85832744ccda63d7563c9459d71d2222a9840eb7401f104e8","sha512":"be197c61b73f732a4b2ec5353bf1b5e117a4c675b5e742a3110989546dbfbef410077261caca897b6e3a374d89c50d9b13886bc0291ac00b4c97c735bd274fd2","ssdeep":"192:8dLG1gFaQBeKPvuWhgQemqaMvlvM+dIwMI3G5OHS6hyPbZQI8ciAAoZmbUByOeDG:hwGkhgZWiBZdSckwoRoio3gxv","tlshash":"f8d2c66373e5237702831256718a27d64f38c06be3384590b15d8a5c2f86db9c6bfbe9","first_seen":"2026-09-22T21:09:39.05539Z","last_seen":"2026-09-22T21:28:04.32752Z","times_seen":2,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":7,"connect":18,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"karninofinance.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"karninofinance.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"karninofinance.pro/resources/css/web.css","fqdn":"karninofinance.pro","domain":"karninofinance.pro","tld":"pro"},"ip":{"addr":"104.21.81.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://karninofinance.pro/","date":"2026-09-22T21:27:35.033Z","timestamp":1790112455033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karninofinance.pro","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 12:42:15 GMT","end":"Mon, 21 Dec 2026 12:42:14 GMT"},"fingerprint":{"sha1":"D1:CC:7F:58:60:5F:37:91:46:03:99:FF:44:7B:62:A2:D4:7B:89:6B","sha256":"BC:38:3A:63:8B:9D:BB:14:57:0A:E4:C3:5D:8D:18:EB:ED:95:2C:C8:EF:61:07:87:F5:E1:42:62:D3:85:EA:7E"}}},"request":{"raw":"GET /resources/css/web.css HTTP/1.1\r\nHost: karninofinance.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://karninofinance.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:27:35 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 17 Sep 2026 04:04:02 GMT\r\netag: \"1f03-65ba5dfc19080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 1109\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9emChyVDHLGWjN10X%2BiDEDQiix3vyF1vOv9A2xow%2B8TAK4Olf8M8xO9OCrAq0AJ%2FTQG6%2FyqJp8jjPbDeByd%2FdURwtcCDlPHnuxi5bY2CwlP4joJfZxgrZcDGFThhsRJmZ%2Bj4vVA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f464fbff6256a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2369\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7939,"size_decoded":3136,"mime_type":"text/css","magic":"ASCII text, with very long lines (7939), with no line terminators","md5":"eb7ee2e191607a6b6922b0fa14d75e62","sha1":"2102a6e195968d23596579b0f7d535f754995139","sha256":"dc5cbfcbeb8412717b440adc31dec9d918422d7617e49991263f0c7329a799e5","sha512":"bf893b660d4ca2e0e00a3191286167d4869e357b44d6e74ed607f967b78836e7abd95bcca39178b833bb74d469b2495cc495e2cb2944b43357e782446ac990c4","ssdeep":"96:7u0MeG/hVEoNJ5KT7MSkiC+gfmHa1qTcPbuv6AWCLL/hijDebPfP38e3t:ihJ/4ov5KfhefaBWZCLL3PZt","tlshash":"03f1a6f2a7842c08f63bcd6286b075ccb03fd425f146a69ad9d39725c46e83e1916fc4","first_seen":"2026-09-22T21:09:39.056727Z","last_seen":"2026-09-22T21:28:04.329083Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"karninofinance.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"karninofinance.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"karninofinance.pro/favicon.png","fqdn":"karninofinance.pro","domain":"karninofinance.pro","tld":"pro"},"ip":{"addr":"104.21.81.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://karninofinance.pro/","date":"2026-09-22T21:27:35.102Z","timestamp":1790112455102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karninofinance.pro","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 12:42:15 GMT","end":"Mon, 21 Dec 2026 12:42:14 GMT"},"fingerprint":{"sha1":"D1:CC:7F:58:60:5F:37:91:46:03:99:FF:44:7B:62:A2:D4:7B:89:6B","sha256":"BC:38:3A:63:8B:9D:BB:14:57:0A:E4:C3:5D:8D:18:EB:ED:95:2C:C8:EF:61:07:87:F5:E1:42:62:D3:85:EA:7E"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: karninofinance.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://karninofinance.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:27:35 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 17 Sep 2026 03:38:28 GMT\r\netag: \"2443-65ba584529500\"\r\naccept-ranges: bytes\r\nage: 1109\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x15%2BWuebr7JO8QLCyosBEV5zTuu0ep%2FEin2Bit3af19yrJqm7HU2X%2B1ESVrVxxtiUW%2B%2F0U5T4qGqRMpGEwbxesu1gVPxnZ1cp5z3nAbQb6areFuXjkyje9TF9LUJ8tfM%2BbQmU78%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f464fc6f6b56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9283\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9283,"size_decoded":9999,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"4dbe721d53ee84f7b043228140eb473b","sha1":"fe5e17adff6600b98755ab42fbecf145e964ec9b","sha256":"455929318a924b30f776c1415ef4c7cd1cde5e0fa90f6fe5738c718b9d29a31e","sha512":"0b5fb7313254b467378d9a4d8a9b00bedeb8c6f87f8dc2ab0ac1cd68edc8df7994c8d54c282b95209e09b921d5fd7c4d0e63d9b2a9dcf212894d586ea20f7083","ssdeep":"192:qO3lLaaOLCO+NgymT4aF99CYC2D4A4wVXe4klCa2a4iSXax:qOVD1OmG95x/Xeoa2YSXS","tlshash":"21129dd2fa36963513cc78fc3f3300abcb690566d4dec9a8830ccb1252917835975a1c","first_seen":"2026-09-22T21:09:39.040917Z","last_seen":"2026-09-22T21:28:04.33225Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"karninofinance.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"karninofinance.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"karninofinance.pro/favicon.png","fqdn":"karninofinance.pro","domain":"karninofinance.pro","tld":"pro"},"ip":{"addr":"104.21.81.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://karninofinance.pro/","date":"2026-09-22T21:27:35.103Z","timestamp":1790112455103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karninofinance.pro","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 12:42:15 GMT","end":"Mon, 21 Dec 2026 12:42:14 GMT"},"fingerprint":{"sha1":"D1:CC:7F:58:60:5F:37:91:46:03:99:FF:44:7B:62:A2:D4:7B:89:6B","sha256":"BC:38:3A:63:8B:9D:BB:14:57:0A:E4:C3:5D:8D:18:EB:ED:95:2C:C8:EF:61:07:87:F5:E1:42:62:D3:85:EA:7E"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: karninofinance.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://karninofinance.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 21:27:35 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 17 Sep 2026 03:38:28 GMT\r\netag: \"2443-65ba584529500\"\r\naccept-ranges: bytes\r\nage: 1109\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o70qbCwmAUmP1%2Fx1gYGWkDu1pQZpstdbhKgJX367KQb0eWG048W%2BGkVuzCpEuaJN44FsSGgxNJVzrViP8quzeNmG8MGAGcl8QCkkYQ3oNJWk%2FigVVgbto9r3WzvJ6Y7AANmtWpk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f464fc6f6c56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9283\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9283,"size_decoded":9993,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"4dbe721d53ee84f7b043228140eb473b","sha1":"fe5e17adff6600b98755ab42fbecf145e964ec9b","sha256":"455929318a924b30f776c1415ef4c7cd1cde5e0fa90f6fe5738c718b9d29a31e","sha512":"0b5fb7313254b467378d9a4d8a9b00bedeb8c6f87f8dc2ab0ac1cd68edc8df7994c8d54c282b95209e09b921d5fd7c4d0e63d9b2a9dcf212894d586ea20f7083","ssdeep":"192:qO3lLaaOLCO+NgymT4aF99CYC2D4A4wVXe4klCa2a4iSXax:qOVD1OmG95x/Xeoa2YSXS","tlshash":"21129dd2fa36963513cc78fc3f3300abcb690566d4dec9a8830ccb1252917835975a1c","first_seen":"2026-09-22T21:09:39.040917Z","last_seen":"2026-09-22T21:28:04.33225Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"karninofinance.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"karninofinance.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}