{"report_id":"f16cd78d-98f1-4682-8a8e-a08e70c293aa","version":0,"status":"done","tags":["netflix","phishing"],"date":"2026-09-23T15:58:04Z","url":{"schema":"http","addr":"kbcooperation.com/login","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"kbcooperation.com/login","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"title":"Netflix","dom":{"size":9084,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7794)","md5":"b0880a75b60a9fe564cb51f04550724d","sha1":"02999a8612a2a47f7c4420e0e65241b3ffc976f5","sha256":"6f58937d23df8e659d0299dd12d7062c4aeedca920caf68f809270c38b93861f","sha512":"3d70baa1762ffa8c2c596332eb6f79f466d47e8efc7d188608da91cf1c8cc9dcbd04e33b5c6f2c1422d8328015a63b8314cc8584d32f90891cbcb6282a23e29b","ssdeep":"192:G/2aZuAlnvy/mXntMjFZJONvC5pUQd5150jNZJONvCA9q1wirx6y:DEu8BXt6FZJONvg/CNZJONv4D96y","tlshash":"b712b5399800ca5b96635aad6076ef3c10eec56bcf57cc1cb2fcca551785eb84b48ac0","dom_hash":"domhashd357d4237a8f07c8fd1408f9e29db715","first_seen":"2026-09-23T12:39:46.024533Z","last_seen":"2026-09-23T15:58:16.493301Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kbcooperation.com/login","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-28T15:58:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"kbcooperation.com","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-08-04","domain_rank":0,"first_seen":"2026-09-23T12:39:42.010803Z","last_seen":"2026-09-23T12:39:42.010803Z","alert_count":40,"request_count":10,"received_data":378658,"sent_data":4853,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"kbcooperation.com/login","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-09-23T19:29:35.471157Z","times_seen":106743,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbcooperation.com/login","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4722e3658d82db61e6e87b4a6cfb82a","sha1":"cedbd1c9f983cbe45e77c489e2c897b2d8ed9591","sha256":"7227ee53dc12dea75e5e7651ba56e7bd1ca7a2d12d4ddbd4dfa2457cbca2acd5","sha512":"e1264c1a18aa58ce059cc04e27c172fd6247544da1244b50b9e4b1d8feec82136686c52f5c500ab91d9c79df4d6a6871f7dfc51a03a4f497b68736c5de5a62c5","ssdeep":"","tlshash":"68a01298d041dc1ac130000704284800c2ccd40c03a0405413b4cac68001c781684d85","size":86,"data":"","first_seen":"2026-08-22T02:28:37.827075Z","last_seen":"2026-09-23T15:58:16.531128Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbcooperation.com/login","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e68c2ec43aa47796dbf382f2e80c8995","sha1":"ce175ed20460624e42747920c0ba43d93ab7ef49","sha256":"4fb29b7484462c0f5d485bc764c163714e72e4453897fddeac9b33a9b2a2480a","sha512":"6643363fedeb4d85ac614660e9f261e8a6fe51d5dc4ea6f8f9c73cb60ddeaf7c3c1b69b47adcfddb4b45d0df4f6d12915274a7730fac8e24f367525df07e6fde","ssdeep":"","tlshash":"ff416a6e9906d987dc7d3d59467e9c3624cc8c3b0761cabc82decf041a065792bdad80","size":2005,"data":"","first_seen":"2026-09-23T12:39:46.042311Z","last_seen":"2026-09-23T15:58:16.532189Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbcooperation.com/login","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a7206db1994b57e639a1f8bd6bd39a9","sha1":"2073aaa88feb224242b5b6f46571556c6a006551","sha256":"ee98c27f81a1d9566d593e9e163c6469af170ae964dec966e8305c724fc01483","sha512":"54ea96a8d33ac3afc88fc9ef34975a7630a8f082aea24f424d8cd320f9a9dd2ca2582bb36825aebcdddf8e35dc16b834c673d0d962b132cecc1a7eb9332f9a8d","ssdeep":"","tlshash":"b4e0cd619c01dd1dc75b5f651c3f1c7920ddc3794245964699c4dd140943e754af2ec5","size":316,"data":"","first_seen":"2026-01-13T00:15:05.629311Z","last_seen":"2026-09-23T15:58:16.534664Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbcooperation.com/_next/static/chunks/webpack-616e068a201ad621.js","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c37ba7361628fac80daec4bdb12784a2","sha1":"35573dd73086692df8b0f679b29fd77800b67339","sha256":"884290bc2be032aa530870ca5b999da67c99fd252703300aa055bc86a38f2c4a","sha512":"de48ed76ac8cfd48e232b234f54aeb9f013250af3eb2666681026d2fa4b06e7d722560798950bce8ad41aa54af586274df67150508c46aadd8426b10941d585c","ssdeep":"","tlshash":"9b81b7ed71a1f8b9178390e1003fd556b63f24b2295ee4a0ce19e8f8fc349488513fa9","size":3996,"data":"","first_seen":"2026-09-23T12:39:46.039416Z","last_seen":"2026-09-23T15:58:16.513169Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbcooperation.com/_next/static/chunks/145-bdd25006a2550177.js","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ee423bfd61fe11f929f20babc9fac04","sha1":"27495b0f342c553aa662fe9ee383bb1fb8e4d803","sha256":"95bb4d4907c1756f6f9f623af126bed3d6c00d03142a36ce7aa11db9b557e4e9","sha512":"739e42fb872d7e5cf6b37584422d3dd0bb292d81f695c0d08acd59457ce3af83958c64373fee1c7fe0a3e92b41a72480fbe0d00d5abc5cd95418be1817af1bc4","ssdeep":"192:FGr9W25JmtJ6/khfI2BjlwJY13M8nuFIaHDtau27fcMRFVYxu4BvqK4:FI8CJm9hfRoGOht47fdd4h2","tlshash":"7b522a7731d4f8ea238b80d1987f000df3755d76662ab14467a9c8c9e6f0158b163fba","size":14205,"data":"","first_seen":"2025-06-03T03:41:47.581082Z","last_seen":"2026-09-23T15:58:16.517177Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbcooperation.com/_next/static/chunks/117-fbea2f3157fb49b7.js","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13e87eb771cb1dc6c862544c92dd720","sha1":"846bf0013f880dd962a499008ad7b3c7fba8937f","sha256":"7bd6f41cfe0ce8b68c0fcfc0c580bf3f21c9d7b49f22665e6b21bb5ef49b476a","sha512":"1ba96f22742f8333dbe47235b5a037bb8c4764d0554ab1d6d1edad2fc722d6dbbdef50f5c89cb5daa9f8f6e684bcf53db54a3a7e237b1ed218b832bb75d809a7","ssdeep":"768:fO9P55e7wbSlPftVDK//d9icrEAKH1ag8xxqKjj3fOpDKdlr/NaO8Qr93UsGoROz:Ugw2l+Wc3mY5jFdl/iPsibn2kJ51oCv7","tlshash":"bcc3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","size":124364,"data":"","first_seen":"2025-12-16T15:37:48.63769Z","last_seen":"2026-09-23T16:12:43.415591Z","times_seen":2588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbcooperation.com/_next/static/chunks/main-app-2dcde4753ea0d175.js","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ace3268523ca829896f160bf5401feab","sha1":"4062a8402cf24a1ccd0d38752462535e922f4cf8","sha256":"d7008163f1ed16ecb840d251190ac8a9d02132df87f25781faef1499945f9bdc","sha512":"f784ee7190413f445f0e16ed2f564f87c8183172462889739ac3f812be0e9d14762bcf1e55e794e14a8a62e6e3348f6b5c008efb66c7a2692cca98b742287486","ssdeep":"","tlshash":"def082992b4c702f2913ad24fdd35c2e255e416428a719501a04ddb12c336a893f1c39","size":461,"data":"","first_seen":"2024-10-04T10:20:35.510701Z","last_seen":"2026-09-23T15:58:16.515011Z","times_seen":1908,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbcooperation.com/_next/static/chunks/app/login/page-71ef414e650a7aa2.js","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"85a8d7efad425b2d9a028f10e8cef667","sha1":"547d38f9b6aa91f0d5d17280747555f1d9f70e43","sha256":"617ffe7f23486327bc8660c03ae46ba05e4cb69dfe1f42a9142be4d927024b4d","sha512":"c80c769023fd3ce1d6ea38c96254f0ceec387ee9c3ad19dc15d2a1b9701cffd960231a68b783b1e6dba2b4a7033929ad1e8c9c7afa8f5a3fce51c5d40da07185","ssdeep":"192:FGpIylsmQD/UQA1IYTI/oy7SqZ1IlULfrHQL2QQZJmuv6:FGpIylsmQUQA1IYzqZ1pTyOvDi","tlshash":"b9223214a561afddfa2744ac61af980c702f6b89ce4f4c74beb4b415299b4d43a03bc9","size":9952,"data":"","first_seen":"2026-09-23T12:39:46.032479Z","last_seen":"2026-09-23T15:58:16.525333Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kbcooperation.com/_next/static/chunks/fd9d1056-2318c61901700e02.js","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d70ea42503ecdf865cc5b50951e7a260","sha1":"d6024cc44a508c5e42bccc99aa6939490273b3a3","sha256":"b8bddf9481d859d648e1e050f8322eb3defe3dd3f9bd13f4c44dd6f2ecf5ab80","sha512":"c38885a712287d6c88b14f3a78df8b03c671a1e8fe71ec680edad591b056eabd5cc510e7cf2b565d94779bbb258ca49068d31adb94d343d59c653c57e77035ee","ssdeep":"1536:PVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:3zug758kkEiXjOAprX2wd5WjguGOK","tlshash":"50f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172834,"data":"","first_seen":"2025-01-18T11:47:06.649614Z","last_seen":"2026-09-23T16:12:43.407895Z","times_seen":5144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kbcooperation.com/login","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-23T15:57:35.558Z","timestamp":1790179055558,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbcooperation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 00:38:20 GMT","end":"Tue, 03 Nov 2026 00:38:19 GMT"},"fingerprint":{"sha1":"31:65:0E:8D:50:88:C1:E2:B5:CE:75:57:9B:02:FE:55:EB:4F:99:DC","sha256":"1F:F6:78:4B:C1:5D:50:6C:F1:00:CA:22:3D:D8:31:92:90:0B:08:68:3D:5F:D4:25:20:04:94:51:E9:D8:9B:76"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: kbcooperation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 2225748\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 23 Sep 2026 15:57:35 GMT\r\netag: W/\"9da43c25e8c2e2261daf63aea7b70e47\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /login\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gqlm5-1790179055611-e52a163b5ca8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9048,"size_decoded":3576,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7737)","md5":"c2668520e0d756c8b4a5bb405f42fe5d","sha1":"1449087f13df65a07e862d5cdc4b603b8fd9e996","sha256":"bd96fa54a8b7938be124c628b77578ebc7518766f1f9349efeed29686653488e","sha512":"e3e6530396f0d2d5de13744d54546a7389e37cba71b4f8258a996fbf5805aa17bdefe555637071dfdc5062cdef84d905e360f47527b4eb155e611656435a50d3","ssdeep":"192:8HaUOH+nvS8dXnJMjFZJONvCZIUQ+d150jNZJONvCA9q1wirx6u:uvOaFXJ6FZJONvbsCNZJONv4D96u","tlshash":"381294399900ca5b96635aed2075ee3c10eec56bce57cc1cb2fcca551795eb84b48ac0","first_seen":"2026-09-23T12:39:46.037998Z","last_seen":"2026-09-23T15:58:16.501555Z","times_seen":2,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":20,"connect":1,"send":0,"wait":10,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"kbcooperation.com/_next/static/chunks/webpack-616e068a201ad621.js","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbcooperation.com/login","date":"2026-09-23T15:57:35.841Z","timestamp":1790179055841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbcooperation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 00:38:20 GMT","end":"Tue, 03 Nov 2026 00:38:19 GMT"},"fingerprint":{"sha1":"31:65:0E:8D:50:88:C1:E2:B5:CE:75:57:9B:02:FE:55:EB:4F:99:DC","sha256":"1F:F6:78:4B:C1:5D:50:6C:F1:00:CA:22:3D:D8:31:92:90:0B:08:68:3D:5F:D4:25:20:04:94:51:E9:D8:9B:76"}}},"request":{"raw":"GET /_next/static/chunks/webpack-616e068a201ad621.js HTTP/1.1\r\nHost: kbcooperation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kbcooperation.com/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1162261\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-616e068a201ad621.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 23 Sep 2026 15:57:35 GMT\r\netag: W/\"c37ba7361628fac80daec4bdb12784a2\"\r\nlast-modified: Thu, 10 Sep 2026 05:06:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/webpack-616e068a201ad621.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nhdct-1790179055844-546b1f4f86e9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3996,"size_decoded":2563,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3557)","md5":"c37ba7361628fac80daec4bdb12784a2","sha1":"35573dd73086692df8b0f679b29fd77800b67339","sha256":"884290bc2be032aa530870ca5b999da67c99fd252703300aa055bc86a38f2c4a","sha512":"de48ed76ac8cfd48e232b234f54aeb9f013250af3eb2666681026d2fa4b06e7d722560798950bce8ad41aa54af586274df67150508c46aadd8426b10941d585c","ssdeep":"","tlshash":"9b81b7ed71a1f8b9178390e1003fd556b63f24b2295ee4a0ce19e8f8fc349488513fa9","first_seen":"2026-09-23T12:39:46.039416Z","last_seen":"2026-09-23T15:58:16.513169Z","times_seen":4,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"kbcooperation.com/_next/static/chunks/main-app-2dcde4753ea0d175.js","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbcooperation.com/login","date":"2026-09-23T15:57:35.844Z","timestamp":1790179055844,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbcooperation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 00:38:20 GMT","end":"Tue, 03 Nov 2026 00:38:19 GMT"},"fingerprint":{"sha1":"31:65:0E:8D:50:88:C1:E2:B5:CE:75:57:9B:02:FE:55:EB:4F:99:DC","sha256":"1F:F6:78:4B:C1:5D:50:6C:F1:00:CA:22:3D:D8:31:92:90:0B:08:68:3D:5F:D4:25:20:04:94:51:E9:D8:9B:76"}}},"request":{"raw":"GET /_next/static/chunks/main-app-2dcde4753ea0d175.js HTTP/1.1\r\nHost: kbcooperation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kbcooperation.com/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28149\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-app-2dcde4753ea0d175.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 23 Sep 2026 15:57:35 GMT\r\netag: \"ace3268523ca829896f160bf5401feab\"\r\nlast-modified: Wed, 23 Sep 2026 08:08:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/main-app-2dcde4753ea0d175.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7nfbd-1790179055850-d120ad2bd89f\r\ncontent-length: 461\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":461,"size_decoded":1083,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (461), with no line terminators","md5":"ace3268523ca829896f160bf5401feab","sha1":"4062a8402cf24a1ccd0d38752462535e922f4cf8","sha256":"d7008163f1ed16ecb840d251190ac8a9d02132df87f25781faef1499945f9bdc","sha512":"f784ee7190413f445f0e16ed2f564f87c8183172462889739ac3f812be0e9d14762bcf1e55e794e14a8a62e6e3348f6b5c008efb66c7a2692cca98b742287486","ssdeep":"","tlshash":"def082992b4c702f2913ad24fdd35c2e255e416428a719501a04ddb12c336a893f1c39","first_seen":"2024-10-04T10:20:35.510701Z","last_seen":"2026-09-23T15:58:16.515011Z","times_seen":1908,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"kbcooperation.com/_next/static/chunks/145-bdd25006a2550177.js","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbcooperation.com/login","date":"2026-09-23T15:57:35.846Z","timestamp":1790179055846,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbcooperation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 00:38:20 GMT","end":"Tue, 03 Nov 2026 00:38:19 GMT"},"fingerprint":{"sha1":"31:65:0E:8D:50:88:C1:E2:B5:CE:75:57:9B:02:FE:55:EB:4F:99:DC","sha256":"1F:F6:78:4B:C1:5D:50:6C:F1:00:CA:22:3D:D8:31:92:90:0B:08:68:3D:5F:D4:25:20:04:94:51:E9:D8:9B:76"}}},"request":{"raw":"GET /_next/static/chunks/145-bdd25006a2550177.js HTTP/1.1\r\nHost: kbcooperation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kbcooperation.com/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 28149\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"145-bdd25006a2550177.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 23 Sep 2026 15:57:35 GMT\r\netag: W/\"9ee423bfd61fe11f929f20babc9fac04\"\r\nlast-modified: Wed, 23 Sep 2026 08:08:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/145-bdd25006a2550177.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qfd5g-1790179055849-1ca18efa9597\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14205,"size_decoded":6131,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14205), with no line terminators","md5":"9ee423bfd61fe11f929f20babc9fac04","sha1":"27495b0f342c553aa662fe9ee383bb1fb8e4d803","sha256":"95bb4d4907c1756f6f9f623af126bed3d6c00d03142a36ce7aa11db9b557e4e9","sha512":"739e42fb872d7e5cf6b37584422d3dd0bb292d81f695c0d08acd59457ce3af83958c64373fee1c7fe0a3e92b41a72480fbe0d00d5abc5cd95418be1817af1bc4","ssdeep":"192:FGr9W25JmtJ6/khfI2BjlwJY13M8nuFIaHDtau27fcMRFVYxu4BvqK4:FI8CJm9hfRoGOht47fdd4h2","tlshash":"7b522a7731d4f8ea238b80d1987f000df3755d76662ab14467a9c8c9e6f0158b163fba","first_seen":"2025-06-03T03:41:47.581082Z","last_seen":"2026-09-23T15:58:16.517177Z","times_seen":55,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"kbcooperation.com/favicon.ico","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kbcooperation.com/login","date":"2026-09-23T15:57:35.907Z","timestamp":1790179055907,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbcooperation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 00:38:20 GMT","end":"Tue, 03 Nov 2026 00:38:19 GMT"},"fingerprint":{"sha1":"31:65:0E:8D:50:88:C1:E2:B5:CE:75:57:9B:02:FE:55:EB:4F:99:DC","sha256":"1F:F6:78:4B:C1:5D:50:6C:F1:00:CA:22:3D:D8:31:92:90:0B:08:68:3D:5F:D4:25:20:04:94:51:E9:D8:9B:76"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kbcooperation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kbcooperation.com/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\naccess-control-allow-origin: *\r\nage: 1162261\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"404\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 23 Sep 2026 15:57:35 GMT\r\netag: W/\"1ea046207998b740fc3fc0ca4a3ecb02\"\r\nlast-modified: Thu, 10 Sep 2026 05:06:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /404\r\nx-next-error-status: 404\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qfd5g-1790179055911-c3637a07ffcb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3599,"size_decoded":1774,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3593), with no line terminators","md5":"1ea046207998b740fc3fc0ca4a3ecb02","sha1":"69c3f9012f9e09f882c629998ddd404f05a27cc9","sha256":"710d602a9187eee9c2be3651ba91d962621f98424c518c94080dabd61eb03674","sha512":"948d0fb49e8dfb52b6dcb9c79947af58e79df719a3ec7a8f1db74b63e8b0a3804eaa41a2d6e33ad994921e5f136f536c6ce461ffe41794ff57623a157050a286","ssdeep":"","tlshash":"3271d1aa9c06dd4bdd7a3d69043eac3a14ddc83b8b25c96842ddce0917426792bcadc0","first_seen":"2026-09-23T12:39:46.036559Z","last_seen":"2026-09-23T15:58:16.518608Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"kbcooperation.com/_next/static/css/d47519fb6e684b99.css","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kbcooperation.com/login","date":"2026-09-23T15:57:35.839Z","timestamp":1790179055839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbcooperation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 00:38:20 GMT","end":"Tue, 03 Nov 2026 00:38:19 GMT"},"fingerprint":{"sha1":"31:65:0E:8D:50:88:C1:E2:B5:CE:75:57:9B:02:FE:55:EB:4F:99:DC","sha256":"1F:F6:78:4B:C1:5D:50:6C:F1:00:CA:22:3D:D8:31:92:90:0B:08:68:3D:5F:D4:25:20:04:94:51:E9:D8:9B:76"}}},"request":{"raw":"GET /_next/static/css/d47519fb6e684b99.css HTTP/1.1\r\nHost: kbcooperation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kbcooperation.com/login\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 28149\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"d47519fb6e684b99.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 23 Sep 2026 15:57:35 GMT\r\netag: W/\"62fc6eb70c9e057f8902fdddd696b31d\"\r\nlast-modified: Wed, 23 Sep 2026 08:08:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/css/d47519fb6e684b99.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::92xcf-1790179055843-75fc993aff1f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16158,"size_decoded":4852,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (16158), with no line terminators","md5":"62fc6eb70c9e057f8902fdddd696b31d","sha1":"10006771caa1caa8fc17eb7cb3c95813cc5c9a80","sha256":"0b1288c96b78bc6cc9d7d3adeaddf2f5276dd754d456ec290f0d5e14ab4065f7","sha512":"34bc83ae94a27db403f7ea38f2d4f2f460b3b4b86a5075b0e3844aa1813964b9f6704dbd5aebc755b427faac73cfe1b02bc0a6dcc24cd19962f6130c66080e43","ssdeep":"192:oGw2s7JXYS7JXYGDxsf02aZ79eqrrtIO6:/w9HFDQaZ5eqrZi","tlshash":"0b72621dab15043b7c2780f6e5a4ee9cb016a2c5df3ae6e7b9422600dbd63f31d93644","first_seen":"2026-08-22T02:28:37.817706Z","last_seen":"2026-09-23T15:58:16.520001Z","times_seen":10,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"kbcooperation.com/_next/static/chunks/fd9d1056-2318c61901700e02.js","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbcooperation.com/login","date":"2026-09-23T15:57:35.842Z","timestamp":1790179055842,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbcooperation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 00:38:20 GMT","end":"Tue, 03 Nov 2026 00:38:19 GMT"},"fingerprint":{"sha1":"31:65:0E:8D:50:88:C1:E2:B5:CE:75:57:9B:02:FE:55:EB:4F:99:DC","sha256":"1F:F6:78:4B:C1:5D:50:6C:F1:00:CA:22:3D:D8:31:92:90:0B:08:68:3D:5F:D4:25:20:04:94:51:E9:D8:9B:76"}}},"request":{"raw":"GET /_next/static/chunks/fd9d1056-2318c61901700e02.js HTTP/1.1\r\nHost: kbcooperation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kbcooperation.com/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 28149\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"fd9d1056-2318c61901700e02.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 23 Sep 2026 15:57:35 GMT\r\netag: W/\"d70ea42503ecdf865cc5b50951e7a260\"\r\nlast-modified: Wed, 23 Sep 2026 08:08:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/fd9d1056-2318c61901700e02.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t5q9s-1790179055845-4a887a408fa0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":172834,"size_decoded":55671,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d70ea42503ecdf865cc5b50951e7a260","sha1":"d6024cc44a508c5e42bccc99aa6939490273b3a3","sha256":"b8bddf9481d859d648e1e050f8322eb3defe3dd3f9bd13f4c44dd6f2ecf5ab80","sha512":"c38885a712287d6c88b14f3a78df8b03c671a1e8fe71ec680edad591b056eabd5cc510e7cf2b565d94779bbb258ca49068d31adb94d343d59c653c57e77035ee","ssdeep":"1536:PVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:3zug758kkEiXjOAprX2wd5WjguGOK","tlshash":"50f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2025-01-18T11:47:06.649614Z","last_seen":"2026-09-23T16:12:43.407895Z","times_seen":5144,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"kbcooperation.com/_next/static/chunks/117-fbea2f3157fb49b7.js","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbcooperation.com/login","date":"2026-09-23T15:57:35.843Z","timestamp":1790179055843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbcooperation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 00:38:20 GMT","end":"Tue, 03 Nov 2026 00:38:19 GMT"},"fingerprint":{"sha1":"31:65:0E:8D:50:88:C1:E2:B5:CE:75:57:9B:02:FE:55:EB:4F:99:DC","sha256":"1F:F6:78:4B:C1:5D:50:6C:F1:00:CA:22:3D:D8:31:92:90:0B:08:68:3D:5F:D4:25:20:04:94:51:E9:D8:9B:76"}}},"request":{"raw":"GET /_next/static/chunks/117-fbea2f3157fb49b7.js HTTP/1.1\r\nHost: kbcooperation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kbcooperation.com/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1162261\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"117-fbea2f3157fb49b7.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 23 Sep 2026 15:57:35 GMT\r\netag: W/\"d13e87eb771cb1dc6c862544c92dd720\"\r\nlast-modified: Thu, 10 Sep 2026 05:06:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/117-fbea2f3157fb49b7.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hts4z-1790179055847-43a6b064a9e8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":124364,"size_decoded":33554,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d13e87eb771cb1dc6c862544c92dd720","sha1":"846bf0013f880dd962a499008ad7b3c7fba8937f","sha256":"7bd6f41cfe0ce8b68c0fcfc0c580bf3f21c9d7b49f22665e6b21bb5ef49b476a","sha512":"1ba96f22742f8333dbe47235b5a037bb8c4764d0554ab1d6d1edad2fc722d6dbbdef50f5c89cb5daa9f8f6e684bcf53db54a3a7e237b1ed218b832bb75d809a7","ssdeep":"768:fO9P55e7wbSlPftVDK//d9icrEAKH1ag8xxqKjj3fOpDKdlr/NaO8Qr93UsGoROz:Ugw2l+Wc3mY5jFdl/iPsibn2kJ51oCv7","tlshash":"bcc3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","first_seen":"2025-12-16T15:37:48.63769Z","last_seen":"2026-09-23T16:12:43.415591Z","times_seen":2588,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"kbcooperation.com/_next/static/chunks/app/login/page-71ef414e650a7aa2.js","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kbcooperation.com/login","date":"2026-09-23T15:57:35.847Z","timestamp":1790179055847,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbcooperation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 00:38:20 GMT","end":"Tue, 03 Nov 2026 00:38:19 GMT"},"fingerprint":{"sha1":"31:65:0E:8D:50:88:C1:E2:B5:CE:75:57:9B:02:FE:55:EB:4F:99:DC","sha256":"1F:F6:78:4B:C1:5D:50:6C:F1:00:CA:22:3D:D8:31:92:90:0B:08:68:3D:5F:D4:25:20:04:94:51:E9:D8:9B:76"}}},"request":{"raw":"GET /_next/static/chunks/app/login/page-71ef414e650a7aa2.js HTTP/1.1\r\nHost: kbcooperation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kbcooperation.com/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 28149\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-71ef414e650a7aa2.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 23 Sep 2026 15:57:35 GMT\r\netag: W/\"85a8d7efad425b2d9a028f10e8cef667\"\r\nlast-modified: Wed, 23 Sep 2026 08:08:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/app/login/page-71ef414e650a7aa2.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ns9pv-1790179055851-e49cfdbb6f46\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":9952,"size_decoded":3726,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9952), with no line terminators","md5":"85a8d7efad425b2d9a028f10e8cef667","sha1":"547d38f9b6aa91f0d5d17280747555f1d9f70e43","sha256":"617ffe7f23486327bc8660c03ae46ba05e4cb69dfe1f42a9142be4d927024b4d","sha512":"c80c769023fd3ce1d6ea38c96254f0ceec387ee9c3ad19dc15d2a1b9701cffd960231a68b783b1e6dba2b4a7033929ad1e8c9c7afa8f5a3fce51c5d40da07185","ssdeep":"192:FGpIylsmQD/UQA1IYTI/oy7SqZ1IlULfrHQL2QQZJmuv6:FGpIylsmQUQA1IYzqZ1pTyOvDi","tlshash":"b9223214a561afddfa2744ac61af980c702f6b89ce4f4c74beb4b415299b4d43a03bc9","first_seen":"2026-09-23T12:39:46.032479Z","last_seen":"2026-09-23T15:58:16.525333Z","times_seen":2,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"kbcooperation.com/logo.svg","fqdn":"kbcooperation.com","domain":"kbcooperation.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kbcooperation.com/login","date":"2026-09-23T15:57:35.854Z","timestamp":1790179055854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kbcooperation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 00:38:20 GMT","end":"Tue, 03 Nov 2026 00:38:19 GMT"},"fingerprint":{"sha1":"31:65:0E:8D:50:88:C1:E2:B5:CE:75:57:9B:02:FE:55:EB:4F:99:DC","sha256":"1F:F6:78:4B:C1:5D:50:6C:F1:00:CA:22:3D:D8:31:92:90:0B:08:68:3D:5F:D4:25:20:04:94:51:E9:D8:9B:76"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: kbcooperation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kbcooperation.com/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1162260\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 23 Sep 2026 15:57:35 GMT\r\netag: W/\"c905c3b37c2c591f2beb56f5f3eb136e\"\r\nlast-modified: Thu, 10 Sep 2026 05:06:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /logo.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hts4z-1790179055858-87c536ef42a0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18259,"size_decoded":8777,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c905c3b37c2c591f2beb56f5f3eb136e","sha1":"01f46cfeb0a788d81bf98ff696cf3632a03404b6","sha256":"f45548a5194f4c9a8306f65111c54e15142315151d5a0934443be64d258f123c","sha512":"64da790e9a2ee5554b3ebc8caba517ab8e38c51e4a4dae48badfdc1541f8af08868b2b4459fcaf83bd5ea8c75207ed8e1f308b9228213e30c74b996b5b95f744","ssdeep":"384:OAU9qSSPZTnpZji3lqyJiRRVKbU7MPyYmA8lL1rXK:ykPZLDi3lPJibVKbw0ilNa","tlshash":"6c82f9dd736488f8cc0ed7c2ada258e43e5b60b72f85c22cc969e791152316dd98acc7","first_seen":"2026-08-22T02:28:37.821801Z","last_seen":"2026-09-23T15:58:16.528492Z","times_seen":10,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"kbcooperation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}