{"report_id":"f7c3630f-9a34-4cc4-927d-9bc0d6e65f8e","version":0,"status":"done","tags":[],"date":"2026-09-15T18:39:25Z","url":{"schema":"http","addr":"kob-na.fit/","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"104.21.83.54","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kob-na.fit/","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"title":"kob-na.fit/","dom":{"size":2355,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1005)","md5":"3d86a361de6da216c719400c7c0f2ec4","sha1":"47127dffaeeab6d840cb5ae126b04f0fd51fccc3","sha256":"aeb364cb105a58ef0aba1e40e5855e9d29363a873e443ee62113b2090b87f2c9","sha512":"1083bdf3ca63ad2975c409e43ff89256d9b3e391c37324f9e613a824c77498ae9e370d666c502361a978283cff04f116240662ceb9f71ed9cdf4a8e9b402ba9a","ssdeep":"","tlshash":"72418b572945e90fa30edf9aa4d1a34cad87e93fac5444f2c4db63ba1580ea085acd02","dom_hash":"domhashc6ed4591a850c6aee4f419af0113054d","first_seen":"2026-09-15T18:39:29.201759Z","last_seen":"2026-09-15T18:39:29.201759Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kob-na.fit/","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"104.21.83.54","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-20T18:39:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"zws2-1.web.telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":279879,"first_seen":"2021-08-26T11:52:04Z","last_seen":"2026-09-09T09:49:48.797641Z","alert_count":0,"request_count":1,"received_data":220,"sent_data":620,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"zws2.web.telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":491032,"first_seen":"2021-06-24T06:55:52Z","last_seen":"2026-09-14T09:04:16.855235Z","alert_count":0,"request_count":1,"received_data":220,"sent_data":618,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kob-na.fit","ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-03","domain_rank":0,"first_seen":"2026-02-04T13:17:59.705284Z","last_seen":"2026-09-15T18:33:36.62275Z","alert_count":105,"request_count":21,"received_data":3163993,"sent_data":9600,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/entry/start.EWrczbgO.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4d85ba7f3007de7ad413d62b593f0d1","sha1":"115a646408e4450cc3d2d3c872c2e70e8219ab8e","sha256":"1d6e27d2618af28c06a74d4bb2c01195c03577975f4eea7b2caedccafe2c1435","sha512":"633aa712433275739d5c8067d68c14e72fe69846cd3093d1c10a54cec718617b4495a3621e9c329765e7a0dc35f6c820c720ee1e4852ab9f9b1f171139ac473e","ssdeep":"","tlshash":"2951b7ac2bcc60d00b7f5abe7e0e6de6ff08fa5876d1584a9180254034a26c9402ef37","size":2877,"data":"","first_seen":"2026-03-13T13:48:48.630407Z","last_seen":"2026-09-19T21:57:04.093631Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/entry/app.qTFwn96c.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5a88c00eef8fd5e9411601c4ae4035a","sha1":"29a1ac6a85650eb134033e7374db86b1eaf1ffcf","sha256":"067d3a2673d5c0fa406af528fd76ce6f38fafa059626b1cc05f28ae9b0a717ef","sha512":"5139c5e2b8c6cda76d801ebe855e11681c18b99651bc65ab637c0581459a12805894378d045a328bab74d15380e61ff6fa87ddc413df7bf7e3ab87bf49ac1ce3","ssdeep":"768:ahtbrMugpyOzFSQq/XsqsCuCBiwCNtMoFsTwsPqcm:ahtbrMuOS7fJoNtMoFsZPq9","tlshash":"3bc21a5153c1f8d0228f8ef82b1f74e6ff18e97432440c8fe6852c857b679a49aa5c36","size":27204,"data":"","first_seen":"2026-03-13T13:48:48.643155Z","last_seen":"2026-09-19T21:57:04.118508Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/FG24Cqea.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fa3497aff1e370382bf66fda946a470","sha1":"e5cea017a7470586e915d64f73af5a17bbeddf0c","sha256":"2e0f95825722e556d92f560463897178f21237beac268e96c0eb84e7e41688b8","sha512":"5f15097862daf904e7b310f57797ce2d694cd12d24bc8ee8f838c620e781bf1ccf2c8c05937a47726af099d1429bf644971ee3a3f84ddbb35733f83ee7eb0662","ssdeep":"1536:e5Apa7++FlmSiSmw1hAFFDtXg+PET2yQgkBTSXRpBm3p374uXfd1H:e5UEH34jDicETEJTSXR3m3d4Y","tlshash":"5ab3f85023d8a9c4124f8f7c561f75e3fb189a7533841c8bc381fd943bba9a49ea1876","size":110999,"data":"","first_seen":"2026-03-13T13:48:48.621636Z","last_seen":"2026-09-19T21:57:04.114035Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/nodes/0.CTPeAky5.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4801383a988754341949336adbbf37bb","sha1":"930fccac248ff4f2ce2475247127f52caff9e1fa","sha256":"c896cb1b18a13950b19b173ede4afa4f3386c52f61c49e64297590941f8715b8","sha512":"1692b1144f2ddd2b7180b0b625ab65f8ce6c86a09864b876fa5645632c4d3bc3feaee3f4b8a3843d00f762ce57513a23f9b6467fd046bb0c7373cd3d4e56feff","ssdeep":"96:dbJPXrkVSBm0289CdpGg7bfI2Iw1pjRW0DLy95BOqnTR4bSEg:dbJPNm0r9enHbn1pkyL8BlTyg","tlshash":"71a1ea282b8499c8337f58fc599e28d69f14e975b3d0184bd002b9817e57c98919df37","size":5045,"data":"","first_seen":"2026-03-13T13:48:48.624711Z","last_seen":"2026-09-19T21:57:04.096446Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/whI9QvV6.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"195020ac4fa6fb9ee5bbf602a2b19d95","sha1":"d0296822ae69611b699b1b45d9d1e9598771fede","sha256":"205e2e50b7b3c99b57b9af1463f1342957a9ce8ed3d3e411f2e63ffd0352d8f5","sha512":"e9bd7918229c0f8d8269e8ba18dd06b6440fe99a5b6c1f0837a88d30f9226b3dd6d0b3d44f899cb1182680e1c624223b46dd6a50e98deadb2a21d096e4b52f73","ssdeep":"","tlshash":"6171a4ec67e2a4e4136f4eff1f27b0d99b56fa2137d44c8a84401c823b724a540a6f72","size":3694,"data":"","first_seen":"2026-03-13T13:48:48.628268Z","last_seen":"2026-09-19T21:57:04.119924Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/Cug65I-P.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf4f3fe06c9b33dc9aec4f900f84832a","sha1":"01499a96c5e9ebf0eed3ed9a2bdb8bfdaba0c95f","sha256":"a88db695d4831dfff8b839bec28c11f49c851f8d0738989d6f1c98edea0efcd3","sha512":"9e452e3490d3b0a6c0442347bd897bca4f2ece47134b015bc89368e5ae41bdb2ec898667ff65b790a3674aaa5172b5b73b5cbf6586f47597e3f083b25b815c60","ssdeep":"24576:P+Qf3xgg58q7OF37JozadGXQRVF0GysOXe0WOy8HytLYBbOJGyf055I8kP09iuqU:P9kqsi7BhSH0gpf6x3Lv","tlshash":"fac56c5043c098f4617f4bec27da78e6fe8aa67430806ccbd6c0bc692a575c899e5c77","size":2715295,"data":"","first_seen":"2026-07-26T02:08:31.021787Z","last_seen":"2026-09-19T21:57:04.122896Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/nodes/1.DxKrjRyl.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0233c4d014521022562beaf2d6e59475","sha1":"3e141c549812652d976630aacfbd59bbdb27bf9a","sha256":"2089663428825bca38faa353e055d0a482325d8ef089df7e8068af355b7adf5b","sha512":"6900f48a159c82d944c4d6c0e9a67e53ae221ecaf5d2626356654c836eb58ce44b6787358df2dd9e671b96564765af5c3629be88fe3a2adaac582813978b75df","ssdeep":"96:aIy+lOCfw3HOnFR1OybFEPXUSZconsbFizZTHLsNmb3xtYqF:3y8GHm/1FmPXUSZx6ApHLskb31F","tlshash":"4491e9ecb7c4f4f0035f4ded8a0e2ee3e912a99934e5051ec48daa5036a35d05056f7b","size":4478,"data":"","first_seen":"2026-03-13T13:48:48.63781Z","last_seen":"2026-09-19T21:57:04.101068Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/Cdwg4PqX.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2caf53b1a75c2e46d56e9d4b460a7e8","sha1":"38ab06bd948ea96284f2ec8170b5ad0d7ae2fcdc","sha256":"f564daba635189f9f508cedde91c2ebfc4856662021b0c8ccee0f6a33da27d2c","sha512":"8cee3a8b47d8a91d5edf3bc64d436195f4611387eef3a4a72945d8d20eed6c7c1a4f0d8076b1b1bae5f6443a76bab3c7aec8bc9faca2a67edfdd40445dd56234","ssdeep":"768:anZUY5yvCf1BwrFT7gZpvf0b1Tr79F+RcKtTBrKRB8PE:anZLFfQ5TcTvfw1Tr79F+RcK3ry","tlshash":"b6f2e82453c8a9d4124f8ff827ae64e2ff19a67c32c11c4fd681bd103bb25949ea1977","size":34283,"data":"","first_seen":"2026-03-13T13:48:48.615692Z","last_seen":"2026-09-19T21:57:04.098032Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2f574c8575f65dad16423da0f4327ed","sha1":"60b66345d3515079b81190dac1ae7954bfe1b528","sha256":"786cfd1de01c10d0ee1746688e14b299eafcbd8a4d8a3542e4eb5d60bd218a6a","sha512":"424b54c27c8d642c4328b4b2733e3876f9b66e19bb8a6f3ac07304efc5579d9020938cd5257110fb7db5d5efa4459a7841e130f0d8fd4ee54b3a454e70f9b6ce","ssdeep":"","tlshash":"12e020cfe75d151b455e8b6e6026d3dc697d0074694018eb3c9c797411d6d105699c05","size":365,"data":"","first_seen":"2026-07-26T02:08:31.019012Z","last_seen":"2026-09-19T21:57:04.125755Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/RhyjyUZ6.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efdb9746edd4236df0eccd72308a4ca8","sha1":"92bf62bc2aa0c698ec04e26edb3f6072795300b7","sha256":"d54388ca646480b7f59f3071fb51b76b9127544fb15304a3dfb2368215db3666","sha512":"77d23bd8ff7e03b12cd86df1746e655e3d1702edda16581b0638eafda5209fc1537fb48642de1e17c7901ae49b6d85ffcd0be81d65469ca26d23092e637e0eda","ssdeep":"192:hf5hyhza5WY7J5KFirxcOrKYyTLPIygxR3cXx6fWIGoIEi7Xp0v8+e+E1z:h2zQhlKTbIygxJCx6fjpiTp0E+VEz","tlshash":"5822f86823c4f8d4039f4eb83e2f75e6af15ba7433940c4bd640a85072e7294db99a77","size":10377,"data":"","first_seen":"2026-03-13T13:48:48.631305Z","last_seen":"2026-09-19T21:57:04.095625Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/C5osUxRC.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"212c530f8491ca56c4214de5b23c848c","sha1":"fd8c4ddae3d63071f19b9b57d9f133e8a9f7899f","sha256":"b00a61e8770785d857a7e00d8bd719235dbe8eea10286a06f5b9ee2f4ee33bdf","sha512":"25115bcf3275095cab0c5c81458d7d30e6697dcd69fecd97cc33dcf53ed5290b9ffba87639a2c9ddf6578bac196a6af5a611b8ce8de02cb923d3d1d793d6baad","ssdeep":"192:yzAPjKQ8mvQundiZgpnrpXEZdlLmAIh3u7S8XtgRzUFAujN9:yzgpyOMdLrIpu75ai9","tlshash":"dd32e89477c1f4d0132f5d9da11f78eafa28abb933484c5bd48278613a760958c92a3f","size":10975,"data":"","first_seen":"2026-03-13T13:48:48.619248Z","last_seen":"2026-09-19T21:57:04.11664Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/CP9f0CAP.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf9c1b6e39325ab24ee65e539c745947","sha1":"982d42eccd7e70802e9c766e86335ad10eae55cc","sha256":"31b9c86b1fa3e9501b29eef3da629d178208e317e2f7e529438f0d1f378bb990","sha512":"8212f3a9187a1049a09cb2d575011dbce8acd80f44a673c9ddbc7c511f076eccd143626b82f2fa38f7af911edd9b22bfc11028c1a43f5a92ea4c7029d1ebed76","ssdeep":"192:1KBR5iaruxHN1xComii58PTwdDc7nZVsF9tNMLGxVci/NlRlChU4dXyMkJKnkD1:YmvCPii58PT/7nYtNMiOmPChU4dXyMkF","tlshash":"8632a8a063c499d0214f9fec7a0e36e6fe159b7831941c4be7802d643abbec19d90677","size":11391,"data":"","first_seen":"2026-03-13T13:48:48.641Z","last_seen":"2026-09-19T21:57:04.120515Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/CHrYT8--.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62541c2159ec86f8571837349c911c79","sha1":"28c123cc1608207a84ccfe66ca6800c089d1b1d1","sha256":"323449ccc906e1dd7e08930579011f72e6e8fa5b17bf7ca3f239b06654010d1e","sha512":"ec0c736707ee1ecf25038ceb078f4c6c03f2b321d919eacb42cf069ce4050baa83c39740012394672445aa37090ef75109eb4549e18bae00b3b7694d8c4a1f9b","ssdeep":"3072:o9vr3jfhvH50zRBFu8b7NweVgFDAi7J+rXFw:i3j5HOzRBFtbF8svrW","tlshash":"98d3e65063c0adc5214f5ff8772f75e6fe09aab836800c8fd2853c443bb79549aa49b6","size":140828,"data":"","first_seen":"2026-03-13T13:48:48.626208Z","last_seen":"2026-09-19T21:57:04.094838Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/gs_-JJyD.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fb3b341d0d521d90434111893d7347e","sha1":"5253dd1977341d37a98447ace0bf52bc8ce05356","sha256":"939022c0c5e4682328f3cb9f5b8a1a0cd5f0685cbfc9f9ff6eb1f35cb3186399","sha512":"ae964cdd59ad0c0f4027aae6250b661ead93f8dbf0bd0d71824dc1ac22fe484fd518ca5b52c2aa50b01149d81d55c8ed11433033ddb41d47a646fdaed1f97ba0","ssdeep":"","tlshash":"c171c7b85bd0f8e4139f4fddab0f85d2bb55d97833881c0680882aa23d238d44146f3b","size":3623,"data":"","first_seen":"2026-03-13T13:48:48.627203Z","last_seen":"2026-09-19T21:57:04.100408Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/DlfAXUo2.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e05ed8a06cb69473ed9b05056b910e06","sha1":"25aae79ae6450a5018d38d6d572505738748941f","sha256":"01f9419495ac82ad25e42bd5e9e99caf832665901fa5cb75450ab2061a28c211","sha512":"0ab18af1060ea69d6973258d24677bb33e71ea2246b2ae2a84125fbb2369b1a43f1b5ab9de97166c847456765596af4a1c111525c6ca4576a056de8ebf0866ee","ssdeep":"768:GqlKBCQ+a1nfyH5Nh6eLILCO3T32LnoxE2lo5Pxf:dJIn6DFLIfD3in7xf","tlshash":"b5f2e65423c4e9d4325f8f7e765e71e2fb05aa7836c02c4ff280ac902a679d49ae1537","size":35926,"data":"","first_seen":"2026-03-13T13:48:48.632215Z","last_seen":"2026-09-19T21:57:04.116033Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/B2BOHiax.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:52.357Z","timestamp":1789497532357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /_app/immutable/chunks/B2BOHiax.js HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2BfworSC%2B4JrM6qlyePNPLUVzZxrttnsnPtLWhsRgDVgT6jAjo2B6oxyf12wqwTrVj9BzRerOXOOtk3f169Zb1mdKQIPsigOXuPD0lTpSo65utft05wWmKo1K6bc\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-24cbc7\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3b9c0394ac1fee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T23:48:29.142551Z","times_seen":18575623,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://zws2-1.web.telegram.org/apiws","fqdn":"zws2-1.web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:54.195Z","timestamp":1789497534195,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /apiws HTTP/1.1\r\nHost: zws2-1.web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kob-na.fit\r\nSec-WebSocket-Protocol: binary\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 5zcceAPXnfbdM32idnP6zg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.30.1\r\nDate: Tue, 15 Sep 2026 18:38:54 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: H7tF8qnwDhmAZiOs2jt0PiHfUg4=\r\nSec-WebSocket-Protocol: binary\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":220,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T23:48:29.142551Z","times_seen":18575623,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":75,"connect":91,"send":0,"wait":20,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T18:38:43.759Z","timestamp":1789497523759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 15 Sep 2026 18:38:49 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PKZ6%2Bz0BJkA%2BKxjWl89awOvwSOPUSs1qw4LYn7BmYOuHoc0WnFIYFrQyip3GJOjtUAsyyZjZQy5CnXNYFmiqQ4rJLHD3Aowc2p2P4afe49wFRdxFo%2BCWtHAuQmli\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ncf-ray: a3b9c01918c2706d-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1380,"size_decoded":1289,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"0efa7225dd17a2c645fe787bcc66b6f0","sha1":"760b992aa16e53a787aa328ac93b80a7892e3836","sha256":"0b14c9bfa9b610c213c06e042232bc618713f03c3196bd6d6d0b16087ad204ae","sha512":"bcb0d5604cc1dad8702da5d8d3816c9eb8ee52ed1f4477d5b7b344722df1871d88ff21506c5a31a1fde5007ea3c06af43abe54e0ef303c96f5f6c6296f8a19dd","ssdeep":"","tlshash":"e8215b83559aee0b660ede5ea091934c9a87e87d684048f2ac8d617b4dc1eb0125c902","first_seen":"2026-03-13T13:48:48.636614Z","last_seen":"2026-09-15T18:39:29.203515Z","times_seen":15,"resource_available":true,"data":null}},"time_used":5585,"timings":{"blocked":-1,"dns":7,"connect":16,"send":0,"wait":2137,"receive":0,"ssl":3425},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/CHrYT8--.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:49.515Z","timestamp":1789497529515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /_app/immutable/chunks/CHrYT8--.js HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QA%2FMok0AqmYVrfv61gbfLvv7NqTa8O%2BcPEUTPAmh7k%2Bsf5BluB%2Fwh%2FkCPDxnmE%2FeZa24vRUGBqbSmGOrV9kisS9HFHDk5CFEe5Cn12iRNwrywvASMFd6t3GG%2BtAJ\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-2261c\"\r\ncontent-encoding: gzip\r\nage: 342\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3b9c02788bdfee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140828,"size_decoded":69347,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"62541c2159ec86f8571837349c911c79","sha1":"28c123cc1608207a84ccfe66ca6800c089d1b1d1","sha256":"323449ccc906e1dd7e08930579011f72e6e8fa5b17bf7ca3f239b06654010d1e","sha512":"ec0c736707ee1ecf25038ceb078f4c6c03f2b321d919eacb42cf069ce4050baa83c39740012394672445aa37090ef75109eb4549e18bae00b3b7694d8c4a1f9b","ssdeep":"3072:o9vr3jfhvH50zRBFu8b7NweVgFDAi7J+rXFw:i3j5HOzRBFtbF8svrW","tlshash":"98d3e65063c0adc5214f5ff8772f75e6fe09aab836800c8fd2853c443bb79549aa49b6","first_seen":"2026-03-13T13:48:48.626208Z","last_seen":"2026-09-19T21:57:04.094838Z","times_seen":18,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/FG24Cqea.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:49.519Z","timestamp":1789497529519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /_app/immutable/chunks/FG24Cqea.js HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=32JUj9os8PB54NGpGuD0ggxzWXRmGBclqInS65sRaFUlgf2sryKv%2F0sEkQPm6zXZ%2F7huHsad8wesJVrGd4M%2BJEB6bstZIvJIEXIfSiZMF4794BhObqd3NeYnNR4f\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-1b197\"\r\ncontent-encoding: gzip\r\nage: 342\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3b9c02798c0fee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110999,"size_decoded":53675,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7fa3497aff1e370382bf66fda946a470","sha1":"e5cea017a7470586e915d64f73af5a17bbeddf0c","sha256":"2e0f95825722e556d92f560463897178f21237beac268e96c0eb84e7e41688b8","sha512":"5f15097862daf904e7b310f57797ce2d694cd12d24bc8ee8f838c620e781bf1ccf2c8c05937a47726af099d1429bf644971ee3a3f84ddbb35733f83ee7eb0662","ssdeep":"1536:e5Apa7++FlmSiSmw1hAFFDtXg+PET2yQgkBTSXRpBm3p374uXfd1H:e5UEH34jDicETEJTSXR3m3d4Y","tlshash":"5ab3f85023d8a9c4124f8f7c561f75e3fb189a7533841c8bc381fd943bba9a49ea1876","first_seen":"2026-03-13T13:48:48.621636Z","last_seen":"2026-09-19T21:57:04.114035Z","times_seen":17,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/entry/app.qTFwn96c.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:49.522Z","timestamp":1789497529522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /_app/immutable/entry/app.qTFwn96c.js HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ah0myd6aP4%2BdkR6gcdrAIIAtdH0bOOkc1HwSwD880XnHylqbBT7XpHv0WZoDosCcW5mBaTzQ04tuDmDrIJkg%2BSZvFf4dmKUiG4aHgrvo57a6QL07z7yLXJl4n0Op\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-6a44\"\r\ncontent-encoding: gzip\r\nage: 342\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3b9c027a8c2fee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27204,"size_decoded":14807,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26667)","md5":"f5a88c00eef8fd5e9411601c4ae4035a","sha1":"29a1ac6a85650eb134033e7374db86b1eaf1ffcf","sha256":"067d3a2673d5c0fa406af528fd76ce6f38fafa059626b1cc05f28ae9b0a717ef","sha512":"5139c5e2b8c6cda76d801ebe855e11681c18b99651bc65ab637c0581459a12805894378d045a328bab74d15380e61ff6fa87ddc413df7bf7e3ab87bf49ac1ce3","ssdeep":"768:ahtbrMugpyOzFSQq/XsqsCuCBiwCNtMoFsTwsPqcm:ahtbrMuOS7fJoNtMoFsZPq9","tlshash":"3bc21a5153c1f8d0228f8ef82b1f74e6ff18e97432440c8fe6852c857b679a49aa5c36","first_seen":"2026-03-13T13:48:48.643155Z","last_seen":"2026-09-19T21:57:04.118508Z","times_seen":18,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/RhyjyUZ6.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:49.526Z","timestamp":1789497529526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /_app/immutable/chunks/RhyjyUZ6.js HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6qiMJBK%2FicnS2Oifc1oTHdD2uOC%2B0CChIoOZODfdFvqbY8Aeqyp478eE1bkFoJG8dd13FVlW%2Bd%2FVMN%2BGDgulhDnhG2MFF%2FPeKa7pXiuZfC%2FBB%2BBYq2mwghwuTHSF\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-2889\"\r\ncontent-encoding: gzip\r\nage: 342\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3b9c027a8c5fee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10377,"size_decoded":6452,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5554)","md5":"efdb9746edd4236df0eccd72308a4ca8","sha1":"92bf62bc2aa0c698ec04e26edb3f6072795300b7","sha256":"d54388ca646480b7f59f3071fb51b76b9127544fb15304a3dfb2368215db3666","sha512":"77d23bd8ff7e03b12cd86df1746e655e3d1702edda16581b0638eafda5209fc1537fb48642de1e17c7901ae49b6d85ffcd0be81d65469ca26d23092e637e0eda","ssdeep":"192:hf5hyhza5WY7J5KFirxcOrKYyTLPIygxR3cXx6fWIGoIEi7Xp0v8+e+E1z:h2zQhlKTbIygxJCx6fjpiTp0E+VEz","tlshash":"5822f86823c4f8d4039f4eb83e2f75e6af15ba7433940c4bd640a85072e7294db99a77","first_seen":"2026-03-13T13:48:48.631305Z","last_seen":"2026-09-19T21:57:04.095625Z","times_seen":18,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/favicon.ico","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:49.699Z","timestamp":1789497529699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:50 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S%2Bfswl6zkDj9A9NnCEdotLxPPR9h0w9fGIZofBcx6yRC1wRpmSR%2Fv4DfIjMHtsMXn0sSdosaQ80tys%2B1PO01N%2BN9PZMl8uMd2rP651H%2FDbaLnN2UsA%2BNXMiTwcRQ\"}]}\r\ncontent-encoding: zstd\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a3b9c028a8dffee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":838,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-09-20T16:20:39.502335Z","times_seen":39532,"resource_available":true,"data":null}},"time_used":1036,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1036,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/assets/0.Cjp2xXua.css","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:52.351Z","timestamp":1789497532351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /_app/immutable/assets/0.Cjp2xXua.css HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zrbQO%2F191oCsQdwNaRA%2FZIU1cxgdzeY5fEeCF%2FQaHdh%2F9mfXRpCT%2FneZUdpJDl9eY8JhHNhccVMcwc949kGYwiIKLwOeNXHoaNHuRbq266BeqFAOr8YwbhybEk%2BR\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-6c86\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3b9c0393abdfee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27782,"size_decoded":7476,"mime_type":"text/css","magic":"ASCII text, with very long lines (27781)","md5":"8d98b06c4d1e43c7bbc58132a3c24ad0","sha1":"3d4a5e3abab8d5e5b0b0213b1a6d064c0e9ad7b1","sha256":"035d8a9a77e009c6a2763f81a389183ed0819e90e904a1a497edeea67a1a4135","sha512":"7806a3cd4c548a92443c9a0a460d721de705dad568d53eda220bcb45f5e4670461531e4ae978ea18a5f101fe70ae73b3a1305591dfec8bffabd7990d12007499","ssdeep":"384:HkNYt4Cg5whnTsYtA9AlS1XjStrkeF0XQ7rk4nx5q:f2whnTsYtZ0XjQkAlnx5q","tlshash":"2dc2b560f216cd7fec63a8e9a35cf41ca2197489de7912d9ff03220267d76f1096ba14","first_seen":"2026-03-10T09:27:25.232019Z","last_seen":"2026-09-19T21:57:04.105086Z","times_seen":17,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/nodes/2.Bm9Gjl7-.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:52.355Z","timestamp":1789497532355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /_app/immutable/nodes/2.Bm9Gjl7-.js HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aw2uKtVVDRgUQy5apL%2FNqYXnK36010CPavkAZCGF4cjW8CLMItb752yEnoltx32KCR2BhVap1MkQvC8D91Jz7M1pwh3EyMYcg0ac81qK6QbldAtLSLrmVRZH%2Fb0t\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-bafc0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3b9c0394ac0fee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T23:48:29.142551Z","times_seen":18575623,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/Cug65I-P.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:49.523Z","timestamp":1789497529523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /_app/immutable/chunks/Cug65I-P.js HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4sfz803d7NAjLI0wtN5vh84%2F6CzON83DsSYM8qvFzL3XzjMrjOhjtKo4kRTXqS%2BtrsqoTfJP15EOEuq8zHgW4qiQFkKj77ES92XbfLE5U2R6r1r3wMWvM7McFYCP\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-296e9f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3b9c027a8c3fee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2715295,"size_decoded":1359560,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"87aa79ad1118ac04990c4dcbf7c3a181","sha1":"26d7d32ba386173d6262aa6367b20f67016a2ed1","sha256":"48badf261061711ae039705058d2b9c4ddde76174be91f2478981efa07f64f87","sha512":"5f82d5041fbf9564bb92ab664592d57f95200947a36bf8d5cb83b1e28c061fa54a19bb86291771d249eb576a669ceaa09492bedee98a4b11fb199a108bb7da0e","ssdeep":"12288:P+Q3uCUz3OJDc1uxgg58q7O5qm37YaJYYiOSzOyeddGDI+PIBKwVFU:P+Qf3xgg58q7OF37JozadGXQRVFU","tlshash":"3e251a4203d089f5a2bf43a863d6a0e6bdd8be343550acd7d7c0ac7a6d095c0a5b2d77","first_seen":"2026-03-13T13:48:48.620668Z","last_seen":"2026-09-19T21:57:04.119195Z","times_seen":16,"resource_available":true,"data":null}},"time_used":1332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":941,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/CP9f0CAP.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:49.525Z","timestamp":1789497529525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /_app/immutable/chunks/CP9f0CAP.js HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zyL2C0nook%2B8OzJrssoCl%2BIGL6GC3MPmm6RwwCUml6XCuY0VkiftGxCtJlhiq6mQpBrcWuru35ZaaFByDKQk03OQvkaRJ4DhU4Q1OJGwCkGtEKV23W0Hu4hwhPh%2F\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-2c7f\"\r\ncontent-encoding: gzip\r\nage: 342\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3b9c027a8c4fee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11391,"size_decoded":6784,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11390)","md5":"cf9c1b6e39325ab24ee65e539c745947","sha1":"982d42eccd7e70802e9c766e86335ad10eae55cc","sha256":"31b9c86b1fa3e9501b29eef3da629d178208e317e2f7e529438f0d1f378bb990","sha512":"8212f3a9187a1049a09cb2d575011dbce8acd80f44a673c9ddbc7c511f076eccd143626b82f2fa38f7af911edd9b22bfc11028c1a43f5a92ea4c7029d1ebed76","ssdeep":"192:1KBR5iaruxHN1xComii58PTwdDc7nZVsF9tNMLGxVci/NlRlChU4dXyMkJKnkD1:YmvCPii58PT/7nYtNMiOmPChU4dXyMkF","tlshash":"8632a8a063c499d0214f9fec7a0e36e6fe159b7831941c4be7802d643abbec19d90677","first_seen":"2026-03-13T13:48:48.641Z","last_seen":"2026-09-19T21:57:04.120515Z","times_seen":18,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/nodes/0.CTPeAky5.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:52.348Z","timestamp":1789497532348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /_app/immutable/nodes/0.CTPeAky5.js HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MIOnGSuKZttIEK6EcbTBT8ex7Q4zD0eRseYXkUuMgKgHqqpkBQCi8wTKmJERiGbCISH9ZBC3AUPUnBWBEBnjXXPelcYRIMSowS%2BXa1aMyEu2lwSPhix2Tl00%2FaaK\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-13b5\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3b9c0393ab8fee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5045,"size_decoded":3699,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5044)","md5":"4801383a988754341949336adbbf37bb","sha1":"930fccac248ff4f2ce2475247127f52caff9e1fa","sha256":"c896cb1b18a13950b19b173ede4afa4f3386c52f61c49e64297590941f8715b8","sha512":"1692b1144f2ddd2b7180b0b625ab65f8ce6c86a09864b876fa5645632c4d3bc3feaee3f4b8a3843d00f762ce57513a23f9b6467fd046bb0c7373cd3d4e56feff","ssdeep":"96:dbJPXrkVSBm0289CdpGg7bfI2Iw1pjRW0DLy95BOqnTR4bSEg:dbJPNm0r9enHbn1pkyL8BlTyg","tlshash":"71a1ea282b8499c8337f58fc599e28d69f14e975b3d0184bd002b9817e57c98919df37","first_seen":"2026-03-13T13:48:48.624711Z","last_seen":"2026-09-19T21:57:04.096446Z","times_seen":16,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/Cdwg4PqX.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:52.349Z","timestamp":1789497532349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /_app/immutable/chunks/Cdwg4PqX.js HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3lcyt2H9LY%2BOmNBVv%2BealvjxR7bqPVD27NxzVrZP%2BcT27zuAhBlgIJpqD6VYnGzPwuoX%2BZVi%2F0HLuXJIe%2BrZQ8BcgvyMOJyQt5%2F5ntLMlHYYbrgXCkDON2Qhp3b%2B\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-85eb\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3b9c0393ab9fee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34283,"size_decoded":18394,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34282)","md5":"b2caf53b1a75c2e46d56e9d4b460a7e8","sha1":"38ab06bd948ea96284f2ec8170b5ad0d7ae2fcdc","sha256":"f564daba635189f9f508cedde91c2ebfc4856662021b0c8ccee0f6a33da27d2c","sha512":"8cee3a8b47d8a91d5edf3bc64d436195f4611387eef3a4a72945d8d20eed6c7c1a4f0d8076b1b1bae5f6443a76bab3c7aec8bc9faca2a67edfdd40445dd56234","ssdeep":"768:anZUY5yvCf1BwrFT7gZpvf0b1Tr79F+RcKtTBrKRB8PE:anZLFfQ5TcTvfw1Tr79F+RcK3ry","tlshash":"b6f2e82453c8a9d4124f8ff827ae64e2ff19a67c32c11c4fd681bd103bb25949ea1977","first_seen":"2026-03-13T13:48:48.615692Z","last_seen":"2026-09-19T21:57:04.098032Z","times_seen":16,"resource_available":true,"data":null}},"time_used":3125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":2713,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/assets/DemoCardLayout.DKxl9uYJ.css","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:52.358Z","timestamp":1789497532358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /_app/immutable/assets/DemoCardLayout.DKxl9uYJ.css HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:52 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mH%2BHDKrvPL7W0JjITYdn14jAFziwmONHMVnd9svHQZ3c5OHhrPyKYEM9EOviHZ4nqgfgQ%2BAIILYQXkQdWBx6Wvh4zr6CDFUfjU6cxKNHDSQbIwKyIFn%2BbdLfs6kO\"}]}\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69b27c63-d8\"\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3b9c0394ac2fee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":216,"size_decoded":912,"mime_type":"text/css","magic":"ASCII text","md5":"60358d1b8d754adfd87e82bb7d611cc5","sha1":"9c58a95207fb5146bf42d3ddd876a77ce6682819","sha256":"916224683a1e46e66721a17a40c94ffea14db0a626ae8468242f7f1eaab16a53","sha512":"7d53f31b6fa02805049fc5d294a115ecedafe491d122d55cf3d63e3b82edd32f69c28e2c8e80077298770e89c3c7e9cc2f4aa5c219bbe24ce4581d93219a9c9a","ssdeep":"","tlshash":"ded0c9a01625712ccda7b234f8f121d97c3c82a8bfb70a8e17503e699b99d452392e5d","first_seen":"2026-02-23T08:23:36.89008Z","last_seen":"2026-09-19T21:57:04.105861Z","times_seen":27,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/entry/start.EWrczbgO.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:49.513Z","timestamp":1789497529513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /_app/immutable/entry/start.EWrczbgO.js HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A6d6ec5jpyIgJgALo4LtcKImvcKsGBS38QcDXBMLISnFYOeRNwQU7aUTj8edxGfCHtEr60GJu%2F0xto44QJaaiyi44W%2F2x%2FUHF1y0%2B0jMWiZCCwsMbGOUPHuvsevm\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-b3d\"\r\ncontent-encoding: gzip\r\nage: 342\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3b9c02788bcfee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2877,"size_decoded":2511,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2876)","md5":"d4d85ba7f3007de7ad413d62b593f0d1","sha1":"115a646408e4450cc3d2d3c872c2e70e8219ab8e","sha256":"1d6e27d2618af28c06a74d4bb2c01195c03577975f4eea7b2caedccafe2c1435","sha512":"633aa712433275739d5c8067d68c14e72fe69846cd3093d1c10a54cec718617b4495a3621e9c329765e7a0dc35f6c820c720ee1e4852ab9f9b1f171139ac473e","ssdeep":"","tlshash":"2951b7ac2bcc60d00b7f5abe7e0e6de6ff08fa5876d1584a9180254034a26c9402ef37","first_seen":"2026-03-13T13:48:48.630407Z","last_seen":"2026-09-19T21:57:04.093631Z","times_seen":18,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/gs_-JJyD.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:49.520Z","timestamp":1789497529520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /_app/immutable/chunks/gs_-JJyD.js HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8fzQdTWQsrOfty7Y5s8rE7idMyjHSQsqeBbFWiMrTznWQltkQeAHKv0Qco7uzm%2FGeVDLU0Qacg5eu3R6jlnAGk63JTrD442stzwW%2B%2Bx5mv%2FpeDWDVdiztubmdaN6\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-e27\"\r\ncontent-encoding: gzip\r\nage: 342\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3b9c02798c1fee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3623,"size_decoded":2886,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3622)","md5":"7fb3b341d0d521d90434111893d7347e","sha1":"5253dd1977341d37a98447ace0bf52bc8ce05356","sha256":"939022c0c5e4682328f3cb9f5b8a1a0cd5f0685cbfc9f9ff6eb1f35cb3186399","sha512":"ae964cdd59ad0c0f4027aae6250b661ead93f8dbf0bd0d71824dc1ac22fe484fd518ca5b52c2aa50b01149d81d55c8ed11433033ddb41d47a646fdaed1f97ba0","ssdeep":"","tlshash":"c171c7b85bd0f8e4139f4fddab0f85d2bb55d97833881c0680882aa23d238d44146f3b","first_seen":"2026-03-13T13:48:48.627203Z","last_seen":"2026-09-19T21:57:04.100408Z","times_seen":18,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/DlfAXUo2.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:49.528Z","timestamp":1789497529528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /_app/immutable/chunks/DlfAXUo2.js HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3HiiEQy%2B%2BcWmfh5r11SeNior5H7pKdQdZA9Mm1mNsJCDCLtHImezt%2B9XPdu3Bgj83MF2Sj6z4e2Yd7oNiMlk8yOoItdUugdtgOYgEqgeX%2Bk2DeJf2coCcRO%2B633C\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-8c56\"\r\ncontent-encoding: gzip\r\nage: 342\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3b9c027a8c6fee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35926,"size_decoded":18927,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35925)","md5":"e05ed8a06cb69473ed9b05056b910e06","sha1":"25aae79ae6450a5018d38d6d572505738748941f","sha256":"01f9419495ac82ad25e42bd5e9e99caf832665901fa5cb75450ab2061a28c211","sha512":"0ab18af1060ea69d6973258d24677bb33e71ea2246b2ae2a84125fbb2369b1a43f1b5ab9de97166c847456765596af4a1c111525c6ca4576a056de8ebf0866ee","ssdeep":"768:GqlKBCQ+a1nfyH5Nh6eLILCO3T32LnoxE2lo5Pxf:dJIn6DFLIfD3in7xf","tlshash":"b5f2e65423c4e9d4325f8f7e765e71e2fb05aa7836c02c4ff280ac902a679d49ae1537","first_seen":"2026-03-13T13:48:48.632215Z","last_seen":"2026-09-19T21:57:04.116033Z","times_seen":18,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/C5osUxRC.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:49.532Z","timestamp":1789497529532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /_app/immutable/chunks/C5osUxRC.js HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QrRe%2BCl7obpdTKf0U6vIeSkv5Ee5tJnZSIMZhaiDy01%2FwyfhrS2KYrZUplcQJbPiWZWLNtM6Is2p50ivctwuNZkcXdNVCR18ydcYsfaR5Ma9vwEaoF3bXhcPuOis\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-2adf\"\r\ncontent-encoding: gzip\r\nage: 342\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3b9c027a8c8fee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10975,"size_decoded":6472,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10974)","md5":"212c530f8491ca56c4214de5b23c848c","sha1":"fd8c4ddae3d63071f19b9b57d9f133e8a9f7899f","sha256":"b00a61e8770785d857a7e00d8bd719235dbe8eea10286a06f5b9ee2f4ee33bdf","sha512":"25115bcf3275095cab0c5c81458d7d30e6697dcd69fecd97cc33dcf53ed5290b9ffba87639a2c9ddf6578bac196a6af5a611b8ce8de02cb923d3d1d793d6baad","ssdeep":"192:yzAPjKQ8mvQundiZgpnrpXEZdlLmAIh3u7S8XtgRzUFAujN9:yzgpyOMdLrIpu75ai9","tlshash":"dd32e89477c1f4d0132f5d9da11f78eafa28abb933484c5bd48278613a760958c92a3f","first_seen":"2026-03-13T13:48:48.619248Z","last_seen":"2026-09-19T21:57:04.11664Z","times_seen":18,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/nodes/1.DxKrjRyl.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:52.352Z","timestamp":1789497532352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /_app/immutable/nodes/1.DxKrjRyl.js HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e5GyPQp7bzFE2JyOeeNsofGnt2dXUv9nnAfyXpiCjkUWKPc54kmgPzqA7JdLT7CoamEws5fyl0F5FZn5rVgMSUtzahs%2F1gAL6VdWINbuB9s4RYTtZ9eVNEmy60Do\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-117e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3b9c0394abefee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4478,"size_decoded":3302,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4477)","md5":"0233c4d014521022562beaf2d6e59475","sha1":"3e141c549812652d976630aacfbd59bbdb27bf9a","sha256":"2089663428825bca38faa353e055d0a482325d8ef089df7e8068af355b7adf5b","sha512":"6900f48a159c82d944c4d6c0e9a67e53ae221ecaf5d2626356654c836eb58ce44b6787358df2dd9e671b96564765af5c3629be88fe3a2adaac582813978b75df","ssdeep":"96:aIy+lOCfw3HOnFR1OybFEPXUSZconsbFizZTHLsNmb3xtYqF:3y8GHm/1FmPXUSZx6ApHLskb31F","tlshash":"4491e9ecb7c4f4f0035f4ded8a0e2ee3e912a99934e5051ec48daa5036a35d05056f7b","first_seen":"2026-03-13T13:48:48.63781Z","last_seen":"2026-09-19T21:57:04.101068Z","times_seen":16,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/chunks/whI9QvV6.js","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:52.354Z","timestamp":1789497532354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /_app/immutable/chunks/whI9QvV6.js HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oHD9fBDZOpuMcS4TTaumRfaYu8zi%2FR2TbR0jZu%2BYUjzk%2BJN2R47ZRB3B5ivZg3lSjCgn9Yle5WKAQPSia%2Ffe3c0DqtHpTqmzjLOyqb46OtAbNJ7FcuiWsj7Q8mLv\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-e6e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3b9c0394abffee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3694,"size_decoded":2951,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3693)","md5":"195020ac4fa6fb9ee5bbf602a2b19d95","sha1":"d0296822ae69611b699b1b45d9d1e9598771fede","sha256":"205e2e50b7b3c99b57b9af1463f1342957a9ce8ed3d3e411f2e63ffd0352d8f5","sha512":"e9bd7918229c0f8d8269e8ba18dd06b6440fe99a5b6c1f0837a88d30f9226b3dd6d0b3d44f899cb1182680e1c624223b46dd6a50e98deadb2a21d096e4b52f73","ssdeep":"","tlshash":"6171a4ec67e2a4e4136f4eff1f27b0d99b56fa2137d44c8a84401c823b724a540a6f72","first_seen":"2026-03-13T13:48:48.628268Z","last_seen":"2026-09-19T21:57:04.119924Z","times_seen":16,"resource_available":true,"data":null}},"time_used":1461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kob-na.fit/_app/immutable/assets/2.z3d6Mcm1.css","fqdn":"kob-na.fit","domain":"kob-na.fit","tld":"fit"},"ip":{"addr":"172.67.214.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:52.359Z","timestamp":1789497532359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kob-na.fit","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:48:47 GMT","end":"Wed, 28 Oct 2026 15:46:35 GMT"},"fingerprint":{"sha1":"F4:2D:8C:C7:0A:8F:2C:FF:04:D9:0D:C7:76:2A:CC:46:B8:4F:D1:7A","sha256":"3F:E6:95:0F:20:C9:C9:A2:0C:23:9C:D7:52:83:80:61:66:6E:16:C8:B7:EE:E9:51:82:01:03:D2:07:C0:EC:79"}}},"request":{"raw":"GET /_app/immutable/assets/2.z3d6Mcm1.css HTTP/1.1\r\nHost: kob-na.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kob-na.fit/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:38:52 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XmJ3O%2F4aYarwbzb71FVp8H2WeGELKRhU0%2FHe8qfSHXXgHD8goCf%2BGYbG8GHF5i93E%2FNHYh%2F%2FE6Oe1EshVk8P5DrU73ep6TSGwPNpluUktVqIl3fFPl8OT1nn0a%2Bu\"}]}\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69b27c63-dc\"\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3b9c0394ac3fee2-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":220,"size_decoded":947,"mime_type":"text/css","magic":"ASCII text","md5":"a3eef41adc2fb97e4851229d70270d30","sha1":"ab0d1123430642fd914277c4ff0aedc4062a515d","sha256":"a05320bf19ebd42145280e99208353e2689952c2c18a96fa2a78ff3cb6f97284","sha512":"a3d47bfd047b64297e82314bed42f7925bc5d4faf52a6b0129d92dcd2eb3f23e2cb6aaec6f19ae63996010b4bbe078905b9f79c8a3ebea595555bd68ddee57e8","ssdeep":"","tlshash":"a5d0a75a7749011fc4072fb5f9b89504454b9cd16d320ce321c174940a04fc2b3b6a1d","first_seen":"2026-02-03T14:46:57.686408Z","last_seen":"2026-09-19T21:57:04.098962Z","times_seen":29,"resource_available":true,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"kob-na.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"kob-na.fit","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://zws2.web.telegram.org/apiws","fqdn":"zws2.web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kob-na.fit/","date":"2026-09-15T18:38:52.340Z","timestamp":1789497532340,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /apiws HTTP/1.1\r\nHost: zws2.web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kob-na.fit\r\nSec-WebSocket-Protocol: binary\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: elK72SC8EBl1M8gaG3bvPQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.30.1\r\nDate: Tue, 15 Sep 2026 18:38:52 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: ShW9bZuVwy9W8Ouwjp3+EpN0YwA=\r\nSec-WebSocket-Protocol: binary\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":220,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T23:48:29.142551Z","times_seen":18575623,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":75,"connect":89,"send":0,"wait":32,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}